Lokand ("Lokand," "we," "us," or "our") helps restaurants and cafes build digital menus and publish public menu websites. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to the Lokand mobile app, the Lokand dashboard, and the public menu sites we host on behalf of our customers.
Who this policy is for
Lokand is a business tool. The people who create accounts are restaurant owners and their staff ("Account Holders"). We also process limited information about the diners who visit the public menu sites our customers publish ("Site Visitors"). This policy covers both.
Information we collect
Account information. When you create an account we collect your email address and a securely hashed password. If you invite teammates, we store their email addresses and assigned roles.
Business and menu content. We store the content you create — your business name, menu categories, items, prices, descriptions, photos you upload, your chosen theme, and any custom domain you connect.
Customer engagement data (Pro). If you use our Pro loyalty and campaign features, we store the customer contact details (such as name, email, or phone number) that you or your customers provide so we can send the messages you schedule.
Photos and the camera. The app can use your photo library or camera so you can add images to menu items or scan an existing paper menu. Images are uploaded to our storage and used only to provide these features. We do not access your photo library for any other purpose.
Usage and device information. We collect basic technical data — such as IP address, device type, app version, and aggregate, privacy-respecting analytics about how the dashboard and public sites are used — to operate, secure, and improve the service.
How we use information
- To provide, maintain, and improve the Lokand service.
- To authenticate you and keep your account secure.
- To host and serve the public menu sites you publish.
- To send the loyalty and campaign messages you choose to send to your own customers (Pro).
- To send you essential service communications, such as security and account notices.
- To detect, prevent, and respond to fraud, abuse, and technical problems.
- To comply with our legal obligations.
How information is shared
We do not sell your personal information. We share information only in these limited cases:
- Service providers. We use trusted infrastructure providers — including Cloudflare for hosting, storage, and content delivery — that process data on our behalf under contract.
- Messaging providers. When you send Pro campaigns, we use email and SMS delivery providers to deliver those messages.
- Public menu content. The menu content you choose to publish is, by design, publicly accessible on your menu site.
- Legal reasons. We may disclose information if required by law or to protect the rights, safety, and security of Lokand, our users, or the public.
- Business transfers. If Lokand is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
Data retention
We keep account and content data for as long as your account is active. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to meet legal obligations or resolve disputes.
Security
Passwords are stored only as salted hashes, data is encrypted in transit, and access to production systems is restricted. No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard safeguards.
Your choices and rights
You can access, correct, export, or delete your data from within the dashboard, or by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to access, correct, delete, or restrict the processing of your personal data. To exercise any of these rights, email us at the address below.
Children
Lokand is a tool for businesses and is not directed to children under 13. We do not knowingly collect personal information from children.
International users
Lokand operates globally and may process and store information in countries other than your own. Where required, we use appropriate safeguards for international data transfers.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.
Contact us
If you have questions about this Privacy Policy or your data, contact us at hello@lokand.com.