Your content is yours.

To operate OnlyMenu IO we store: your email address (for sign-in), a display name you provide, catalog and product records, and encrypted media you upload. Product names, descriptions, prices, images, videos, and messages are encrypted on your device before upload and stored as opaque ciphertext.

We do not sell personal data. We do not build advertising profiles. We do not read the contents of your catalogs or your messages — they are encrypted with keys we never see.

We use strictly-necessary cookies for authentication and session management. We may use privacy-preserving product analytics to understand aggregate usage; we do not use third-party ad trackers.

OnlyMenu IO uses Cloudflare (edge hosting) and Supabase (managed database and storage). Data stored with subprocessors is either metadata required for platform operation or end-to-end encrypted ciphertext.

You can delete individual products, messages, and catalogs at any time. Deleting your account removes your profile, memberships, and the storage objects you own. Because content is end-to-end encrypted, deleting the encryption keys effectively renders associated ciphertext unreadable.

You may request an export of your account data or a full account deletion from the Account screen inside the app. We respond to verified requests within a reasonable period.

Questions about privacy? Email privacy@onlymenu.io.