Privacy

The free QR code generator

Codes are made in your browser. What you type, including Wi-Fi passwords, is never sent to our servers.

Menus your guests read

Published menus set no cookies and run no advertising or tracking scripts. Scan counts for dynamic codes are planned: when they launch, we'll count each scan by country, type of device and hour, without keeping IP addresses in those counts. Like any website, our hosting provider keeps standard request logs, which can include IP addresses.

Accounts

When you create a workspace we keep your email address, your name and business name, and a hash of your password (never the password itself). We also keep what you make: your menus, QR codes, tables, orders, bookings and any logos or photos you add, so your dashboard works from any device. We keep it until you delete your account. Signing in sets a cookie, kiwii_session, which only keeps you signed in; it is not used for tracking and expires after 7 days. The site also keeps your language choice in a second cookie, kiwiimenu-lang. Sign-up and reset codes are sent by email and stored only as a hash. To limit repeated sign-in attempts we count them for up to 15 minutes against your email address and, where our host passes it on, your network address. Billing is not connected yet; when paid plans launch, your payment details will be processed by our payment provider. In Settings you can export everything or delete your account and its data.

What is still a preview

Hosted menus on guests' own phones, short links and live scan counts are not connected yet. Until they are, the ordering and booking demos in the dashboard run inside your own workspace, and the scan charts show clearly labelled example data.

Questions

Write to hello@kiwiimenu.app.