MIDAMIDA

Privacy Policy

Last updated : October 6, 2026

At MIDA, your data and your customers' data matter. This page explains in plain words what we collect, why, how we protect it, and what you can do with it. The service is available at midamenu.com.

1. Who is responsible for your data?

The MIDA service is operated by MIDA, represented by its co-founder. For any question about your data, write to contact@midamenu.com.

2. The data we collect

  • Your account: first name, last name, email address and password. Your password is never stored in readable form: it is transformed irreversibly.
  • Your business: name, type of activity, city, address, phone, opening hours, description, logo, photos, menu, dishes and prices, and the menu file you upload.
  • Your subscription: chosen plan, status and renewal dates. Payment is handled by our partner Lemon Squeezy: we never see or store your card number.
  • Technical information for security and operation: IP address, device and browser type, error logs. We use it to protect the service and fix problems.

The business information you choose to publish (name, menu, hours, address, phone, photos) is visible to everyone on your public page. Only publish what you are happy to make public.

3. Why we use it

  • To create and run your account, and to display your menu and website.
  • To manage your subscription, payments and invoices.
  • To send you emails the service needs: email confirmation, password reset, important notices about your subscription.
  • To protect the service against abuse and intrusion, and to improve it.
  • To meet our legal obligations.

4. What we do not do

  • We do not sell your personal data.
  • We do not share it with advertisers or data brokers.
  • We do not use advertising cookies or behavioural tracking tools.

5. Who we work with

To run MIDA we rely on a few trusted providers, who only access data to deliver their service:

ProviderRole
Hosting provider (Europe)Hosting of servers and backups
Lemon SqueezySubscription payments and billing
Email providerSending the service's emails

Some of these providers may process data outside Morocco, notably in Europe and the United States. We only entrust them with what is necessary. The full list of our providers is available on request. We may also disclose data where the law or a competent authority requires it.

6. How we protect your data

Security is built in layers, so that no single failure is enough to expose your data:

  • Encryption: every connection to MIDA uses HTTPS, so nobody can intercept what you send.
  • Protected passwords: they are transformed irreversibly, nobody at MIDA can read them.
  • Firewall: only the access needed for the site to work is open.
  • Restricted access and strong authentication for administering the service.
  • Isolated data: it is not directly reachable from the Internet.
  • Regular security updates and automatic backups.

No system is invulnerable. If an incident seriously affected your data, we would tell you promptly, as the law requires.

7. How long we keep it

We keep your data while your account is active. If you ask us to delete your account, we delete your personal data and your business data, except what the law requires us to keep (for example billing records). If your subscription ends, your public page goes offline but your data remains available so you can pick up again at any time, until you ask for its deletion.

8. Cookies and browser storage

MIDA only uses your browser's storage to make the service work: keeping you signed in after login, remembering your language, and temporarily holding your setup progress. There are no advertising cookies or third-party tracking tools. Logging out clears this information.

9. Your rights

Under Moroccan Law No. 09-08 on personal data protection and, where it applies to you, the European GDPR, you may at any time access your data, correct it, ask for it to be deleted, object to certain processing, or request a copy. Write to us at contact@midamenu.com and we will answer within a reasonable time. You can also contact the data protection authority in your country (in Morocco, the CNDP).

10. Minors

MIDA is for professionals. The service is not intended for people under 18.

11. Changes

We may update this policy, for example when the service changes. The date of the last update is shown at the top of this page. For important changes we will tell you by email or in the app.

Questions about this document?

Write to us. We usually reply within a few working days.

contact@midamenu.com