Privacy Policy
What we collect
Account info (name, email), dietary preferences, allergies, taste ratings, dining-hall check-ins, friends lists, same-hall chat messages, an optional profile photo, and technical logs needed to run the app. Menu data is collected from publicly available Colby dining sources, including Nutrislice.
Guest users
If you use Menyou without an account, we collect only technical logs needed to run and secure the app. Guest browsing is not linked to a name or email.
Campus dining counts
When you create an account, Menyou records anonymized, aggregated dining activity: which hall and meal, which dishes you saw or rated, and whether you checked in. These totals do not include your name, email, photo, or chat messages. We may share the totals with the campus dining operator. Account deletion removes your raw events; totals that are already combined have no name attached.
Friends
If you add friends, we store that list and any pending requests. Friends see your first name, last name, and optional photo, not your email, allergies, or taste scores. Eat Together averages your existing Match% values and shows only a combined hall ranking; nobody sees anyone else's personal score. Same-hall chat requires both of you to check in at that hall. We do not share live location, GPS, or a map of where you are.
Location
Menyou does not collect GPS or live location. The dining hall you tap after a meal is the record. We never pick a hall from your phone, never show a map of where you are, and never use location to forecast how many students will check in.
Do Not Track
Menyou does not track you across other companies' apps or websites, and does not allow third parties to do so. Because we do not engage in this kind of tracking, we do not change our practices in response to browser Do Not Track signals.
How we use it
To personalize menu recommendations, calculate match scores, send on-device meal reminders you opt into, keep the service working and secure, and improve Menyou. We do not sell your personal data.
Storage and security
Data is stored in Supabase (PostgreSQL) with row-level security. Passwords are handled by Supabase Auth, and API requests are rate-limited. Campus meal timing in the app always uses America/New_York time, not your phone's time zone.
We use reasonable technical and organizational measures to protect your data, but no method of storage or transmission is 100% secure, and we cannot guarantee absolute security. If we learn of a breach that affects your personal data, we will notify affected users by email or in the app without undue delay, and within any time limit required by law.
Third parties
We use Nutrislice / Colby Dining for menus. Food images come from the Spoonacular API, with Unsplash or similar sources as a fallback; these images are illustrative and may not show the actual dish served. Meal reminders use on-device notifications. These services have their own terms. Service providers that process personal data on our behalf, such as Supabase, must protect it at least as well as this policy does.
Data retention
We keep your account data while your account is active. When you delete your account, we remove your profile and preference data from our active systems, and from backups within 30 days, unless we must keep something to meet a legal obligation. Aggregate totals that are already combined have no name attached and may be kept. If we permanently discontinue Menyou, we will delete all personal data within 6 months.
Children
Menyou is not intended for children under 13, and we do not knowingly collect personal data from them. If we learn that we have collected data from a child under 13, we will delete it. If you believe this has happened, contact us at menyou.verify@gmail.com.
Your choices and rights
Update your preferences anytime in Profile, and turn off meal reminders in your phone's notification settings. You can ignore friend requests and remove friends anytime. Anonymized dining totals are part of the Terms and Privacy Policy you agree to at signup, and there is no in-app opt-out.
To get a copy of your data or ask us to correct it, email menyou.verify@gmail.com from your account email. We will respond within 30 days. To withdraw your consent and permanently remove your data, delete your account under Profile → Account Details → Delete Account.
Business transfers
If Menyou is incorporated, merged, acquired, or sold, your data may transfer to the successor, which will continue to protect it under this Privacy Policy.
Changes to this policy
We may update this policy. When we do, the "Last updated" date will change, and material changes will be announced in the app.
Contact
Privacy questions: menyou.verify@gmail.com