Privacy Policy
Last updated 27 July 2026 · Version 1.0
Menu Hunter is a community-built catalog of restaurant menus in the Philippines. This policy explains what personal data we collect, why, and what you can do about it. We handle personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
The short version. You can browse menus without an account. If you make an account we keep your email, display name and whatever you choose to contribute. We do not sell your data. You can export or delete your account at any time, from inside the app or at menu-hunter.com/delete-account.
1. Who is responsible for your data
Menu Hunter operates the menu-hunter.com website and the Menu Hunter mobile apps, and is the personal information controller for the data described here. For any privacy question or to exercise the rights in section 8, contact our Data Protection Officer at privacy@menu-hunter.com.
2. What we collect
| Data | When | Why |
|---|---|---|
| Email address, password (hashed), display name | When you register | To create and secure your account |
| Phone number, city | Optional, if you provide them | To show nearby menus and, for orders, so a restaurant can reach you |
| Menu photos you upload, plus text extracted from them | When you contribute | To build the public menu catalog |
| Reviews, ratings and favourites | When you post or save | To show your contributions and personalise your lists |
| Approximate location | Only if you grant the permission | To sort restaurants by distance. We use it for the request and do not store a location history |
| Order details: name, phone, delivery address, items | When you place an in-app order | To pass the order to the restaurant so they can prepare and deliver it |
| Business permit and valid ID | When a restaurant owner claims a listing | To verify the claim is genuine. See section 6 |
| Device and log data: IP address, app version, timestamps, error reports | Automatically | Security, abuse prevention and fixing crashes |
We do not collect sensitive personal information as defined by RA 10173, and we do not knowingly collect data from children under 13.
3. Consent
When you register we ask you to agree to this policy, and we record the date and the policy version alongside your account. If we materially change how we use personal data we will publish a new version and ask you to consent again the next time you open the app.
4. How we use your data
- To operate your account and keep it secure.
- To publish the menu content you contribute. Note that contributed menu photos are public.
- To pass in-app orders to the restaurant you ordered from.
- To check contributed photos automatically for legibility and to detect fake or unusable submissions.
- To send you transactional messages: password resets, deletion confirmations and order updates.
- To detect abuse, spam and fraud, and to comply with legal obligations.
We do not use your personal data for automated decisions that have a legal effect on you, and we do not sell or rent personal data to anyone.
5. What other people can see
Your display name and your contributions (approved menu photos, reviews and ratings) are visible to other users. Your email address, phone number and exact location are never shown publicly. Your favourites are private to you.
6. Restaurant owner verification documents
To claim a listing, an owner uploads a business permit and a valid ID. These are treated differently from everything else:
- They are stored outside the public web root and are never served publicly.
- Only authorised reviewers can view them, through an authenticated admin endpoint.
- Once the claim is approved or rejected, the files are deleted from storage and we retain only the timestamp recording that deletion. This is data minimisation as required by RA 10173.
7. Sharing and disclosure
We share personal data only in these situations:
- With a restaurant you order from — your name, phone number, order and, for delivery, your address. They need it to fulfil the order and are responsible for their own handling of it.
- With service providers that host our servers and storage, and that deliver our transactional email, strictly to provide the service on our behalf.
- With app stores — Google Play and the App Store process subscription payments for restaurant owners. Menu Hunter never receives or stores your card details.
- When legally required, in response to a lawful order, or to protect rights and safety.
In-app orders are settled directly with the restaurant in cash or through the shop's own e-wallet. Menu Hunter does not process payments for orders and never holds your funds or card data.
8. Your rights under RA 10173
You have the right to be informed, to object, to access, to rectify, to erase or block, to damages, and to data portability. In practice:
- Access and portability — request a machine-readable copy of your data from the app (Profile → Download my data), or by emailing us.
- Correction — edit your profile in the app, or ask us.
- Erasure — delete your account in the app (Profile → Delete account) or at menu-hunter.com/delete-account. See section 9 for exactly what happens.
- Complaints — if we have not resolved your concern, you may complain to the National Privacy Commission (privacy.gov.ph).
9. Deleting your account
Deletion is permanent and cannot be undone. When you delete your account:
- Your email address, display name, phone number, city and avatar are erased.
- Your reviews, ratings and favourites are deleted.
- Photos you submitted that were never published are deleted.
- Any order still in progress is cancelled, and your name, phone number and delivery address are removed from all of your past orders.
- Menu photos of yours that were already published stay in the public catalog, but are no longer linked to you or to any identifying information. They are menu information about a restaurant, other users rely on them, and once detached they no longer identify you.
- Restaurants keep the non-identifying totals of completed orders, because they are required to keep their own sales records.
We keep a record that a deletion happened, storing only a one-way hash of the email address. This lets us prove we honoured the request without keeping the identity we were asked to erase.
10. Retention
We keep account data for as long as your account exists. Verification documents are deleted as soon as a claim is decided (section 6). Security and access logs are kept for up to 12 months. Deletion audit records are kept indefinitely in the hashed form described above.
11. Security
Passwords are stored using bcrypt hashing and never in plain text. Traffic to menu-hunter.com is encrypted with HTTPS. Access to production data is restricted to authorised personnel. Verification documents are stored outside the public web root. No system is perfectly secure, but if a breach affects your personal data we will notify you and the National Privacy Commission as RA 10173 requires.
12. Where your data is stored
Our servers and storage are operated on our own infrastructure. If we ever transfer personal data outside the Philippines we will ensure comparable protection as required by RA 10173.
13. Changes to this policy
We will post any revision on this page with a new version number and date, and ask for renewed consent in the app when the change is material.
14. Contact
Data Protection Officer — privacy@menu-hunter.com
General support — support@menu-hunter.com