Legal
Privacy Policy
Effective November 4, 2026
In short: we use your data only to provide the TitiMenu service, we do not sell it or use it for advertising, the data of each restaurant’s customers belongs to that restaurant, and you can ask us at any time to correct or delete it. TitiMenu is not intended for anyone under 18.
This is a translation for convenience. If it differs from the Spanish version, the Spanish version prevails.
Contents
- 1. Who is responsible
- 2. Two roles: controller and processor
- 3. What data we collect
- 4. How we use it
- 5. Data of restaurants’ customers
- 6. Apps
- 7. Who we share data with
- 8. Where data is stored
- 9. Security
- 10. How long we keep it
- 11. Your rights
- 12. Minors
- 13. Cookies and local storage
- 14. Emails and notifications
- 15. Changes to this policy
- 16. Contact
1. Who is responsible
TitiMenu is a digital menu, ordering and point-of-sale platform for restaurants and food businesses, operating at titimenu.com and in the apps described in section 6. The data controller is TITIMENU SRL, tax ID (RNC) 133-84589-1, with its address at Urb. Los Maestros, Calle 1, Puerto Plata, República Dominicana, which keeps your data in its databases for the purposes and recipients explained in this policy. You can write to us at titimenuinfo@gmail.com.
This policy is governed by Dominican Law 172-13 on Personal Data Protection and applies to the website, the business dashboard, the public menus and the TitiMenu apps.
2. Two roles: controller and processor
When we are the controller
For the data of business owners who open an account, visitors to titimenu.com and people who contact us. We decide how it is used, as set out in this policy.
When we are the processor
For the data each business keeps in TitiMenu about its customers (orders, reservations, invoices) and its staff. The business is the controller: it decides how the data is used and is who you should contact first. We only process it to provide the service to the business, following its instructions, and we do not use it for our own purposes.
3. What data we collect
Account data
Email, password (stored encrypted by the authentication system; we never see it) and WhatsApp number when you sign up.
Business data
Name, description, address, country and province, WhatsApp number, opening hours, logo, cover, colors and, if you turn on distance-based delivery, the GPS coordinates of the business.
Tax data
RNC, legal name, receipt sequences and, in e-CF invoices, the buyer details the business enters (for example, their RNC or name on a tax-credit invoice).
Staff data
Name, username, role, permissions and access PIN of the employees the business creates.
Menu content
Categories, items, prices, descriptions, images and promotions.
Orders and sales
Table, point-of-sale, delivery and takeout orders: items, amounts, payment method and, for delivery, the customer’s name, phone, address, notes and —only if the customer shares it— GPS location.
Reservations
Name, phone, party size, date and time.
Plan payments
Amount, date and period of your subscription payments. We do not receive or store card details.
Service usage
Menu visits, most viewed items and the business’s sales statistics, without identifying visitors. If you use the dashboard assistant or the menu scanner, the text of your questions or the menu image.
Visits to titimenu.com
Technical data collected by Google Analytics: pages viewed, where the visit came from, device type, approximate city and which buttons are clicked. We do not send it your name, email or phone.
4. How we use it
We use the data only to:
- • Provide the service you signed up for: show your menu, receive and manage orders, tables, sales, reservations, inventory and reports, calculate delivery fees and print tickets (basis: the contract with the business).
- • Issue electronic invoices through Digifact when the business requests it (basis: the contract and the business’s tax obligations).
- • Manage your account and subscription: access, staff roles, payments and receipts.
- • Support you and send you important service notices.
- • Protect the platform: prevent fraud, unauthorized access and abuse.
- • Improve TitiMenu with aggregated usage statistics, and measure visits to titimenu.com.
- • Comply with the law, for example keeping tax records or responding to a competent authority.
Most of these uses are necessary to perform the service contract, so they do not require separate consent (Law 172-13, art. 27, items 2 and 4). For the rest —such as news by email or notifications— we ask for your consent, and you can withdraw it at any time.
We do not use data for advertising, we do not build commercial profiles of businesses’ customers and we do not make automated decisions that affect you.
5. Data of restaurants’ customers
If you order from or book a restaurant that uses TitiMenu, the data you give (name, phone, address, notes and, if you share it, your location) goes to that restaurant, which is responsible for it. In addition:
- • It is stored with the order inside the business’s account and only the owner and the staff they authorize can see it.
- • It is used to handle the order or reservation. WhatsApp orders are sent from your phone to the business’s WhatsApp.
- • Sharing your location is optional: you can type the address and the business will confirm the delivery fee.
- • Your order link shows its status and, when the driver is on the way, the progress of the delivery on a map.
- • To see, correct or delete this data, write to the restaurant. If it does not answer, write to us and we will help it handle your request.
6. Apps
This policy also covers the TitiMenu apps for business staff:
TitiMenu Staff (Android, Windows and Mac)
Staff app —waiter, cashier and delivery driver—: tables and service calls, point of sale and delivery with order tracking.
TitiMenu for PC (Windows and Mac)
Desktop app for the point of sale and for printing tickets and kitchen orders on printers connected to the computer.
TitiPrint (Android)
Print bridge that receives print jobs and sends them to a network thermal printer at the business.
Delivery driver’s GPS location
During a delivery, TitiMenu Staff for Android transmits the driver’s GPS location in real time only while a delivery route is active, so the customer can follow the order on the map. That transmission travels over a real-time channel and no route history is stored: when the delivery ends, it stops and no record of the employee’s route remains. To navigate, the driver can open Google Maps with the delivery address.
Permissions requested by the Android apps
- • Location: to track the delivery while a route is active (TitiMenu Staff for Android, driver mode only).
- • Notifications: to alert about table calls and new delivery orders.
- • Local network: to communicate with the thermal printer on the business’s network.
- • Bluetooth: only to send the ticket to a thermal printer paired with the device (TitiMenu Staff for Android, cashier mode). It is not used to determine your location or to detect other devices: the app does not scan for devices —pairing is done in the system settings— and it only connects to the printer the business chose. Ticket data travels from the device to the printer and is not sent to TitiMenu or third parties this way.
- • Background services: to receive those alerts even with the screen off.
Data stored on the device
The apps store on the device the signed-in session, the business code and device preferences (for example, showing or hiding item images in the POS). TitiMenu Staff for Android may store sales made offline until the connection returns and then uploads them.
Printing
TitiPrint runs a local server on the business’s network to receive print jobs, stores a token on the device to authenticate those requests and reports the device’s local IP address to our database so the system can locate the printer on the network.
8. Where data is stored
Our main providers store data on servers outside the Dominican Republic, mainly in the United States. This transfer is necessary to perform the service contract (Law 172-13, art. 80, item 6) and by using TitiMenu you authorize it. We choose providers that apply internationally recognized security measures.
9. Security
We protect data with technical and organizational measures, including:
- • Encrypted connections (HTTPS/TLS) for every data transfer.
- • Database security rules: each business can only see its own data.
- • Staff access limited by role (owner, waiter, kitchen, bar, cashier, driver).
- • Sessions with expiring tokens and a limit on PIN login attempts.
- • Internal access to data only when needed to provide support or fix a problem.
No system is infallible. If a security incident affecting your data occurred, we would notify you without undue delay with what we know and the measures taken.
10. How long we keep it
- • While your account is active, we keep the data needed to provide the service.
- • If you ask us to delete your account, we erase the data we are not required to keep within the following 30 days. Data the law requires us to keep is blocked —not used— until that period ends, and then erased (Law 172-13, art. 15).
- • Records with tax value (sales, receipts and payments) are kept for the period required by Dominican tax rules, up to 10 years.
- • Backups are deleted in their normal rotation cycle.
11. Your rights
Under Law 172-13 (arts. 8 to 16), you have the right to:
- • Access: know what data we have about you and what we use it for.
- • Rectification: correct inaccurate or incomplete data. You can change much of it yourself in your dashboard.
- • Erasure: ask us to delete your data, except what the law requires us to keep.
- • Objection: object to a specific use of your data, for example receiving promotional emails.
- • Compensation: to be compensated under general law if you suffer harm from a breach of the law (art. 16).
- • A copy of your data: ask us for a copy in a commonly used format. Sales and inventory reports can also be exported from the dashboard.
Write to us at titimenuinfo@gmail.com from your account’s email address, saying which right you want to exercise. It is free and each right is exercised separately, none being a prerequisite for another. We may ask you to confirm your identity. Deadlines: we provide access information within 5 business days (arts. 10 and 12) and make rectifications, updates or erasures within 10 business days (art. 8). If the data relates to an order or reservation at a restaurant, see section 5. If we do not answer in time or you are not satisfied, you can file a habeas data action before the judge of your domicile (arts. 17 to 20).
12. Minors
TitiMenu is not intended for anyone under 18 and we do not knowingly collect personal data from minors. Minors’ data has special protection under the Dominican Code for the Protection of the Rights of Children and Adolescents (Law 136-03), to which Law 172-13 refers in its art. 79.
- • You must be at least 18 to create an account, manage a business or use the apps as staff.
- • If you are under 18, do not send orders, reservations or personal data through TitiMenu: ask your parent or guardian to do it.
- • If you are a parent or guardian and believe a minor gave us their data, write to us at titimenuinfo@gmail.com and we will delete it.
- • If we discover that an account belongs to a minor, we close it and delete its data.
14. Emails and notifications
We send you emails and notices necessary for the service (welcome, status of your account and plan, important changes). Occasionally we may send TitiMenu news; if you do not want to receive it, write to us and we will stop. Browser and app push notifications are only turned on if you accept them.
15. Changes to this policy
If we make significant changes, we will notify you by email or in your dashboard at least 30 days in advance. The date of the current version is shown above.
16. Contact
For any question about this policy or your data, write to us at titimenuinfo@gmail.com.
TITIMENU SRL · RNC 133-84589-1 · Urb. Los Maestros, Calle 1, Puerto Plata, República Dominicana