OverMenu Privacy Policy
OverMenu is an iPhone app by Monoleaf that translates restaurant menus. This policy explains what the app sends, who handles it, and what is kept.
The short version
- There is no account, no advertising, no tracking, and no analytics SDK. We never sell your data or share it for advertising.
- Your menu photos, translations, and questions stay on your iPhone. Our server passes them to Google’s Gemini to do the translation and does not store them.
- Our server keeps only usage numbers, tied to a random ID for your copy of the app, for up to 90 days, to control cost and keep the service running.
What stays on your iPhone
- The menu photos you take or pick, the translated menus, dish details, and your questions and answers. The app keeps your last 50 meals and deletes older ones. Deleting the app deletes all of it.
- Your settings, such as the language to translate into and the appearance.
- A random ID made when you first open the app (the install ID). It is not linked to your name, your Apple Account, or any identifier of your device.
What the app sends, and why
The app sends something only when you ask it to:
- Reading a menu: the photo and the language you translate into.
- Explaining the dishes: the photo, the list of dishes found on it, and the language you translate into.
- Answering a question: your question, the earlier questions and answers about the same meal, the meal’s menu text and dish details, and the language you translate into.
Each request also carries the install ID, a random ID for the meal, and a key that is the same in every copy of the app, so our server can tell its requests apart from others. Requests travel encrypted (HTTPS) to our server, which runs on Cloudflare. The server forwards the content to Google’s Gemini API, which produces the translation or answer, and sends the result back to the app.
What our server keeps
- No content. The server does not store photos, menus, questions, or answers, and its logs contain none of them.
- A daily count per install ID of today’s requests, to apply daily limits. Each day’s count replaces the previous one.
- A usage record per request: the install ID, the meal ID, the kind of request, the AI model, how much text and image it processed, its cost, how long it took, whether it succeeded, and when. We keep these for up to 90 days and use them only to track cost and reliability.
- Technical logs: Cloudflare keeps standard logs of requests to our server, such as the time, the outcome, and network information like the IP address, for up to 7 days. Our server itself does not record your IP address.
Who else handles your data
- Google processes the content of each request through the Gemini API. We use Google’s paid service: under Google’s terms, Google does not use this content to improve its products, and keeps it for up to 55 days only to detect abuse and meet legal requirements. See the Gemini API Additional Terms of Service.
- Cloudflare runs our server and this website and handles network data, such as IP addresses, to deliver requests. See the Cloudflare Privacy Policy.
- Apple provides TestFlight and the App Store. If you send beta feedback or crash reports, Apple passes them to us under the Apple Privacy Policy. When you ask a question by voice, Apple’s speech recognition turns it into text, on your iPhone when it supports this and otherwise on Apple’s servers. We never receive your voice. Pronunciation uses the voices built into your iPhone.
Permissions
- Camera: to photograph menus.
- Photos: to open the one photo you pick. The app does not read the rest of your library.
- Microphone and Speech Recognition: only when you ask a question by voice.
You can turn any of these off in the iPhone’s Settings app.
Your choices
Deleting the app deletes everything it kept on your iPhone. What our server keeps holds no content and no name or contact details, so we cannot tell which records are yours; they expire within 90 days. For any question or request about your data, write to us at the address below.
Children
OverMenu is not directed to children under 13, and we do not knowingly collect personal information from them.
Changes
If this policy changes, we will update this page and its effective date.