Privacy policy

Last updated · May 25, 2026

MenuFlashcards is made by VP0 (“VP0”, “we”, “us”). We believe your data is yours. This policy explains, under the General Data Protection Regulation (GDPR, known in Dutch as the AVG) and the law of the Netherlands, what personal data we process, why we process it, and the rights you have. If you have any question, email support@vp0.com.

Who is responsible for your data

VP0 is the data controller for the personal data processed through this website and the MenuFlashcards app. You can reach us about any privacy matter at support@vp0.com.

What we collect

When you join early access: your email address, and optionally your name, your role (for example server or bartender), and a short description of the menu you want to memorize.
When you contact us: your name, your email address, and whatever you write in your message.
When you create a MenuFlashcards account (once the app launches): your email address and a display name.
When you use MenuFlashcards (once the app launches): the activity and preference data needed to provide the app's features and remember your settings.
Automatically, for security and reliability: limited technical data such as your IP address and basic request logs, generated by our hosting.

MenuFlashcards is currently in early access. Today this website only collects what you submit through the early-access and contact forms above. The menu-photo and flashcard features described on this site are still in development, so we are not yet uploading your menu photos or creating accounts.

What we do not collect

No advertising identifiers. We run no ads.
No precise location.
No selling of your data, to anyone, ever.
No tracking cookies and no third-party analytics SDKs. Our fonts are self-hosted, so opening a page does not call out to third parties.

Why we process your data, and our legal basis

We only process personal data where the GDPR (Article 6) allows it:

To answer your messages and manage the waitlist: your consent, and our legitimate interest in responding to you.
To provide MenuFlashcards and your account: performance of our contract with you.
To keep the service secure and working: our legitimate interest in a safe, reliable product.
To send you an update you specifically asked for: your consent, which you can withdraw at any time.
To meet tax and other legal duties: compliance with a legal obligation.

Who we share it with

We do not sell your data and we do not share it for anyone else's marketing. We rely on a small number of carefully chosen processors who handle data on our behalf and only on our instructions:

Email delivery (Resend), to receive your messages and send transactional email.
Hosting and content delivery (Vercel), to serve this website and run the contact form.
App distribution and payments (Apple App Store), when you subscribe. Apple processes your payment; we never see your card details.

Some of these providers are based outside the European Economic Area, including in the United States. Where that is the case, the transfer is covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep it

Contact and waitlist messages: for as long as needed to handle your request, and a reasonable period afterwards, then deleted.
Account data: for as long as your account exists. When you delete your account we remove it within 30 days, except where we must keep certain records to meet a legal obligation.

Your rights

Under the GDPR you have the right to:

access the personal data we hold about you;
have it corrected if it is inaccurate;
have it erased (the “right to be forgotten”);
restrict or object to how we process it;
receive it in a portable, machine-readable format;
withdraw any consent you gave, at any time.

To exercise any of these, email support@vp0.com. We respond within one month.

Complaints

If you think we have mishandled your data, please tell us first so we can put it right. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Security

We protect your data with appropriate technical and organizational measures, including encryption in transit. No system is ever perfect, but we take this seriously and review it regularly.

Children

MenuFlashcards is not directed at children under 16. We do not knowingly collect data from children under 16 without parental consent. If you believe a child has given us their data, contact us and we will delete it.

Changes to this policy

We may update this policy as MenuFlashcards evolves or the law changes. We will post the new version here and update the date above. Where a change is significant, we will let you know by appropriate means.

Contact

Questions about this policy or your data? Email support@vp0.com.