Privacy Policy

This policy sets out how information is handled in this service (the app for restaurants and the multilingual menu pages published from it). The operator is referred to below as “we”/“us.”

1. Basic policy

We collect only the minimum information necessary to provide the features. We do not collect contact information such as name, email address, or phone number; precise location; or financial information such as payment card numbers. We never sell or lend the information we collect.

2. Information we collect

2-1. Users of the restaurant app (restaurant owners)

Account identifier: You can view the sample, guide, and pricing without signing in. Before creating your own store, we ask you to sign in with Apple and confirm your account and any existing store. We store the opaque identifier issued by authentication. Existing stores and drafts created before signing in remain associated with their existing anonymous identifiers, and sign-in checks before publishing or purchasing are retained. We do not request your name or email address, and there is no registration by password or phone number.Purpose: to distinguish the owner of each store’s data, and to let you return to the same store after changing devices
Store information: Store name, genre, description, address (optional), and store images.Purpose: managing the menu and generating the public page
Menu information: Dish names, prices, descriptions, photos, categories, allergen and dietary information, and multilingual translations.Purpose: managing the menu and generating the public page
Purchase and subscription information: We verify the signed purchase information issued by the app distribution platform on our server and apply the subscription plan. Payment information such as credit card numbers never reaches us (payment is completed on the platform side).Purpose: applying the paid plan
Proof of app authenticity: A per-device attestation the server uses to confirm the request comes from a legitimate app; it is not information that identifies an individual.Purpose: preventing fraudulent requests

We do not use behavior analytics, crash collection, or push notifications for our own purposes. However, for the ads shown on the free plan, the app includes measurement components provided by the ad provider, and the information those may collect is described in “4. About ads” below. The app itself does not collect location information (again, except for collection by the ad provider).

2-2. Viewers of the public menu page (guests)

No sign-up or login is required to view, and we do not collect personal information from viewers.
The page is read-only. Viewers cannot write any data.
The display language is detected automatically from the device language setting, and the choice is kept in a URL parameter. We do not use cookies or the like to identify or track viewers.
For the operation of the server and delivery infrastructure, access logs (IP address, browser information, date and time, etc.) are recorded for a certain period. They are used only for incident response and prevention of unauthorized access.
No AI processing whatsoever takes place when viewing (what is shown is content generated and reviewed in advance).
No ads are shown on the public menu page.

3. About AI translation and generation

Text translation and drafting: When you use a selected AI feature, dish names, descriptions you enter, size names, ordering notes, and the source and target languages are sent through tabeyomi’s server to Google Cloud Vertex AI. They are used to translate your input or draft text such as ordering phrases using dish names.
Reading photos and PDFs: If you select this feature and tap “Read with AI” (“AIで読み取る”), the selected menu photo or PDF page image, source language, and currency are sent to the same service to extract candidate dish names, prices, and descriptions. Selecting a photo alone does not send it. Choose images without personal information such as names or contact details, and do not enter personal information in the text.
You can review the recipient, data, and purpose in the app before sending. You can also enter and save the original text manually without AI. Viewing a published menu does not trigger AI processing.
AI translations and extraction can be wrong. Review and correct prices, descriptions, and translations; allergen information must be declared by the restaurant. Results are published only after the restaurant reviews them and takes the publish action. Sending an image does not publish it automatically.

4. About ads

Ads are shown only on the free-plan restaurant app screens. They are not shown on paid plans, nor on the public menu page that guests see.
We use Google AdMob to serve ads. Google may collect and process advertising identifiers, IP addresses and the approximate location derived from them, ad and screen interactions, and device performance and diagnostic information. This information is sent to Google for ad delivery and measurement, fraud prevention, maintaining and improving services, and ad personalization according to your settings and consent. See How Google uses information from sites or apps that use our services.
Where required, an ad consent form asks for your choices about storage and use of ad data and personalization. This is separate from your device’s “Allow Tracking” permission. We use the advertising identifier for personalized ads only with OS permission and when the necessary ad consent and other conditions are also satisfied.
If OS permission is declined or unanswered, we request non-personalized ads. These may still require consent depending on your region, and ads may not be requested depending on your consent status. Non-personalized ads do not stop all collection of data for ad delivery and measurement.
To change or withdraw ad consent, open the app’s guide (“使い方”) → advanced settings (“詳しい設定”) → ad privacy settings (“広告のプライバシー設定”). This option appears when the ad service determines that a privacy-options entry is required. You can change OS tracking permission in your device’s privacy settings. The OS permission dialog appears before ad initialization if you have not yet answered it.

5. Provision to third parties and outsourcing

We use external providers for the following purposes, and the necessary scope of information is handled by them. We use Google AdMob for advertising, as identified below.

Cloud infrastructure providers (data storage, server processing, page delivery)
AI processors (translation and generation in 3 above)
Google (ad delivery, measurement, and related processing through Google AdMob, as described in section 4)
App distribution and payment platforms (app distribution and billing)

We do not provide personal information to any other third party except as required by law.

6. Storage location and cross-border transfer

Saved store and menu data are managed in the cloud.
The text and extraction images described in section 3 use Google Cloud Vertex AI’s global processing infrastructure and may be processed outside Japan. Communication is encrypted using TLS.
We do not persist extraction image files on tabeyomi’s server. Extracted candidates and data used to manage retries are saved separately from image files and managed with expiry periods depending on the import flow. Expiry does not mean that all operational records and backups are physically deleted immediately.
Saved store and menu data are processed for deletion when the restaurant deletes them or requests deletion. Time-limited data follow their respective retention and deletion processes. We do not guarantee uniform zero retention by the AI provider or processing in a single country.
To request deletion of your account and all data, contact us through the channel below.

7. Note on scope of publication

A published menu page can be viewed by anyone who knows the URL or QR code. It is set not to appear in search engines (noindex), but the URL itself is not a secret. Please do not enter personal information, or information you do not want made public, into dish descriptions or images.

8. Security management

All communication is encrypted (TLS).
Access rights to data are controlled by server-side rules, designed so that no store can read or write another store’s data.
We have measures in place to block requests from anything other than the legitimate app.

9. Your rights

If you wish to have data about you (or your store) disclosed, corrected, deleted, or its use suspended, please contact us through the contact channel. We will respond in accordance with the law after verifying your identity.

10. Use by minors

This service is intended for use by businesses (restaurants). If a minor uses it, please do so with the consent of a guardian.

11. Revisions to this policy

If there is a change in the information we collect or the purposes of use, we will update this page and make it known. For important changes, we will also notify you within the app.

12. Contact

For inquiries about this policy or the handling of personal information, please use the contact form.

Established: July 14, 2026 / Last updated: November 3, 2026