Privacy
Umenio serves two groups of people, and the rules differ for each. Restaurants are our customers — they decide what goes into the system. Diners are their guests — we hold a diner's details on the restaurant's behalf, not our own.
Your Business, Your Data
We believe your restaurant's data belongs to you. We only host the information necessary to keep your digital menu and dashboard running smoothly.
What We NEVER Access or Store
Your Money and Payment Details: We do not intercept your funds, nor do we store or have access to your customers' credit card numbers or bank details. Any online transactions are securely encrypted and handled entirely by external payment gateways, while cash operations remain strictly between you and your diners.
Your Business Intelligence: We never monitor, mine, or sell your operational records, sales volume, or customer habits to third parties or competitors. Your success is your private business.
Your Passwords & Biometrics: We use modern, secure authentication. If a staff member uses a passkey, we only store the public credential — we never have access to readable passwords, Face ID, or fingerprint data.
Ownership of Your Content: Your menu, your photographs, and your brand identity belong 100% to you. We simply provide the canvas.
What We Host (to keep your Umenio platform running)
Account & Staff Details: Basic information required for login and access control, including names, phone numbers, email addresses, and assigned branch roles.
Your Menu Architecture: Everything you actively input to build your platform, including items, prices, categories, styling, tables, inventory settings, and discounts.
Your Dashboard Records: The operational history required for your Kitchen Display System and management dashboard to function, such as live orders, payment statuses ("Paid" versus "Unpaid"), uploaded receipts, and an audit log of staff actions.
What we collect about diners
A diner ordering from a table is signed in anonymously — no account, no name required. What we record is the order itself, the table, and the language chosen.
If a diner gives a phone number, name, or delivery address — for a delivery, a reservation, a waitlist place, or an order they want to track — that goes into the restaurant's own customer directory. It belongs to that restaurant. We do not pool it across restaurants, sell it, or use it to market anything.
A payment receipt a diner uploads is stored privately and is readable only by that restaurant's staff.
Artificial intelligence, and what leaves our systems
When you import a menu from a photo or PDF, that image is sent to Google (Gemini) to be read. If a second pass is enabled, an anonymised version of the extracted text may also go to Anthropic (Claude) to fill in bilingual gaps and tidy descriptions. Translation between Arabic and English uses the same Google service.
We send menu content — dish names, descriptions, prices, and the picture of the page. We do not send diner details, order history, or customer records to any AI provider.
These providers process the request and return a result. Treat anything you photograph as leaving our systems: if a page of your menu has a handwritten note on it you would not want read, remove it first.
Where it lives, and for how long
Data is held in our managed database and file storage. Access is enforced at the database itself, not merely in the application: a member of one restaurant cannot read another's rows, and a diner can read only what a public menu is meant to expose.
Operational records — orders, receipts, audit entries — are kept while the account is active and for a reasonable period afterwards, because they are also a restaurant's own trading records. Menu content is deleted when you delete it.
Ask us to close an account and we will delete or return its data. Tell us what you want and we will say what is possible before we do anything irreversible.
Your rights
Under Egypt's Personal Data Protection Law (No. 151 of 2020), and under the GDPR where it applies to you, you may ask for a copy of your personal data, ask us to correct it, ask us to delete it, or object to a particular use.
If you are a diner, the restaurant you ordered from is the one that decides about your data; we act on its instructions. Ask the restaurant first. Write to us and we will help you reach them, and act ourselves where the request is properly ours.
Write to contact@umenio.com. We answer within thirty days.
Security
Traffic is encrypted in transit. Staff can sign in with a passkey, and privileged actions can require a second factor. Access to the sensitive parts of the platform is logged.
No system is perfect, and a claim otherwise would be a marketing line rather than a fact. If we discover a breach affecting your data we will tell you promptly and tell you what we know.
Terms
These terms govern your use of Umenio. Using the product means accepting them. If you are agreeing on behalf of a restaurant, you are confirming you may bind it.
What the service is
Umenio gives a restaurant a digital menu, a way for guests to order, a kitchen display, and the tools around them. We provide software. We do not cook, deliver, or handle your money.
Accounts
You are responsible for what your team does with their accounts, for the accuracy of what you publish, and for keeping credentials safe. Tell us promptly if you believe an account has been compromised.
Plans, trials and payment
Plans and prices are shown on the pricing page. A free trial runs for the period stated at signup and needs no card to begin.
Subscriptions run for the period you choose and renew unless cancelled. Cancel and you keep access to the end of the period already paid for. We do not pro-rate a partial period.
Features that are described as included in a plan but not yet released are marked as such where we know it. If a plan you buy depends on a feature that has not shipped, tell us before you buy and we will be straight with you about timing.
Your content
Your menu, your photographs, your branding and your data remain yours. You grant us only the licence needed to host them, show them to your guests, and process them as the privacy section describes.
You are responsible for having the right to use what you upload — photographs in particular.
Menu accuracy and allergens
You are responsible for the accuracy of your menu: prices, ingredients, allergen information, and availability. AI menu import is a drafting aid and it makes mistakes. Nothing is published until you approve it, and reviewing it is your job, not ours.
This matters most for allergens. Check every extracted item before you go live, and check again after any bulk change.
Orders and payment between you and your guests
An order placed through Umenio is a contract between the restaurant and the guest. We are not a party to it, not the merchant of record, and not a payment processor.
Where a guest pays by Instapay or cash, the money moves directly between guest and restaurant; the product records the state of that payment and stores a receipt image, nothing more. Refunds, disputes and tax on those transactions are yours to handle.
Acceptable use
Do not use Umenio to break the law, to publish content you have no right to, to attempt to reach another restaurant's data, or to probe or overload the service. We may suspend an account that does, and will tell you why.
Availability
We work to keep the service running and we do not promise it never stops. Where a plan states a service level, that statement governs; where none is stated, the service is provided as it stands.
We may change or withdraw features. Where a change materially reduces what you are paying for, we will tell you in advance.
Liability
To the extent the law allows, our total liability to you for any claim is limited to what you paid us in the twelve months before it arose. We are not liable for lost profit, lost custom, or data you could have kept a copy of.
Nothing here limits liability that cannot lawfully be limited.
Ending the agreement
You may stop using Umenio at any time. We may end an account for a serious or repeated breach of these terms, or for non-payment, after telling you. On termination you may export your data for a reasonable period.
Law
These terms are governed by the laws of the Arab Republic of Egypt, and the courts of Cairo have jurisdiction.
Questions about any of this go to contact@umenio.com.
Questions about privacy, a data request, or anything in these terms — talk to us ›