Privacy Policy

Last updated: 11 November 2026

Who is the data controller

The controller of your data is Top App, Rynek Główny 28, 31-010 Kraków, Poland, tax ID (NIP) 6762666433 (“we”). For anything about personal data, write to hello@topapp.pl. We reply within one month.

The short version

• We collect only what you give us in a pilot application, and we use it only to contact you about MenuTalk.
• We send no newsletters and we don’t sell data.
• The website uses no advertising or analytics cookies and has no tracking tools.
• We’ll erase your application on request. A message to hello@topapp.pl is enough.

Applying for the pilot

The form on the website

In the form on the MenuTalk page you give your name, email address and a message (for example your venue’s name and city). The form sends them as an email to our inbox, hello@topapp.pl. We don’t store applications in a separate database.

The form in a Facebook or Instagram ad

If you apply through a form in an ad, you give your name, phone number, email address, the restaurant’s name and city, and a rough number of phone orders a day. Meta fills some fields from your profile and you can change them before sending. The form is operated by Meta Platforms Ireland Ltd. and the answers come to us. How Meta processes data on its platforms is described in its own privacy policy.

Why, and on what legal basis

• Contacting you about the pilot: replying to your application, presenting the terms and arranging the rollout. The basis is steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Keeping our correspondence in order and defending against claims: our legitimate interest (Art. 6(1)(f) GDPR).

Giving us your data is voluntary, but without it we can’t reply to your application. We make no automated decisions about you and we don’t profile you.

How long we keep data

We keep an application for up to 12 months after our last contact. If we start working together, we keep your contact details for as long as that lasts and for as long as tax and accounting law requires. We’ll erase them earlier on request.

Who we share data with

• Meta Platforms Ireland Ltd.: operating the form in the ad.
• Zenbox sp. z o.o.: hosting of topapp.pl and of our email.
• Cloudflare, Inc.: delivering topapp.pl and protecting it from attacks.
• Vercel Inc.: hosting of topappsoft.com.

Meta, Cloudflare and Vercel may process data outside the European Economic Area, in particular in the USA. This happens under standard contractual clauses or the EU–US Data Privacy Framework.

The website

The website uses no advertising or analytics cookies. Your browser stores only your display settings (light or dark theme and the chosen language). Like any server, our hosting and Cloudflare see your IP address and keep it in logs, which we use only to prevent abuse and diagnose failures.

MenuTalk in a restaurant

When a restaurant uses MenuTalk, its guests talk to an AI assistant. The restaurant is the controller of its guests’ data and we process it on the restaurant’s behalf.

• The assistant says at the start of the conversation that it is an AI.
• The voice is processed live by OpenAI so the assistant can hold the conversation. We don’t store recordings of conversations.
• We store the text of the conversation and the order: items, notes and, for delivery, the address and phone number if the guest gives them. The restaurant sees them in its panel.
• We send the delivery address to OpenStreetMap Nominatim to check the delivery zone and fee.
• We store the IP address of the connection to protect the restaurant from abuse.
• We keep the data on our server in the European Union (Amazon Web Services, Frankfurt).

If you ordered through MenuTalk and want to exercise your rights, write to the restaurant or to us. We’ll pass the request on.

Your rights

You have the right to access your data, have it corrected, erased or restricted, and to receive it in a portable form, as well as the right to object to processing based on our legitimate interest. Write to hello@topapp.pl. You can also lodge a complaint with the Polish data protection authority (Prezes UODO, uodo.gov.pl).

Changes to this policy

If what we collect or who we share it with changes, we’ll update this page and the date at the top.