KetoMenu
Privacy Policy
Last updated: October 29, 2026
KetoMenu tells you what to order at restaurants when you eat keto or low carb. It's run by TableCash LLC. This page says exactly what we collect, why, and what we never do.
The short version
- Every phone gets a private account the first time the app opens. No email or name is needed: it's just a random id. Your answers, saved orders and days are kept in it, so the app works the same tomorrow and can follow you to a new phone if you sign in.
- We never sell your data, never use it for ads, and never share it with ad networks.
- We don't use your data to train AI.
- Menu photos you choose to send go to Anthropic's AI to estimate carbs. You're asked first, and you can turn it off (You > Read menus with AI).
- You can delete your account and everything in it, in the app: You > Delete my account and data (or "Delete account" under the plans screen if you haven't subscribed).
What we collect
| What | When | Why | Where it's kept |
|---|---|---|---|
| A random account id | the first time the app opens | so your settings, saved orders, purchases and daily limits belong to you | Supabase (our database host) |
| Your answers and settings: how you eat (keto, low carb, more protein, or the smaller-meals setting for people on GLP-1 medicines), your daily net-carb limit, no dairy, whether sugar-free sweeteners count, what you like to eat, your spots, places you asked us to add, and whether menus may be read with AI | when you answer or change them | to show orders that fit you | your phone, and synced to your account in Supabase |
| Orders you save, and what you said you ate each day (with its carbs) | when you tap save or "I ate this" | your days, "have it again", and syncing | your phone, and your account in Supabase |
| Your weight, and what you enter for the weight forecast: your weigh-ins (date and weight), height, age, sex (or "rather not say"), how active you are, calories a day, your goal weight and date, and your own BMR if you type one | only if you use Progress and enter them | to draw your weight chart and its forecast | your phone, and synced to your account in Supabase. Never sent to AI |
| Your email | only if you sign in with email | to send your sign-in code and recognize you | Supabase |
| A private Apple relay email or your Apple email | only if you use Sign in with Apple | same | Supabase |
| Purchase status | if you subscribe | to know whether your plan is on | Apple or Google, and RevenueCat (our subscription service), under your account id |
| Which screens you reach: finished the quiz, saw the plans screen (and from where), started a trial, opened a place or an order, showed the counter card. Plus which version of a screen you got, if we're testing two | when you use the app | to learn which version helps people find their order faster | Supabase, linked to your account id. Never your carbs, limit or answers. Deleted with your account, and after 180 days |
| What you order: when you show an order at the counter or tap "I ate this", the dish and the place | when you do it | to show counts like "11 people ordered this here" (only counts are ever shown) | Supabase, linked to your account id, deleted with it |
| "They said no" at a store: the store, and what they wouldn't do | when you tap it | so that change stops showing at that store once enough people say so | Supabase, linked to your account id, deleted with it |
| Problem reports ("Something off?"): what's wrong and any note you type | when you send one | to fix the numbers | Supabase. When you delete your account, the report stays but is no longer linked to you |
| How many lookups you made today | when you use menu estimates (and places near you, on Android) | daily limits | Supabase, linked to your account id, deleted with it |
| Crash reports and app speed (what broke, the screen, the phone model, how long a few screens took to load) | if the app crashes, and for some app sessions | to fix bugs | Sentry. No diet data, no email |
Location: only after you tap "Show places near me", and only while the app is open (never in the background). Your exact spot stays on your phone: it's used there to measure distances, draw the map and tell when you're at a restaurant. On iPhone, your phone asks Apple Maps for restaurants nearby (the same maps service that draws the map), so your location never reaches our server. On Android, our server gets it rounded to about 11 meters and sends that to Google Places to find restaurants nearby. We don't store it either way. If you type a city instead, your phone's own maps service (Apple or Google) finds it. The street name shown ("Near S Lamar Blvd") also comes from your phone's maps service. When you tap "Get there", the restaurant's location (not yours) is handed to the app you pick (Apple Maps, Google Maps, Waze, Uber and so on); what happens after that is up to that app.
Menu photos, links and typed dishes: only the ones you choose to send, and only after you said yes to "we send it to Anthropic". The photo (re-saved on your phone first, which drops where and when it was taken), the screenshots, the page at a link you paste, or the dish you type, plus the restaurant's name, go to Anthropic (an AI company) to estimate the carbs. Nothing about you goes with it. When you send a whole menu at a restaurant, a copy of what you sent waits on our server, with no link to you, until our menu checker reads it a second time (usually within minutes; it waits longer if the checker is paused). Then the copy is deleted. The dishes it found are kept for that restaurant, with no link to you, so the next person there gets them right away.
Sometimes we test two versions of a screen (for example, two ways of showing the plans screen) to see which one works better. Prices are the same for everyone, and which version you get is random, never based on your diet answers or anything about you.
We don't collect your contacts, browsing or advertising id, and we don't track you across other apps.
Notifications
If you start a free trial and say yes, the app schedules one reminder on your phone for the day before the trial ends. It's created on your phone; nothing is sent to us.
Who we share with
Only the services that run the app, each with only what it needs:
| Service | What it gets | Why |
|---|---|---|
| Supabase | everything in the table above | our database, sign-in and server |
| Anthropic | menu photos, screenshots, links or typed dishes you send, and the restaurant's name. Never anything about you | to estimate carbs (only after you say yes) |
| Apple Maps (iPhone) | your location, from your phone's own maps service, never through our server | to find restaurants near you |
| Google Places (Android) | your location rounded to about 11 meters, sent by our server, not linked to you; for a restaurant you open, its Google id, to find its website | to find restaurants near you and read their menus |
| RevenueCat | your account id and purchases | subscriptions |
| Apple and Google | payments, and Sign in with Apple if you use it | payments and sign-in |
| Sentry | crash reports and app speed | fixing bugs |
| Our email sender (through Supabase) | your email | sending your sign-in code |
We don't sell or rent data to anyone.
Health information
How you eat, your carb limit and food preferences are diet information. The smaller-meals setting says you may be on a GLP-1 medicine. Your weight, height, age and sex (Progress) are health information too. We use all of it only to show you orders and your weight forecast, which is worked out on your phone. None of it is ever sent to an AI. It's never used for advertising, never sold, and never shared for marketing. This app is not medical advice.
Deleting your data
In the app: You > Delete my account and data (or "Delete account" under the plans screen if you haven't subscribed). That deletes your account and everything linked to it from our database. If you signed in with Apple, we also tell Apple to end this app's sign-in. Problem reports you sent stay, with no link to you. Deleting the app removes what's on your phone. A subscription is managed by Apple or Google: deleting your account doesn't cancel it, so cancel it in your phone's settings.
Children
The app isn't for children under 13, and we don't knowingly collect their data.
Contact
support@ketomenu.app