AleMenu Privacy Policy

2. Purposes and Legal Basis of Processing

Personal data is processed for the following purposes:

• Providing electronic services: Enabling account creation, logging in and using food ordering functionalities (Basis: art. 6(1)(b) GDPR - processing is necessary for contract performance).

• Communication with the user: Sending system notifications and handling support requests (Basis: art. 6(1)(f) GDPR - legitimate interest of Administrator).

• Fulfilling legal obligations: E.g. storing data for accounting and tax purposes (Basis: art. 6(1)(c) GDPR).

3. Categories of Processed Data

We process the following data:

• Email address (used as login identifier).
• First and last name (to identify order).
• Order history.
• Technical login data (IP address, unique device identifier).
• Push notification tokens (to send order reminders).

4. Data Recipients

Personal data may be transferred to trusted third parties only to the extent necessary for proper operation of Application, including:

• Hosting providers and IT infrastructure providers (cloud data storage within EEA).
• Notification system providers (e.g. Expo Notifications).
• Partner restaurants (only data necessary for order fulfillment).

5. Data Retention Period

Data is stored until user deletes their account or termination of cooperation with Administrator. Billing-related data may be stored for period required by tax law (usually 5 years).

6. Your Rights (GDPR)

Every user has the right to:

• Access to data and getting a copy.
• Rectification (correction) of data.
• Erasure of data ('right to be forgotten').
• Restriction of processing.
• Data portability.
• Lodge an complaint with supervisory authority.

7. Storage Mechanisms (Cookies and Local Storage)

Application uses Local Storage and Secure Store for storing session tokens necessary to keep user logged in. These are strictly functional mechanisms. We don't use cookies for marketing or profiling.