Privacy Policy

This Privacy Policy explains how the VeganMenu mobile application (the “App”) processes user data.

The App allows you to browse and search plant-based products. It does not require an account or sign-in, does not sell goods, and does not display ads.

1. What information do we collect?

The App does not collect personal data such as your name, email address, or phone number.

To maintain quality and stability, we may process the following technical information:

• Crash reports and diagnostics provided by Firebase Crashlytics (e.g., device model, OS version, app version, stack traces).
• Technical logs produced by the App (e.g., errors while downloading the product database or images). These logs do not contain your search terms, except when the term itself directly triggers an error—in which case it may appear as part of the error message.
• Approximate location data (if permission is granted) — used solely to show nearby stores and points of sale. This data is not stored or sent to our servers.

2. How do we use this information?

• To diagnose issues and improve stability of the App (based on crash reports).
• To deliver catalogue updates (the App periodically downloads a remote product database and image thumbnails).
• To display nearby stores based on your current or last known location (only if you have granted location access).

3. Data processed locally on your device

• Search runs locally on your device. Your query is not sent to a server.
• Downloaded product database and image cache are stored locally and can be removed by uninstalling the App or clearing its data.
• Location data (e.g., last used GPS coordinates for nearby store search) is processed locally, not stored permanently, and not shared with third parties.

4. Data sharing

We do not sell or share user data with third parties for marketing purposes. The technical data described above may be processed by our vendors solely on our behalf:

• Google LLC (Firebase Crashlytics) – crash reporting and diagnostics.
• Google Cloud / CDN – hosting the database file and thumbnails.
• Operating system location services (Android / iOS) – handle user consent and access to the device’s current location. The data is not transmitted outside your device.

Processing is based on our legitimate interests in ensuring the security and quality of the App (Article 6(1)(f) GDPR), and in the case of location features — on the user’s consent (Article 6(1)(a) GDPR), which can be withdrawn at any time in your device settings.

5. Security

We apply appropriate technical and organisational measures to protect data against unauthorised access. Please note that Internet transmission can never be fully secure.

6. Retention

Crash reports and diagnostics are stored for the time necessary to analyse and improve the App and are then deleted or anonymised according to our providers’ practices (e.g., Firebase Crashlytics). Location data is not retained after the App is closed.

7. Your rights

Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict, object to the processing of your data, or request data portability. To exercise your rights, contact us (see: Contact). Note that we usually do not hold data that directly identifies you (no accounts are created).

8. Children’s privacy

The App is not directed to children under the age of 13/16 (depending on the country) and does not knowingly collect their personal data.

9. Changes to this Policy

We may update this Policy. The updated version will be published with the effective date on this page.

10. Contact