Privacy policy

Last updated November 2, 2026

happymenu.co.nz is run by Happy Menu ("we", "us"). This policy explains what we collect when you use the site or join as a member, why, who else is involved, and the choices you have. Each Happy Menu country site is run separately with its own member accounts, so this policy covers happymenu.co.nz only.

The short version

  • You can read menus without an account. We never ask for your name or email to browse.
  • If you join, you sign in with Google or Apple (Apple in the iPhone app, and on the website where it is offered). From Google we receive your name, email address and profile photo; from Apple, your name and email address, which is a private relay address if you choose Hide My Email. We never receive your password.
  • If you use Sign in with Apple: when you delete your Happy Menu account, we also ask Apple to remove Happy Menu from your Apple Account. If you stop using Sign in with Apple for Happy Menu, we sign you out everywhere. If you delete your Apple Account, we delete your Happy Menu account too, unless you also sign in with Google. If you turn off Hide My Email forwarding, we stop emailing you.
  • To stop fake accounts, every member confirms a mobile number with a code we text them. We don't keep the number itself, only a scrambled fingerprint and its last three digits, and we never use it to contact you or for marketing.
  • Your profile, diary, reviews, photos, lists, likes and comments are public unless you make your profile private. Your email address is never shown.
  • We don't sell your personal information, and we don't use your diary to target advertising.
  • You can delete your account yourself at any time, and everything you added goes with it.

What we collect

When you browse

  • Page counts. Restaurant pages count things like views, sections read and clicks. We store only daily totals for each page, with no cookies, IP addresses or other identifiers.
  • Server logs. Like every website, our hosting servers record requests, including your IP address, browser, the page requested and the time. We use them to keep the site secure and working.
  • Cloudflare. Every visit passes through Cloudflare, which protects the site from attacks and bots and makes it faster. Cloudflare processes your IP address and request details to do this, and may set a security cookie when it needs to check for bots.
  • Google Analytics. We use Google Analytics to understand how many people visit and which pages they use. It sets cookies and sends Google details such as the pages you view, your approximate location, your device and browser, and an identifier for your browser.
  • Microsoft Clarity. We use Microsoft Clarity to see how pages are used, through heatmaps and recordings of clicks, scrolling and mouse movement, so we can fix pages that are confusing or broken. Clarity sets cookies and masks text typed into forms by default.
  • Google Maps. Restaurant pages show a map from Google Maps. When it loads, your browser connects to Google, which receives your IP address and may set cookies under Google's own privacy policy.
  • Fonts. Some fonts load from Google Fonts, which receives your IP address and browser details when they load.

When you join with Google

We ask Google for your basic profile: your name, email address, profile photo, and an account ID that stays the same if you change your email. Google also confirms your email address is verified. We never see your Google password, contacts or anything else in your Google account, and we never post to Google. We don't give you a password; you always sign in through Google.

Each Happy Menu site is for diners in its own country, so when you create an account we check which country your internet connection is in, using the country Cloudflare reports for your IP address. Only people in New Zealand can create an account here. We use this check only at that moment and don't store it.

When you confirm your mobile number

To keep out fake accounts and spam, every member confirms a mobile number from New Zealand before they can post or follow. We send the number to Twilio, which checks it is a real mobile (not a landline or an internet number) and texts you a code. We don't store your number: we keep a scrambled fingerprint of it, so one number can't confirm several accounts, and its last three digits, so you can see which number you used. We never call or text you with it, show it to anyone or use it for marketing.

What you add as a member

  • Your profile: username and name, and if you choose, a bio, a location, a banner, a profile photo you upload, or your Google photo.
  • Your lists: places you want to try and places you have eaten, your favourites, and lists you make.
  • Your visits: the date, your rating, whether you loved it, your review, the dishes you had and your photos. When you upload a photo we remove its location, camera details and other hidden data.
  • Your activity: who you follow, what you like, the comments you write, anything you report and anyone you block. Blocks are private: the member you block isn't told.

We also keep when things were added, whether a post is waiting for approval, your notifications, and your email choices.

Anyone can suggest a restaurant for us to add, with or without an account. We keep what you write, which app or website it came from and, if you're signed in, your account with it. Suggestions are only seen by our team.

When you use the app

  • Location: if you allow it, the app uses your phone's location to show restaurants near you and to sort searches by distance. It sends your position with those requests; we don't store it with your account, though like any request it can appear in our server logs for a short time. Without it, the app shows a city centre. You can change this any time in your phone's settings.
  • Directions in the iPhone app: your location and the restaurant's are sent to Apple Maps to work out the route. They don't come to us.
  • Your devices: when you sign in to the app we keep the device's name (such as "Priya's iPhone") and whether it is an iPhone or Android phone, so you can see where you are signed in and sign devices out.
  • Push notifications: if you turn them on, we keep the notification token Apple or Google gives the app, so we can send you notifications through Expo. Turn them off in the app's settings or your phone's.
  • Photos: the app only reads the photos you choose to add.

What other people can see

Member profiles are public so diners can follow each other's taste. Unless you make your profile private, anyone can see your username, name, photo, banner, bio and location; the places you have eaten and want to try; your diary and ratings; your reviews, photos and lists; the reviews and lists you like; and who you follow and who follows you. Anyone can find a public profile by name or username in the people search on the website and in the app. Public profiles, reviews and lists can appear in search engines.

If you make your profile private, other people see only your name, username and photo. Your reviews, photos, lists and activity stay off public pages, though your ratings still count, without your name, in restaurant averages. Comments you post on other members' reviews and lists show with your name and photo either way. A private profile only appears in the people search for someone who types your exact username.

Your email address is never shown to other members.

How we use it

  • To run your account and the features you use: your profile, lists, diary, follows, likes, comments and notifications.
  • To show restaurant ratings and counts, such as how many members have eaten somewhere and its average member rating.
  • To keep the community honest and safe: we review reports, remove posts that break our community guidelines and ban accounts that abuse the site.
  • To understand how the site is used and improve it.
  • To keep the site secure, prevent spam and abuse, and meet our legal obligations.

We email you about activity on your own account: when someone comments on your review or list, replies to you, or follows you (new followers come together, at most once a day). You can turn these off in your profile. The weekly summary of new likes, followers and comments, with what is popular near you, is sent only if you ask for it. We don't send any other marketing emails, and every email has an unsubscribe link.

Who else receives information

  • Our hosting provider, which stores the site and its database for us.
  • Cloudflare, which every visit passes through for security and speed.
  • Twilio, which checks your mobile number and texts you the confirmation code.
  • Apple: if you sign in with Apple, Apple confirms who you are and we tell Apple when your account is deleted; in the iPhone app, Apple Maps works out directions and Apple delivers notifications.
  • Expo, which passes the app's push notifications to Apple and Google to deliver.
  • Google, for sign-in, Google Analytics, maps and fonts.
  • Microsoft, for Clarity.
  • Anyone, for what you choose to make public.
  • Authorities or others when the law requires it, or when it is needed to protect someone's safety or our legal rights.

We don't sell or rent your personal information, and restaurants cannot buy access to it.

These providers may store and process information outside New Zealand, including in the United States.

Cookies

CookieWhat it doesHow long
wordpress_logged_in_…, wordpress_sec_…Keeps members signed in.180 days, or until you sign out
happymenu_members_stateProtects signing in with Google.10 minutes
__cf_bm, cf_clearanceCloudflare: set only when needed to tell people from bots.30 minutes to 1 year
_ga, _ga_…Google Analytics: counts visits and how the site is used.Up to 2 years
_clck, _clsk, and Microsoft cookies such as MUIDMicrosoft Clarity: links page views into visits for heatmaps and recordings.Up to 1 year
Google cookies such as NIDSet by Google when a map loads.Set by Google

Sign-in cookies are needed for accounts to work. You can block or delete the others in your browser settings without losing access to menus. Google also offers a browser add-on to opt out of Google Analytics.

How long we keep it

  • Your account and everything you added stay until you delete them or your account.
  • When you delete your account, we delete your profile, lists, visits, reviews, ratings, photos, follows, likes, comments, notifications and reports straight away. Copies can remain in our routine backups for a short time until those backups are replaced.
  • Posts we remove for breaking the community guidelines are hidden at once and deleted with your account.
  • App sign-ins and notification tokens stay until you sign out of that device, delete your account, or don't use the app for 180 days.
  • If we ban an account for abuse and it is then deleted, we keep a scrambled form of its Google or Apple account ID and of its mobile number, so they cannot be used to rejoin.
  • Server logs and analytics data are kept for the periods set by our hosting provider, Cloudflare, Google and Microsoft.

Your choices and rights

  • Change your profile, make it private or turn off your Google photo on your account page.
  • Edit or delete any visit, review, photo, list or comment you added.
  • Delete your account from your account page at any time.

Under the Privacy Act 2020, you can ask to access and correct the personal information we hold about you, and we will respond within 20 working days. If you are not satisfied with how we handle your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Children

Happy Menu accounts are for people aged 13 and over, or older where the law requires it to have a Google account. If you think a child has joined, tell us and we will delete the account.

Security

The site uses HTTPS. Members sign in through Google, so we hold no passwords for them. Only a small number of people can access member information, and only to run and moderate the site. No website is perfectly secure, so please tell us if you think something is wrong.

Changes to this policy

If we change this policy, we will update the date at the top. If a change significantly affects how we use members' information, we will tell members on the site before it takes effect.

Contact us

You can change or delete everything you added, and your account, from your account page.