Privacy policy

Last updated: October 20, 2026

Scani El Menu ("we") provides digital menus for cafés and restaurants. This policy explains what data we collect, why, and your rights, in accordance with Tunisian Organic Law no. 2004-63 of 27 July 2004 on the protection of personal data.

1. Data controller

[Company name], [legal form], tax ID [MF], [address], Tunisia. Contact: hello@scanielmenu.tn.

2. Business user data (accounts)

When you create an account: first name, last name, email address, password (stored only as an irreversible hash), preferred language.

For your venue: name, type, address, city, governorate, postal code, phone, social links, opening hours, the Wi-Fi password you choose to display, menu content and photos.

For invited team members: first name, last name, email and role.

3. Data of guests viewing a menu

Guests need no account. We measure audience anonymously: date and time of the visit, display language, origin (QR code or link) and a random identifier stored in the browser to count unique visitors.

We do not store names, phone numbers, IP addresses or precise location. Bots and the owner's own visits are not counted.

4. Purposes

Providing the service (displaying and managing menus), securing accounts, sending essential emails (email confirmation, password reset, invitations), producing analytics for the venue, answering your messages and improving the service.

We never sell your data and show no advertising.

5. Processors

Application and database hosting: [host, country].

Cloudinary (photo storage and optimisation), Brevo (transactional emails), Google Gemini (translations and descriptions generated on your request: only menu texts are sent, never your personal data).

These providers may be located outside Tunisia; we only share what is strictly necessary, in line with articles 50 et seq. of law no. 2004-63.

6. Cookies and local storage

A secure session cookie (signing in to your dashboard), cookies remembering your language and active venue. On public menus: a random identifier in local storage for anonymous analytics. No advertising or third-party tracking cookies.

7. Retention

Account data: while the account is active, then 12 months after deletion for legal obligations. Analytics: 24 months. Photos and menus: deleted with the venue. Reset links: 1 hour; invitations: 7 days.

8. Security

Encrypted connections (HTTPS), hashed passwords, single-use tokens, permission checks on every action, login rate limiting, regular backups.

9. Your rights

You have the right to access, correct, object to and delete your data. Most of it can be edited directly in your dashboard. For any other request or to delete your account: hello@scanielmenu.tn from your account's address. We reply within 30 days.

You may also contact the Tunisian data protection authority (INPDP) — www.inpdp.nat.tn.

10. Changes

We will notify you by email of any significant change to this policy.