Carteau

Introduction

Effective October 2026. Carteau is operated by Emilian Scheel (individual developer). This Privacy Policy explains how Carteau collects, uses, and protects information when you use the Carteau iPhone app or website at carteau.app.

emilian.scheel@gmail.com

What Carteau does

Carteau is a crowdsourced menu registry and map for restaurants, cafés, and bars. You can browse venue menus, search dishes and drinks, and optionally contribute menu photos to improve the dataset. Carteau does not create user accounts.

Data we collect

  • Location (iPhone app, when you allow it). Carteau uses your device location while the app is in use to center the map, show nearby venues, and improve venue search. When you search for venues, approximate coordinates may be sent to Carteau's servers and to OpenStreetMap-backed lookup services.
  • Photos (contributions). If you contribute menu photos, Carteau receives images you capture with the camera, select from your photo library, or import from Files. Photos are uploaded to api.carteau.app for processing.
  • Search queries. Text you enter when searching menus or venues may be sent to Carteau's API to return results.
  • Anonymous action counts (website). When you open a venue menu or click its Call or Website link, Carteau stores the venue, action, and time. If you choose to answer the follow-up question, we store your Yes, No, or Skip answer as a self-report. The action record contains no account ID, browser identifier, fingerprint, or IP address. A random ID links an answer to that single action; a pending ID may remain in this tab until you answer or close it.
  • Contribution metadata. When you submit photos, Carteau receives the selected venue identifier or, for new venues, the name, coordinates, and optional address, phone number, and website you provide.
  • Technical data. Carteau uses transient network information, such as your IP address, for rate limiting and abuse prevention at the edge. IP addresses are not durably stored as user profiles.
  • Downloaded venue data. The iPhone app caches venue and menu data locally in SQLite on your device for offline use until you delete the app or its data.

How we use data

Carteau uses collected information to operate the map and search experience, process menu photo contributions, extract structured menu facts with automated analysis, maintain and improve the dataset, prevent abuse, and keep the service available.

Legal basis (GDPR)

Where the GDPR applies, Carteau processes data on the basis of legitimate interest in operating and improving the service, and on your voluntary action when you choose to submit menu photos or enable location access.

Third-party services

Carteau relies on third parties to provide the service, including:

  • Cloudflare
    • R2 — EU-jurisdiction photo storage.
    • DNS and proxy — API and MCP traffic.
    • CDN — illustration images served from cdn.carteau.app.
  • Railway
    • API and MCP hosting and background jobs.
    • PostgreSQL database.
  • OpenRouter
    • AI model routing for menu extraction.
  • Vercel
    • Web frontend hosting — Carteau's website.
  • OpenStreetMap
    • Overpass API — venue suggestions, details, and opening hours.
  • Apple
    • MapKit — place enrichment and directions on iPhone.

These providers process data according to their own terms and privacy policies where applicable.

Photo storage and AI processing

Uploaded menu photos are normalized, stored privately in an EU-jurisdiction Cloudflare R2 bucket, and processed with AI models through OpenRouter to extract menu facts such as dish names, prices, ingredients, and dietary flags. Photos are not exposed through a public gallery endpoint.

Data retention

Uploaded photos are retained until you request deletion or until they are no longer needed for operating the service. Extracted menu facts may remain in the public dataset after processing. Local app cache on your device persists until you remove the app or clear its data. Operational logs and error metadata may be retained for a limited period.

Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or object to processing of your information, and to request data portability. You may also lodge a complaint with your local supervisory authority.

To exercise these rights, email emilian.scheel@gmail.com and include any contribution token or other details that help identify the submission.

Contact

emilian.scheel@gmail.com+49 152 57 25 7750Form

Children's privacy

Carteau is not directed at children under 13. Do not submit photos that include minors or other personal information unrelated to menus.

Security

Carteau uses private object storage for uploaded photos, rate limiting, and edge abuse protections. No system is completely secure, but Carteau takes reasonable steps to protect submitted information.

International transfers

Carteau primarily processes and stores contribution data in the European Union through Railway and Cloudflare infrastructure. Some supporting services may process data in other regions according to their own policies.

Changes to this policy

Carteau may update this Privacy Policy from time to time. Continued use of the service after changes become effective constitutes acceptance of the updated policy.

iPhone App Privacy summary

For App Store disclosure purposes, the Carteau iPhone app may collect precise location when you grant permission, photos you choose to upload, and product interaction data such as search queries sent to the API. Carteau does not use data for tracking across apps or websites and does not sell personal information.