Privacy Policy
Last updated: June 10, 2026
Introduction
Dishionary ("we," "our," or "the app") is a mobile application developed by Chia Le Luan that translates foreign restaurant menus using artificial intelligence.
This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
We are committed to protecting your privacy. Dishionary is designed to work without user accounts, and we minimize data collection to only what is necessary for the app to function.
Information We Collect
Information you provide:
Menu photos: When you use Dishionary, you take or upload photos of restaurant menus. These photos are sent to our server for processing and are immediately discarded after translation. We do not store your photos.
Allergen preferences: You may select allergens to flag in translations. These selections are stored only on your device and are never sent to our servers.
Information collected automatically:
IP address hash: We create a one-way, irreversible hash of your IP address solely for rate limiting purposes (to prevent abuse). The original IP address is never stored.
Anonymous usage data: We log basic, non-identifiable scan statistics such as the number of dishes found, processing time, and error counts. This data cannot be linked to any individual user.
Information we do NOT collect:
Names, email addresses, or contact information
Location data
Device identifiers or advertising IDs
Browsing history or app usage patterns
Payment or financial information (all purchases are handled by Apple)
How We Use Information
Translate menu photos: Your photos are processed through Google Gemini AI to extract and translate dish information, then immediately discarded.
Prevent abuse: IP address hashes are used to enforce rate limits and protect our service.
Improve the service: Anonymous, aggregated scan statistics help us understand general usage patterns.
Cache translations: We maintain an anonymous cache of dish translations (keyed by dish name, not by user) so common dishes can be translated faster for all users.
Third-Party Services
Google Gemini AI (Google LLC)
Menu photos are sent to Google's Gemini API for processing. Google processes the images to extract dish information and returns the results to our server. Photos are transmitted securely and are not stored by our service after processing. Google's use of data is governed by Google's Privacy Policy.
Supabase (Supabase Inc.)
We use Supabase to host our backend server and database. Supabase stores only anonymous dish translation caches, rate limit hashes, and aggregated scan logs. No personal data is stored in our database.
Apple (App Store & StoreKit)
In-app purchases are processed entirely by Apple through StoreKit. We never receive, process, or store your payment information. Apple's handling of purchase data is governed by Apple's Privacy Policy.
Data Storage and Security
On your device:
Scan history (photos and translations) is stored locally on your device in the app's private storage. This data is not accessible to other apps and is deleted when you uninstall Dishionary.
Allergen preferences are stored on your device only.
On our servers:
Menu photos are processed in memory and immediately discarded. They are never written to disk or stored in our database.
Dish translation caches are stored anonymously (keyed by dish name only, with no link to any user).
IP address hashes are stored temporarily for rate limiting and automatically expire.
We use HTTPS encryption for all data transmitted between your device and our servers.
User Rights
For all users:
You can delete your local scan history by uninstalling the app.
You can use the app without providing any personal information.
For users in the European Economic Area (GDPR):
Right to access, rectify, or erase your personal data.
Right to restrict or object to processing.
Right to data portability.
Since we do not collect identifiable personal data, these rights are largely satisfied by design.
For users in California (CCPA):
Right to know what personal information is collected.
Right to request deletion of personal information.
Right to opt out of the sale of personal information. We do not sell any personal information.
To exercise any of these rights, contact us at silas0316@gmail.com.
Children's Privacy
Dishionary is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. Since the app does not require account creation and does not collect personal data, children's privacy is protected by design.
If you believe a child has somehow provided us with personal information, please contact us at silas0316@gmail.com.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy. Your continued use of Dishionary after any changes constitutes acceptance of the updated policy.
Contact Information
If you have questions or concerns about this Privacy Policy, please contact us:
Developer: Chia Le Luan
Email: silas0316@gmail.com