Privacy Policy — miniKast

1. Overview & Commitment

Welcome to miniKast ("miniKast", "MenuCast", "we", "our", or "us"). miniKast provides digital menu board signage solutions allowing restaurants and businesses to design, manage, and push digital menus to physical display screens, web clients, and TV applications (including the miniKast TV Android TV player).

We are committed to protecting your privacy and being transparent about how data is collected, used, and secured across our web platform and Android TV application.

2. Information We Collect

A. TV Display Player & Hardware Telemetry (Android TV App):
The miniKast Android TV kiosk application operates strictly as a display client. It collects non-personal technical telemetry necessary to synchronize menu displays:

Pairing Identifiers: Ephemeral 8-character pairing codes and assigned screen IDs.
Display Heartbeat & Connection State: Ping timestamps to report whether a screen is online/offline.
Screen Specifications: Resolution (e.g. 1920×1080) and orientation (landscape/portrait) to render menu graphics accurately.

* Note: The Android TV app does NOT collect location, audio, camera/microphone data, personal contact information, or financial details.

B. Account & Web Dashboard Information:
When you register an account on the miniKast web portal or Figma plugin:

Account Credentials: Email address and encrypted password credentials.
Uploaded Menu Assets: Menu images, graphics, and artboards pushed to your connected displays.
Session Tokens: Secure API authentication tokens and session cookies.

3. How We Use Information

To authenticate your account and securely manage your paired TV screens.
To broadcast real-time menu updates from Figma or the web dashboard to your TV displays via encrypted WebSockets.
To provide live screen status and diagnostic telemetry on your dashboard.
To maintain system reliability, security, and prevent abuse.

4. Data Storage, Security & Retention

All network communication between your TV display, web dashboard, and server uses industry-standard HTTPS / TLS encryption. Database records are protected with strict PostgreSQL Row-Level Security (RLS) policies to ensure complete tenant isolation.

We retain account data and paired display configurations for as long as your account remains active. You can unpair screens or delete your account at any time from the account settings.

5. Third-Party Services

We partner with reputable infrastructure providers to operate the service:

Supabase: Database hosting, user authentication, storage, and real-time WebSocket infrastructure.
Vercel: Web application hosting and serverless API execution.

6. Children's Privacy

miniKast is a business digital signage platform and is not directed to children under 13 years of age. We do not knowingly collect personal data from children.

7. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: hello@menucast.com