Last updated 29 September 2026.
There are no accounts. We do not ask for your name, email address, location or dietary preferences.
The app creates a random identifier on install. It is sent with a menu photo only to rate-limit abuse. It is not linked to you, device hardware, advertising or tracking.
To stop others from misusing our server, each scan also carries a short-lived token from Firebase App Check, using Apple App Attest or Google Play Integrity. It only proves the request comes from the real MenuLango app on a genuine device. It contains no personal information and is not used for tracking.
When you scan a menu, its photo is sent to our server, which runs on Cloudflare, and to Google's Gemini API, only to read and explain that menu. Our server does not store the photo. Google may keep it for a limited time to detect abuse and does not use it to train its models.
When you open a dish, the app may show a photo of how it is typically served. Our server looks it up on Wikipedia and Wikimedia Commons by the dish's name and passes the image on, so your phone never contacts Wikimedia itself. Photos are shown with their author and licence.
If you use "Share with your table" (part of MenuLango Plus), the menu's explanations are stored on our server for 24 hours under a random link, so the people you give it to can open it. Anyone with the link can read it during that time. Your photo, your picks and anything about you are never included. After 24 hours it is deleted automatically.
MenuLango never uses your location. Where a menu seems to come from is worked out from the menu itself.
Your scanned menus, their photos and the choices you make are stored on your device so you can reopen them offline. Deleting the app deletes them.
Waiter-note translation happens on your device. Your dietary preferences, diners, picks, quantities and notes stay on your device.
You can create an encrypted backup file protected by a passphrase you choose. It stays with you: you choose where to share or store it, and we never receive the file or its passphrase.
Purchases are processed by Apple or Google and managed through RevenueCat. We do not see your payment details.
MenuLango contains no advertising, no analytics SDK and no third-party tracking.
Allergen information is an estimate of what a dish usually contains. It is never a guarantee. Always ask the restaurant if you have an allergy.
Questions about this policy: menulango@gmail.com.