MiM privacy policy

Data we use

Depending on the features you use, MiM processes names, email addresses, phone numbers, account and session identifiers, business details and addresses, orders, reservations, receipts and amounts. Authorised staff can also provide menu images and business operational data. Notes and private feedback you submit form part of the service you request.

How data is used

Data enables account identification and authentication, connecting customers to tables, handling orders and reservations, business operations, support and preventing misuse. Volume, vibration and language preferences are stored on your device.

Restaurants and providers

The restaurant receives the information needed to fulfil your orders and reservations. MiM uses Google services for infrastructure and analytics, Expo for notification functions and Stripe for enabled payments. These providers receive the information needed for their services. Payments take place through Stripe; MiM does not store your full card number or security code.

Usage analytics

Only with your optional consent do we measure visits, campaigns and interactions, including pages opened by the app. No analytics identifiers are generated and Google Analytics is not loaded before acceptance. You can reject or withdraw permission in Privacy preferences without affecting the service. It may process browser or device identifiers, visits and interactions, technical information and approximate location derived from the IP address to measure service usage. MiM does not use AdSense or display its ads.

Demo requests

Restaurant name, email and optional phone are used to handle and follow up your requested pre-contractual demonstration. We retain commercial history and, with analytics permission, acquisition source. The demo form does not subscribe you to news or offers; we will only contact you about your request. Unlinked requests are reviewed for deletion after 180 inactive days. MiM's own records are reviewed for deletion after 90 inactive days for analytics identifiers and 13 months for navigation. Analytics cookies have a renewable 90-day lifetime. Google Analytics has separate retention settings: currently 2 months for event data and up to 14 months for user data; aggregate reports may be kept longer. Maintenance reviews run periodically; you can request deletion through support.

Camera, location and notifications

Camera access is used to read QR codes with your permission; the reader does not send the camera video to MiM. Images you choose to upload through the business panel are transferred to the service. Website features for finding nearby venues may request location permission. Notifications require device permission and may use technical delivery identifiers. You can revoke permissions in your device settings.

Security

Connections to the service use HTTPS. Passwords are stored using hashing, and access to business functions is managed through sessions, roles and permissions. Do not email passwords or card details to support.

Retention

Account and operational data is retained while necessary to provide the service and meet its responsibilities. You may request deletion. After verifying a request, associated personal data that need not be retained is deleted or anonymised. Accounting records and supporting documents subject to legal obligations may be retained with restricted use for the applicable periods; in Spain, commercial record retention may extend to six years from the last accounting entry. The restaurant's obligations concerning its own receipts and invoices may require retaining certain records.

Your rights

You may request access, correction, deletion, restriction, objection or portability, as applicable, by contacting the privacy address. We may request the minimum information needed to verify your request. You may also complain to the Spanish Data Protection Agency (aepd.es).

Younger users

MiM is intended for users aged 13 and above. Where processing a minor's data requires a legal representative's authorisation, a parent or guardian must be involved as required by applicable law. The venue is responsible for its menu information and sales of age-restricted products.

How to request deletion

1. Email the support contact from the address associated with your account, using the subject «Delete MiM account».
2. Identify the affected account or business. If you used MiM as a customer without an account, include the restaurant and information needed to locate your order or reservation.
3. You can request deletion of the whole account or specific data only. Do not include passwords or full payment details.

Request deletion by email

What is deleted and what may be retained

You may request deletion of the account, credentials and associated personal data, or the specific data you identify. Where documents or records must be retained to meet a legal obligation, their use is restricted to that purpose and we will explain the exception and retention period. Account deletion is not replaced by simply disabling the account.