Privacy Policy

Last Updated: 30 September 2026

Effective Date: 26 August 2026

1. Introduction

The Qmeno platform respects your privacy and is committed to protecting your personal data. This policy explains how your personal data is collected, used, stored, shared and protected when you use qmeno.com, Qmeno applications, or its pages, dashboards and related services, collectively referred to as the “Platform”.

The Platform is operated by Qmeno Commercial brokers, licensed in the United Arab Emirates under Trade Licence No. 65050, referred to in this policy as “Qmeno” or “we”.

By using the Platform, you acknowledge that you have read this policy. Where your consent is required by law, we will request it clearly and separately, and you may withdraw it as explained in this policy.

2. Scope of the Policy

This policy applies to:

• Customers who create accounts, browse restaurants and cafés, or place orders through the Platform.
• Representatives, managers and employees of restaurants, cafés and businesses, and users of the partner dashboard.
• Authorised users of the administration dashboard or operational tools.
• Website visitors and people who contact us for support or to submit a complaint or enquiry.

The restaurant or café from which you order may be independently responsible for some of your data needed to prepare and fulfil the order, provide customer service and meet its legal obligations. In this case, its processing is also subject to its own privacy policy.

3. Personal Data We Collect

We may collect the following categories, depending on how you use the Platform and which features are enabled:

3.1 Account and Identity Data

• Name and display name.
• Email address and phone number or WhatsApp number.
• Login and account verification data, with passwords stored in a protected format and not as readable text.
• Language, country, emirate, city and account-related preferences.
• Account status, type and permissions, such as customer, business manager or authorised employee.

3.2 Order and Service Data

• Selected restaurant or café, items, quantities, add-ons, prices, discounts, taxes and total.
• Order type, such as dining in or car pickup, and the table number, QR code or vehicle registration number when needed.
• Order notes, order time, status, and order, cancellation and refund history.
• Data relating to loyalty programmes, rewards, vouchers, offers and their use.
• Service ratings or feedback you provide, if this feature is available.

Please do not enter sensitive personal data or information that is not needed to fulfil the order in the notes field.

3.3 Location Data

We may process your approximate or precise location, after obtaining the required permission from your device, to display nearby businesses, identify the emirate or city, and improve the ordering or pickup experience. You can disable location permission in your device settings, although some functions may no longer work fully.

3.4 Payment and Billing Data

When electronic payments are enabled and used, we may collect the transaction amount, currency, status, reference number, abbreviated payment method details, and data needed for billing, refunds and fraud prevention.

Full card details are usually processed directly by a licensed payment provider, and Qmeno is not expected to retain the full card number or the CVV security code. The operator must ensure that this description matches the actual integration with the payment provider before enabling the service.

3.5 Restaurant, Café and Partner Data

This may include:

• Trade name, legal name, licence, address and contact details.
• Details of the owner, authorised representative, manager and authorised employees.
• Subscription, invoice and payment collection data, and bank account or payment provider account details when needed.
• Information about menus, prices, branches, opening hours and available services.
• Records of permissions, access, changes, scans, orders and operational activities for security and accountability purposes.

3.6 Receipt Images and Automated Data Extraction

If a partner uses the receipt upload feature, we may process the receipt image and data automatically extracted from it, such as the supplier’s name, date, items, amount and tax. Some receipts may incidentally contain personal data; users must therefore avoid uploading documents containing unnecessary personal data and must conceal sensitive information where possible.

Automated extraction is used to assist with data entry and organisation and may not always be accurate; results should therefore be reviewed before they are relied on for accounting or tax purposes.

3.7 Device and Usage Data

• Internet Protocol address, device type, browser, operating system, language and time zone.
• Device, application and session identifiers, access times, and pages and features used.
• Crash, performance, error and security logs, login attempts and suspicious activities.
• Cookies and similar technologies, as described in the relevant section below.

3.8 Communications and Support

We collect the content of your messages, attachments and contact details when you contact us by email, phone, WhatsApp or a support form, as well as the record of how your request or complaint is handled.

3.9 Data We Receive from Other Parties

We may receive data from restaurants and cafés, login and verification providers, payment providers, mapping services, messaging and notification providers, and hosting, security and analytics services, to the extent needed to provide the service, verify transactions and protect the Platform.

4. How We Use Personal Data

We use data for the following purposes:

• Creating accounts, verifying identity, and managing access and permissions.
• Displaying restaurants, cafés, menus and services relevant to your location and preferences.
• Creating orders, sending them to the selected business, tracking their status, and managing cancellations or refunds.
• Operating payments, billing, subscriptions, offers, vouchers and loyalty programmes.
• Enabling restaurants and cafés to manage branches, menus, employees, orders and operational records.
• Operating the receipt feature, extracting receipt data and organising expenses when enabled.
• Sending verification codes, order status messages, and security and operational notifications.
• Responding to enquiries and complaints and providing support.
• Preventing fraud, misuse and unauthorised access, and protecting users and the Platform.
• Monitoring performance, fixing errors, analysing usage, and improving products and services.
• Conducting analysis and producing statistics using aggregated or de-identified data where appropriate.
• Meeting legal, regulatory, tax and accounting requirements, responding to lawful requests, and establishing or defending rights.
• Sending offers and marketing messages if you have consented or if sending them is permitted by law.

5. Legal Bases for Processing

Depending on the circumstances, we process personal data on one or more of the following bases:

• Your explicit consent where required by law, such as for certain marketing messages, location permissions and non-essential cookies.
• Processing that is necessary to create your account, fulfil your order, provide the service or perform a contract with you.
• Compliance with an applicable legal or regulatory obligation.
• Protecting rights and legitimate interests permitted by law, such as securing the Platform, preventing fraud and improving the service, taking your rights and privacy into account.
• Establishing, exercising or defending legal claims, or responding to competent authorities.
• Any other basis permitted by the laws of the United Arab Emirates.

Where processing relies on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before that point.

6. When and with Whom We Share Data

We do not sell your personal data. We may share the minimum necessary data with the following categories:

6.1 Restaurants and Cafés

We share order and contact details, and the location, table number or vehicle registration number, depending on the order type, with the business you selected so that it can fulfil the order and handle your service needs and complaints. The business must not use data it obtains through Qmeno for purposes unrelated to the service or the law without an independent legal basis.

6.2 Service Providers

We may use providers of hosting, databases, storage and backups; verification and login; payments; messaging, email and notifications; maps; analytics; performance monitoring; customer service; fraud detection; and cybersecurity. Where required, we contractually oblige them to use data according to our instructions and provide appropriate safeguards to protect it.

6.3 Affiliates and Advisers

We may share data within our group, if any, or with auditors, lawyers, accountants, insurers and other professional advisers, to the extent necessary and for lawful purposes.

6.4 Official and Legal Authorities

We may disclose data if required by law, in response to a valid order or request from a court or a competent regulatory, security or government authority, or to protect the rights or safety of Qmeno or its users, or prevent crime or fraud.

6.5 Corporate Transactions

If we enter into a merger, acquisition, restructuring, financing, or a sale of all or part of the business, data may be disclosed to the parties concerned and their advisers with confidentiality safeguards in place. It will continue to be protected in accordance with the law and this policy or an appropriate replacement notice.

7. Transfers and Storage Outside the United Arab Emirates

Some service providers may use technical infrastructure or support teams located outside the United Arab Emirates, which may result in data being transferred to or accessed from another country. When this happens, we take the measures required by law, such as verifying the level of protection, using appropriate contractual commitments and security safeguards, obtaining explicit consent where required, or relying on another legal basis that permits the transfer.

You may contact us for general information about the safeguards applied to international transfers, subject to security and confidentiality obligations.

8. Data Retention Period

We retain data for the period necessary to achieve the purposes described in this policy, in proportion to its nature and risks, after which we securely delete or anonymise it, unless a longer retention period is required.

When determining the period, we consider, among other things:

• Whether the account or contractual relationship remains active.
• The user’s or restaurant’s need for order, transaction or support records.
• Statutory periods relating to business, tax, accounting, payment and dispute records.
• The need to prevent fraud and misuse and protect the security of the Platform.
• An existing or reasonably anticipated complaint, claim or investigation.
• The backup cycle, during which a limited copy may remain until it is replaced or deleted according to the approved schedule.

We may retain aggregated or anonymised data that does not identify a particular individual for statistical and improvement purposes for a longer period.

9. Data Protection

We implement appropriate technical and organisational measures according to the nature of the data and the risks. These may include encryption in transit, access and permission controls, protection of login data, security logging, backups, monitoring, security updates, testing of controls, and restrictions on access by employees and service providers.

However, no method of electronic transmission or storage is completely secure. We therefore review our procedures and handle security incidents in accordance with the law, and notify the competent authority and affected individuals when required by law.

You are responsible for keeping your login details confidential, not sharing your verification code or password with anyone, and notifying us immediately if you suspect unauthorised use of your account.

10. Your Data Rights

Under applicable laws and subject to legal exceptions, you may have the right to request:

• Information about your data, how it is processed and the parties with whom it is shared.
• Access to a copy of your personal data.
• Transfer of your data to another party where the legal and technical conditions apply.
• Correction of inaccurate data or completion of incomplete data.
• Deletion of your data or its erasure under the right to be forgotten where there is no legal reason to continue retaining it.
• Restriction or cessation of processing in the circumstances provided for by law.
• Objection to or opting out of direct marketing.
• Objection to a decision based solely on automated processing, including profiling, if it has a legal or significant effect on you.
• Withdrawal of consent at any time where processing is based on it.

To exercise your rights, contact us at help@qmeno.com, specifying the type of request. We may request appropriate information to verify your identity and protect your account. We will respond within the period specified by law and may refuse or restrict a request where there is a legal reason to do so, explaining the reason to the extent permitted.

Deleting the application from your device does not automatically delete your account or data that must be retained. You may request account deletion through your account settings if the feature is available, or by using the email address above.

11. Automated Processing and Artificial Intelligence

We may use automated tools to assist with extracting receipt data, detecting fraud or unusual activities, ranking content, providing suggestions and improving the service. We do not usually make a decision that has a legal effect or significantly affects you based solely on automated processing without the safeguards required by law.

If you are subject to an automated decision with a legal or significant effect, you may request information about it, object to it and request human intervention where provided for by law.

12. Cookies and Similar Technologies

The Platform may use cookies, local storage or similar technologies for the following purposes:

• Essential: To log in, maintain sessions, operate the order basket and secure the Platform.
• Preference: To remember the selected language, emirate and settings.
• Analytics and Performance: To understand usage and crashes and improve performance.
• Marketing: To measure campaigns or personalise messages, if enabled and after obtaining the required consent.

You can manage non-essential options through the consent tool within the Platform, if available, or through your browser and device settings. Disabling essential cookies may prevent you from using some functions.

13. Messages and Notifications

We may send necessary service messages, such as verification codes, account confirmations, order status messages, security alerts and service updates. These may be sent by email, in-app notifications, text messages or WhatsApp, depending on the available option. The communication channel provider may process your number and technical delivery data under its own terms and privacy policy.

You may opt out of marketing messages using the designated link in the message, your account settings, or by contacting us. We may continue to send non-marketing service messages necessary for your account or orders.

14. Children’s Privacy

The Platform is not directed at children under 13 years of age, and we do not allow them to create accounts or knowingly collect their personal data. If we become aware of an account or data relating to a child under 13 without the required legal safeguards and consents being met, we will take appropriate action to disable the account and delete or restrict the data in accordance with the law.

Users aged 13 to 17 must use the Platform with their parent or guardian’s consent and supervision where required. If you are a parent or guardian and believe that a child has provided us with data in breach of these requirements, please contact us at help@qmeno.com.

15. Responsibilities of Restaurants and Cafés Regarding Employee and Customer Data

Each partner must use customer and employee data accessed through the Platform only for authorised purposes, assign permissions based on actual need, revoke an employee’s access when their employment ends or their duties change, and refrain from downloading or sharing data outside the Platform without an appropriate legal basis.

When a partner uploads data relating to its employees or suppliers, or their receipts, it acknowledges that it has the necessary authority, legal basis and notices to do so. Qmeno may act as a data processor on behalf of the partner for some of these operations, in accordance with the agreement with the partner and its lawful instructions.

16. External Links and Services

The Platform may contain links to or integrations with external websites, applications or services. Qmeno does not control those parties’ privacy practices, and you should review their policies before providing them with data.

17. Updates to the Privacy Policy

We may update this policy when our services, practices or legal requirements change. We will publish the updated version with the last updated date and provide a more prominent notice within the Platform or through your registered contact details if the change is material or if the law requires renewed consent.

18. Contact and Complaints

For enquiries, complaints or to exercise your privacy rights, contact us through:

• Operator’s Legal Name: Qmeno Commercial brokers
• Email: help@qmeno.com