Privacy Policy for OMF Maker

1. Introduction

Welcome to OMF Maker (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services (collectively, the “Service”).

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number
• Business Information: Business name, description, address, logo/images
• Menu Content: Product names, descriptions, prices, categories, images
• Profile Data: User preferences and settings

2.2 Information Collected Through Google Authentication

2.3 Automatically Collected Information

• Device Information: Device type, OS, identifiers
• Usage Data: Features used, time spent, interactions
• Technical Data: IP, browser, version, crash logs

2.4 Information from Third-Party Services

• Supabase Analytics: Usage statistics
• Error Reporting: Crash and error reports

3. How We Use Your Information

3.1 Core Service Functions

• Create/manage your account
• Organize business/menu data
• Generate menus in multiple formats
• Support and technical help

3.2 Service Improvement

• Usage analysis
• New features
• Security improvements
• Template personalization

3.3 Communication

• Service updates
• Support replies
• Account/security notices

4. Information Sharing and Disclosure

4.1 We DO NOT Sell Your Personal Information

4.2 Limited Sharing Scenarios

• Service Providers: Supabase, Google, image hosts
• Legal: When required by law or to prevent harm
• Transfers: Mergers or acquisitions (with notice)

4.3 Open Menu Format (OMF) Data

• Your data follows OMF standard
• You own your data and can export it anytime
• Social features are opt-in

5. Data Security

• Encryption in transit and at rest
• Secure Google OAuth
• Regular audits
• Supabase RLS and backup policies

6. Your Privacy Rights

• View/update/delete/export your data
• Manage Google connection
• Control notifications and emails

7. Data Retention

• Kept while account is active
• Deleted 30 days after closure
• Backups retained up to 90 days

8. International Data Transfers

• Data may be processed outside your country
• We ensure legal safeguards

9. Children’s Privacy

• Not for users under 13
• We don’t knowingly collect child data

10. Third-Party Links and Services

• Links may lead to outside services
• We aren’t responsible for third-party privacy

11. Changes to Privacy Policy

• We may update this page
• We’ll notify users of major updates

12. Contact Information

13. Regional Privacy Rights

13.1 California Residents (CCPA)

• Right to know, delete, and opt-out

13.2 EU Residents (GDPR)

• Right to access, portability, withdraw consent

13.3 Exercising Rights

Contact us using the info above. We’ll respond in the time required by law.