Privacy Policy

Controller: Digmenu, Republic of Kosovo

Contact: info@digmenu.app

We collect only what is needed to provide and improve the Service:

• Account and contact data: email address, password (hashed), business name, and other details you provide when registering or contacting us.
• Menu and business data: menu items, prices, images, QR codes, and settings you create.
• Usage and device data: IP address, browser/app type, device information, pages visited, and logs (for security, analytics, and debugging).
• Payment data (Pro Plan): handled by our third-party payment processor; we do not store your full card details.

We use your personal data to:

• Provide, maintain, and improve the Service (including creating and hosting your digital menus and QR codes).
• Communicate with you (account notices, support replies, billing emails, important updates).
• Process payments and manage subscriptions for the Pro Plan.
• Monitor and enhance security, prevent fraud, and comply with legal obligations.
• Understand how the Service is used (analytics) to improve performance and features.

We process your data based on:

• Contract performance: to provide the Service you requested.
• Legitimate interests: for security, analytics, fraud prevention, and service improvement.
• Legal obligations: for tax, invoicing, and record-keeping duties.
• Consent: where required by law (e.g., certain non-essential cookies or marketing, if used).

We do not sell your personal data. We share it only with:

• Service providers who process data on our behalf (e.g., hosting, email delivery, payment processing, analytics) under strict data-processing agreements.
• Authorities when required by law or to protect our rights, safety, or the safety of others.

All third-party processors are required to protect your data and use it only as instructed by us.

We keep your personal data only as long as necessary:

• Account and menu data: while your account is active and for a short period after deletion (e.g., backups).
• Billing and invoice data: as required by applicable tax and accounting laws (typically several years).
• Logs and analytics: for a limited period needed for security and improvement, then deleted or anonymized.

Under applicable data protection laws (including Kosovo’s law), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data, where allowed.
• Restrict or object to certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact us at info@digmenu.app. We will respond within a reasonable time (typically within one month).

We use appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

Some of our service providers may process data outside Kosovo. We ensure that such transfers are protected by appropriate safeguards (e.g., contractual clauses) in line with applicable data protection laws.

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If we learn that we have done so, we will take steps to delete that information.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The updated policy will show a new “Effective date.”

For any privacy questions or requests, contact us at:

See also our Terms and Conditions.