Privacy Policy for OMF Maker

1. Introduction

Welcome to OMF Maker ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services (collectively, the "Service"). OMF Maker helps businesses create and manage digital menus using the Open Menu Format standard.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number
• Business Information: Business name, description, address, logo/images
• Menu Content: Product names, descriptions, prices, categories, images
• Profile Data: User preferences and settings

2.2 Information Collected Through Google Authentication

2.3 Automatically Collected Information

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: App features used, time spent in app, user interactions
• Technical Data: IP address, browser type, app version, crash reports

2.4 Information from Third-Party Services

• Supabase Analytics: Usage statistics and performance metrics
• Error Reporting: Crash logs and error reports for app improvement

3. How We Use Your Information

3.1 Core Service Functions

• Creating and managing your OMF Maker account
• Storing and organizing your business and menu data
• Generating menu outputs (print, digital, web formats)
• Providing customer support and technical assistance

3.2 Service Improvement

• Analyzing usage patterns to improve app functionality
• Developing new features and template options
• Ensuring app security and preventing fraud
• Personalizing your experience with relevant templates

3.3 Communication

• Sending service-related notifications and updates
• Responding to your inquiries and support requests
• Providing important account and security information

4. Information Sharing and Disclosure

4.1 We DO NOT Sell Your Personal Information

4.2 Limited Sharing Scenarios

We may share your information only in these specific circumstances:

Service Providers:

• Supabase (database hosting and authentication)
• Google (authentication services)
• Cloud storage providers (for image hosting)

Legal Requirements:

• When required by law, court order, or government request
• To protect our rights, property, or safety
• To prevent fraud or security threats

Business Transfers:

• In connection with a merger, acquisition, or sale of assets (with notice to users)

4.3 Open Menu Format (OMF) Data

• Your menu data follows the open OMF standard
• You retain full ownership of your business data
• Data can be exported in OMF format at any time
• Social features are opt-in only (if implemented)

5. Data Security

5.1 Security Measures

• Encryption of data in transit and at rest
• Secure authentication through Google OAuth 2.0
• Regular security audits and updates
• Access controls and user permission management

5.2 Supabase Security

• Data stored on Supabase with enterprise-grade security
• Row-level security policies protecting your business data
• Regular backups and disaster recovery procedures

6. Your Privacy Rights

6.1 Access and Control

• View: Access your personal information and menu data
• Update: Modify your account and business information
• Delete: Request deletion of your account and associated data
• Export: Download your data in OMF format

6.2 Google Account Integration

• Disconnect: Remove Google account connection at any time
• Permissions: Review and modify Google account permissions
• Data Access: Control what Google information we can access

6.3 Communication Preferences

• Opt out of promotional communications
• Control notification settings within the app
• Manage email preferences in your account settings

7. Data Retention

7.1 Active Accounts

• We retain your information while your account is active
• Menu and business data stored for service functionality
• Usage data retained for app improvement purposes

7.2 Account Deletion

• Personal information deleted within 30 days of account closure
• Some data may be retained for legal compliance (anonymized)
• Backup systems may retain data for additional 90 days

8. International Data Transfers

• Data may be processed in countries outside your residence
• We ensure appropriate safeguards for international transfers
• Supabase provides global data protection compliance

9. Children's Privacy

• OMF Maker is not intended for users under 13 years old
• We do not knowingly collect information from children under 13
• If we discover child data collection, we will delete it promptly

10. Third-Party Links and Services

• Our app may contain links to third-party websites or services
• This Privacy Policy does not apply to third-party services
• We encourage reviewing privacy policies of linked services

11. Changes to Privacy Policy

• We may update this Privacy Policy periodically
• Users will be notified of material changes via email or app notification
• Continued use after changes constitutes acceptance of new terms

12. Contact Information

13. Regional Privacy Rights

13.1 California Residents (CCPA)

California residents have additional rights including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (Note: We do not sell personal information)

13.2 European Union Residents (GDPR)

EU residents have rights including:

• Right of access, rectification, and erasure
• Right to data portability
• Right to object to processing
• Right to withdraw consent

13.3 Exercising Your Rights

Contact us using the information above to exercise your privacy rights. We will respond within the timeframes required by applicable law.