Alacarte

Effective date: 10 September 2026

Alacarte is made by Marc Rousavy. You can use it without creating an Alacarte account. The app includes free monthly credits and optional subscriptions. This page explains what happens to your data.

Menu photos and dish pictures

Alacarte uses the camera when you take a menu photo. You can also choose a photo from your library or share one with the app. When you ask Alacarte to read a menu, your selected photos and device language go to my backend on Cloudflare, then to OpenAI for reading and translation. To create a dish picture, the backend sends OpenAI the dish's name, description, and other menu details.

The backend does not save menu photos, menu text, or generated pictures in its database or application logs. OpenAI also receives a pseudonymous installation identifier for abuse prevention. This is not your name, email address, or raw device identifier.

OpenAI can retain requests and results under its API data controls, including for abuse monitoring and stored responses. Processing a photo without saving it in my database does not mean that OpenAI immediately deletes it.

Past menus on your device

Alacarte saves recent menus, translations, menu thumbnails, and generated pictures on your device so you can reopen them. You can delete individual menus or clear your history in the app. Older entries are removed as the history fills up. Your device's backup settings may include this history in a device or cloud backup.

Installation verification and credits

The backend uses Apple App Attest or Google Play Integrity to check that requests come from an eligible installation. It stores verification records, a pseudonymous installation identifier, credit balances, and request types, costs, and dates. These records protect the service from abuse and keep credits accurate without a login. Raw Android identifiers and Play Integrity tokens are not saved by the backend.

IP addresses help limit excessive authentication requests. Cloudflare processes network information and technical logs to deliver and protect the service.

Subscriptions

Apple or Google handles payments. Alacarte does not receive your payment card number. The backend verifies purchases with the store and saves purchase identifiers, products, subscription status and dates, credit balances, and the installations using a purchase. Store notifications keep those records up to date.

These records let you restore your subscription and remaining credits. Deleting the app or its history does not cancel a subscription or erase these records. Manage or cancel your subscription through your App Store or Google Play account.

Diagnostics and usage

Release versions send Sentry crash reports, error details, device and operating-system information, app versions, timings, and activity such as menu-scan and image counts. Native diagnostics can include a Sentry installation identifier. This helps me find bugs, understand reliability, and measure service usage.

Screenshot and screen-hierarchy attachments are disabled. The app removes request bodies, photo data, file paths, and known dish names from JavaScript error reports. Read Sentry's privacy policy for its data-handling practices.

Alacarte does not display advertisements or use advertising identifiers to track you across apps or websites.

Retention and deletion

Local history remains until you delete it, the app removes older entries, or the app's local data is removed. Backups have their own retention settings.

The backend removes duplicate-request records after 32 days and clears old Android authentication-attempt records daily. Installation, credit, and subscription records have no automatic expiry. They support credit accounting, purchase restoration, and abuse prevention.

Cloudflare, OpenAI, Apple, Google, and Sentry also process information under their own retention settings and policies. Removing local app data does not immediately remove information those services already hold.

To ask about your data or request deletion of backend records, email alacarte@mrousavy.com. Because Alacarte has no user accounts, I may need information that identifies the relevant installation or purchase to locate a record. If you contact me, I receive your email address and the information you include so I can answer.

Children

Alacarte is not directed at children under 13.

Changes to this policy

I may update this Privacy Policy from time to time. Changes will be posted on this page along with a new effective date.

Contact

If you have questions about this Privacy Policy, contact me at alacarte@mrousavy.com.