Legal & Privacy.

Company identity.

manomi.app is operated by KALYDU.AI LTD, a private limited company registered in the Republic of Cyprus.

Terms of use.

These terms govern the site and the manomi.app product. Trip Passes are sold by Creem as Merchant of Record under its Buyer Terms of Service; refunds and billing are handled by Creem.

Site content

The text, design, photography, and code on this site are the property of KALYDU.AI LTD or used under licence. You may quote short excerpts with attribution. You may not republish substantial portions, scrape the site at scale, or use any content to train a generative model without our written permission.

Use of the app

manomi.app is provided for personal travel use — to translate menus and produce an order card you show to restaurant staff. Translations are produced by automated systems and are best-effort. Always verify allergens, ingredients, and prices with the restaurant before ordering.

Submissions

When you upload a menu photo, the image is processed to produce a translation and is then discarded. We do not retain menu photographs after processing. When you contact us by email, we treat the contents as confidential by default.

Liability

To the extent permitted by Cypriot and EU law, KALYDU.AI LTD is not liable for indirect or consequential loss arising from use of manomi.app — including, but not limited to, translation errors, missed allergen warnings, or pricing discrepancies. Nothing in these terms excludes liability for fraud, wilful misconduct, or any liability that cannot lawfully be excluded.

Governing law

These terms are governed by the law of the Republic of Cyprus. Disputes will be resolved in the courts of Larnaca, without prejudice to mandatory consumer-protection rules.

Privacy policy.

This section explains how KALYDU.AI LTD processes personal data via manomi.app, as data controller, under the EU General Data Protection Regulation (GDPR) and the Cypriot Personal Data Protection Law of 2018.

manomi.app is designed to collect as little personal data as possible. If you only use the free scans, the only data we hold about you is anonymous device identifiers. If you purchase a Trip Pass, your payment provider holds your billing details; we receive only a payment confirmation token.

Data we collect.

From you, directly

• Menu photographs — processed on our servers to produce translations and the Order Card. Discarded immediately after processing.
• Device pass key — a cryptographic identifier created on your device to authenticate your Trip Pass across sessions. We never receive your biometric data.
• Payment confirmation — a token from your payment provider confirming Trip Pass purchase. We never see your card details, email, or billing address.

On your device only

• Restaurant history, orders, ratings, and tags — stored locally on your device. We do not sync this anywhere. If you uninstall the app or clear storage, it is gone.

Automatically, when you visit the site

• Technical logs — IP address, browser type, timestamp. Held briefly for security and debugging.
• Aggregated analytics — anonymised usage statistics, only if you accept analytics cookies (see §9).

We do not use trackers or third-party advertising pixels, and we do not sell or rent personal data to anyone.

Legal basis & purposes.

We rely on the following lawful bases under Article 6 GDPR:

• Consent — for analytics cookies and any future marketing emails. You can withdraw at any time.
• Contract — to deliver paid Trip Pass features you have purchased.
• Legitimate interests — to keep the site and app secure, prevent abuse, and improve quality of translations. We balance these interests against your rights and freedoms.
• Legal obligation — to retain accounting and tax records for the period required by Cypriot law.

Sharing & processors.

manomi.app uses a few third parties. Processors act on our instructions under a data-processing agreement; our Merchant of Record acts as a separate, independent controller.

• Merchant of Record — Creem (Armitage Labs OÜ, Estonia) sells Trip Passes as MoR and is a separate controller for your billing data under its own privacy policy. We receive only a confirmation token — never your card, email, or billing address.
• Processors — translation infrastructure (EU; menu images discarded after processing), site hosting (EU), accounting (Cyprus). Transfers outside the EEA use Standard Contractual Clauses or equivalent.

We use no trackers or ad pixels, and we never sell or rent personal data.

Retention.

• Menu photographs — discarded immediately after the translation is produced. Zero retention.
• Restaurant history, orders, ratings — stored on your device only. We hold nothing.
• Trip Pass confirmation token — duration of the Pass plus 12 months, for entitlement and support. Billing and refund records are held by Creem.
• Email correspondence — up to 24 months from last contact, unless you ask us to delete sooner.
• Financial records — 7 years, as required by Cypriot tax and corporate law.
• Server logs — 30 days for security purposes.

Your rights.

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify data that is inaccurate or incomplete.
• Erase data we no longer need to keep ("right to be forgotten").
• Restrict or object to processing based on legitimate interests.
• Port your data to another provider in a machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of past processing.
• Lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

To exercise any of these, write to privacy@kalydu.ai. We respond within 30 days.

Cookies.

This site uses two kinds of cookies:

• Strictly necessary — required for the site to function (e.g. remembering your language choice and that you've dismissed the cookie banner). No consent required.
• Analytics (optional) — anonymised, aggregated usage statistics. Off by default. We ask before setting them.

No advertising cookies, social-media trackers, or fingerprinting are used on this site.

You can clear cookies at any time through your browser settings.

Security.

We apply industry-standard technical and organisational measures, including TLS for all transport, encryption at rest for sensitive data, principle-of-least-privilege access controls, mandatory MFA for all employees and contractors with access to operational systems, and regular review of who can see what.

The device pass key never leaves your device. Biometric authentication, when used to unlock the pass, happens entirely on your device — we never receive fingerprints, face scans, or PINs.

If we become aware of a personal-data breach that is likely to result in risk to your rights and freedoms, we will notify the supervisory authority within 72 hours and you, where required, without undue delay.

Changes to this notice.

We may update this notice from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be flagged in advance — at the top of this page and, where appropriate, in-app.

Contact & data protection.

For privacy questions, data-subject requests, or anything else covered by this notice, write to privacy@kalydu.ai. For general manomi.app enquiries, info@manomi.app is the right address.

The data-protection supervisory authority for KALYDU.AI LTD is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus. You have the right to lodge a complaint there at any time.