Munch

Privacy Policy

Last updated: August 21, 2026

This Privacy Policy describes how Munch ("we," "us," "our") collects, uses, and shares your personal information when you use our platform.

1. Information We Collect

Account information: Email address, password (encrypted), full name, phone number.

Restaurant operator information: Business name, address, cuisine type, phone number, business hours, menu content, photos, bank account details (processed by Stripe).

Customer order information: Name, phone number, order contents, order notes, payment information (processed by Stripe).

Automatically collected: Browser type, device information, IP address, pages visited, and usage patterns through standard web analytics.

2. How We Use Your Information

To provide and operate the Munch platform.
To process orders and payments.
To communicate with you about your account or orders.
To review and approve restaurant operator accounts.
To improve our platform and user experience.
To comply with legal obligations.

3. How We Share Your Information

With restaurant operators: Customer name, phone number, and order details are shared with the restaurant fulfilling your order.
With Stripe: Payment information is processed by Stripe. See Stripe's Privacy Policy.
With Supabase: Our data infrastructure is hosted on Supabase. See Supabase's Privacy Policy.
As required by law: We may disclose information in response to legal requests or to protect our rights.

We do not sell your personal information to third parties.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Order records are retained for accounting and legal compliance purposes. You may request account deletion at any time.

5. Data Security

We use industry-standard security measures including encrypted connections (TLS), secure password hashing, and row-level security policies on our database. However, no method of transmission or storage is 100% secure.

6. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data.
Object to or restrict processing of your data.
Data portability — receive your data in a structured format.

To exercise these rights, contact us at hello@trymunch.com.

7. Cookies

Munch uses essential cookies and local storage for authentication and session management. We do not use third-party advertising or tracking cookies.

8. Children's Privacy

Munch is not intended for children under 13. We do not knowingly collect personal information from children under 13.

9. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected and the right to request deletion. We do not sell personal information. Contact us to exercise your CCPA rights.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of Munch after changes constitutes acceptance.

11. Contact

Questions about this Privacy Policy? Contact us at hello@trymunch.com.

This policy is provided as a starting template. Munch recommends having it reviewed by a licensed attorney in your jurisdiction.