Document details
- Provider: Kalirox AS — Org.nr 836 971 752 — Drammen, Norway.
- Contact: [email protected] · [email protected] · [email protected].
- Version 1.1 — Effective 8 May 2026.
1. Definitions
- Provider / Mealar / We: Kalirox AS.
- Customer / You: The legal entity or sole trader registering as a merchant.
- Service: The "Mealar" QR-code digital menu and restaurant-management SaaS, including the panel, public menu layer, and AI features.
- Public Menu: The menu page accessible to anyone scanning a Customer's QR code.
- End User / Guest: A person visiting a Public Menu, optionally leaving reviews.
- AI: Automated outputs produced through independent third-party providers (currently Microsoft Azure OpenAI, Google Cloud Vertex AI, Meshy AI, Microsoft Azure AI Vision/Content Safety).
- Mealar Points: Prepaid digital consumption credits used to pay for AI features. They are not electronic money or a financial instrument under any law; they cannot be redeemed off-platform or transferred between accounts.
- Plan: Customer's subscription tier (e.g., Free, Starter, Growth, Advanced).
- Stripe: Stripe Payments Europe Ltd. (Ireland) and affiliates; the independent processor of all payments.
2. Business-to-Business Nature
- The contract is formed electronically between Kalirox AS and the registering business. Mealar is not sold to consumers and is not designed, marketed, or intended for consumer use. Consumer-protection statutes of any jurisdiction — including statutory cooling-off, distance-contract withdrawal, and consumer warranties — do not apply. The individual creating the account must be at least 18, have legal capacity, and authority to bind the business. Registration in a consumer capacity is a material breach and triggers indemnification under Section 17.
3. Account, Eligibility and Geography
- You are responsible for the accuracy of all data submitted (business name, country, tax ID, contact details) and for the confidentiality of credentials and every action under your account. Report suspected unauthorised access immediately to [email protected].
- The Service is not available to businesses established in or operating from territories subject to applicable international sanctions, embargoes, or trade restrictions (the current list is maintained by the Provider and may be updated without notice). You warrant the Service will not be used for unlawful purposes, sanctions evasion, money laundering, or terrorist financing. Breach triggers immediate termination, and we reserve the right to report to competent authorities.
4. The Service, Plans and Public Menu Content
- Plans, feature sets, usage caps, and prices are published on the pricing page and may change under Section 9. We may add, remove, or modify Service features at any time; degraded features that materially affect a paid subscription period are addressed under Section 16.
- Customer content responsibility. Item names, prices, descriptions, allergens, dietary labels, compliance with applicable local food-information and labelling rules, VAT-inclusive/-exclusive price display, and moderation of end-user comments are solely your responsibility. Our delivery of supporting infrastructure does not make us a controller of menu accuracy.
- Allergen and content propagation. Updates you make to allergens, ingredients, prices, or other menu data are not necessarily propagated instantly to all viewers; cache layers, CDN edges, and pre-rendered pages may continue to serve prior values for a brief period. You must allow for this delay and verify changes are live before relying on them at point of service.
- Upload limits and formats. File-size, format, count, and resolution limits for images, videos, logos, and 3D-related uploads are published in the panel and may change. Uploads exceeding limits are rejected; conversion, moderation, and AI processing are asynchronous, may queue, may take longer than indicated estimates, and may fail (in which case Points consumed for a failed AI job are auto-credited per Section 5).
- Single owner per account. Each subscription is licensed to one business and is operated by one owner. You may not share credentials with third parties, sell, sublicense, or operate the Service on behalf of others without our prior written consent. Concurrent multi-user/team access is not currently supported; multiple staff members must coordinate through a single owner account at the owner's risk.
- Inactivity and end-of-life. We may terminate or anonymise accounts that have shown no authenticated login for twelve (12) consecutive months, after providing at least thirty (30) days' notice to the email on file. We may also discontinue, deprecate, or restructure free or beta features at any time with reasonable notice; no compensation is owed for the withdrawal of free or beta functionality.
5. Mealar Points
- Mealar Points are an internal consumption unit used exclusively to pay for AI features. Cost per AI operation is published in the panel (indicative: AI Photo Fix ~30 pts; AI Video Lite ~60, Fast ~100, Full ~300 pts). We may adjust costs prospectively; the unit value of already-purchased Points is preserved.
- Points are valid while the subscription is active. Thirty days after subscription cancellation, account closure, or termination for any reason, unused Points (including those that originated from purchased packs, plan-bundled allocations, welcome grants, or promotional grants) are forfeited with no entitlement to cash or credit. Points are personal to the Customer's account; they may not be transferred, gifted, sold, or pooled across accounts.
- Welcome grants, plan allocations and promotional grants. Points credited as a welcome bonus, as part of a plan tier, or under a discretionary promotional grant (including time-limited menu/meal/feature uplifts) are revocable. On voluntary plan downgrade, expiry of a promotional grant, removal of a discretionary uplift, refund of a related Points pack, or termination for cause, any unused portion of such non-purchased Points may be clawed back automatically and additional pack-originated Points consumed during a refunded period may also be reconciled to a non-negative balance. We will provide visibility of the adjustment in the panel but no cash refund is owed for any clawed-back, expired, or forfeited Points.
- Refund rule. Mealar Points packs are non-refundable under any circumstance, subject only to the two integrity exceptions in Section 10.1. If an AI job fails due to a Provider-side or third-party-AI fault, consumed Points are automatically returned to the wallet; no cash refund is issued. Dissatisfaction with a technically successful output is not grounds for any refund.
6. AI-Generated Content — Disclaimer of Liability
- This Section is the most consequential part of the contract. Use of AI features constitutes acceptance.
- 6.1 As-is. All AI outputs are provided "as-is" and "as-available" with no express or implied warranty of accuracy, completeness, fidelity to the physical dish, fitness for any purpose, merchantability, non-infringement of third-party rights, or reproducibility from identical inputs.
- 6.2 Verification is on you. Before showing an AI output to End Users — and for as long as it remains published — you must independently verify: allergens under applicable food-information rules, dietary labels (vegan, vegetarian, gluten-free, lactose-free, halal, kosher, organic), nutrition data, price, portion, visual fidelity to the actual dish, and preparation method.
- Allergen and health notice. Any End-User claim of allergic reaction, food intolerance, food poisoning, religious or ethical dietary breach, or related harm rests exclusively on you. Mealar will not assume legal or financial responsibility, will not defend the claim, and will not pay damages. Your staff's verbal verification of ingredients at point of service remains a duty independent of these Terms.
- 6.3 Hallucinations and errors. AI models intrinsically may produce wrong, misleading, or inconsistent outputs ("hallucinations"). We do not warrant against this and bear no liability for hallucination-driven harm.
- 6.4 Third-party AI infrastructure — explicit disclaimer. AI features are powered by independent third parties. We make no guarantee as to their continuity, performance, pricing, or policies. We currently do not train any AI model of our own; Customer data is therefore not used by us for AI training. Whether the third-party providers (Microsoft Azure OpenAI, Google Cloud Vertex AI, Meshy AI, and any successor) use Customer data for model training, abuse monitoring, telemetry, or other purposes is governed entirely by their own agreements and privacy policies. We assume no responsibility for tracking, validating, communicating, warranting, or indemnifying changes in those third-party practices. By using AI features you accept the relevant third party's terms and must review them yourself: Microsoft (microsoft.com/licensing/terms), Google Cloud (cloud.google.com/terms), Meshy (meshy.ai/legal). Customers who do not accept this allocation must not use AI features; the non-AI Service remains available.
- 6.5 Limits and abuse prevention. Daily / monthly usage caps, queueing, and rate limits apply. Attempts to manipulate server-side prompts, bypass safety filters, or generate disallowed content (sexual, violent, hateful, child-related, fraudulent) result in suspension or termination.
- 6.6 AI-content disclosure. Where applicable laws require AI-content transparency to End Users, compliance is your obligation. You must not present AI-generated imagery or video as if it were a photograph of the actual dish in a way that could constitute misleading advertising under applicable consumer or commercial law; any such claim by an End User or regulator is allocated to you under Section 17.
- 6.7 Beta nature and provider substitution. All AI features are made available on a beta / preview basis. We may change, replace, suspend, deprecate, or remove any AI feature, model, provider, output format, quality tier, or capacity limit at any time, including replacing or removing the third-party providers listed in Section 6.4. Output produced by a successor provider may differ from prior outputs in style, fidelity, dimensions, or processing time. No back-catalogue compatibility, no regression-free upgrades, and no output reproducibility are warranted.
- 6.8 No processing-time service level. Time estimates shown in the panel (e.g., "approximately 3 minutes") are non-binding indications. AI and asynchronous jobs may queue, retry, time out (we apply abandonment timeouts of approximately sixty (60) minutes for stuck jobs), or fail; no service-level commitment as to completion time is given. Failed jobs auto-credit consumed Points per Section 5; no further compensation is owed.
- 6.9 Identified persons in uploads. If photos or videos you upload contain identifiable individuals (staff, customers, reflections, bystanders), you warrant that you hold all consents and rights required under applicable data-protection, image-rights, and personality-rights law for that use, including for downstream processing by the AI providers in Section 6.4. You indemnify us against any claim arising from missing or invalid consent (Section 17).
7. Custom Domain (Growth and Advanced plans)
- If you bind a custom hostname (e.g., menu.yourbrand.com) to your Public Menu, you remain responsible for: DNS configuration and maintenance, hostname renewal, and trademark rights in the hostname. We perform DNS ownership verification, but we do not control records on your registrar.
- Limits you acknowledge. SSL/TLS certificates for custom hostnames are issued and renewed automatically by our edge CDN provider; certificate issuance and renewal may experience propagation delays, may temporarily fail, and may produce certificate-validation warnings in some clients during transitions. We do not guarantee uninterrupted certificate availability and do not provide certificate-expiry notifications. On account deletion or plan downgrade, edge unbinding is best-effort and the hostname may remain cached at the edge for up to thirty days. You will hold us harmless from disputes arising from misconfigured DNS, hijacked domains, expired registrations, trademark conflicts with your chosen hostname, or certificate-trust errors at the edge.
8. Reviews and User-Generated Content
- End Users may leave star ratings and text reviews on your menu items. You must comply with applicable laws on hosting third-party content (defamation, advertising integrity, processing of reviewer personal data — see Privacy Policy).
- Moderation reality. End Users may delete their own reviews; reviews may be reactivated by the same author. You cannot delete End-User reviews directly; you may report a review (reasons: spam, offensive content, false claim, harassment, other), after which a Mealar administrator decides whether to remove or dismiss the report. We aim to review reports promptly but do not commit to a fixed turnaround. We may also remove content at our discretion where we consider it unlawful, abusive, or harmful to platform integrity.
- Notice-and-action for unlawful content. As an intermediary hosting service we operate a notice-and-action mechanism for any party (you, an End User, a third party, or a public authority) to report content available through the Service that they believe is unlawful. Reports may be submitted to [email protected] and should describe the content, its location (URL or identifiers), the legal basis for the complaint, and the notifier's contact details. We will assess valid notices in a diligent, non-arbitrary, objective, and proportionate manner, and will inform the notifier of our decision. We may remove or restrict access to content that we determine, in good faith, to be unlawful or to breach these Terms. Affected users may seek redress through the contact channels in Section 20.
9. Pricing, Payments, Stripe, and Tax
- 9.1 Stripe. All payments are processed by Stripe Payments Europe Ltd. (Ireland) and its affiliates. By transacting you also accept Stripe's terms. We do not see or store full card numbers, expiry dates, or CVV; those go directly to Stripe.
- 9.2 Tax. Prices are displayed exclusive of VAT/sales tax unless stated. Stripe Tax computes tax based on your billing address, tax ID, and jurisdiction. Mealar is VAT-registered in Norway and collects Norwegian VAT at 25% on supplies to Norwegian Customers. In jurisdictions where we are not registered, no tax is collected at checkout and you remain responsible for any local self-assessment, reverse-charge, or import-tax obligations. B2B reverse-charge is enabled where supported. You warrant the accuracy of your VAT/tax ID; if no valid ID is provided we may charge the standard rate applicable to your jurisdiction.
- 9.3 Auto-renewal. Monthly subscriptions renew monthly; annual subscriptions renew annually. Cancel any time via the panel or Stripe Customer Portal, effective at the end of the current period.
- 9.4 Price changes. We will give at least thirty (30) days' notice of price changes. You may cancel free of charge before the new price takes effect; continued use after that constitutes acceptance.
- 9.5 Failed payments. Stripe will retry. Repeated failure suspends the subscription; update your method via the Stripe Customer Portal.
- 9.6 Chargebacks. Unjustified chargebacks are a material breach; we may terminate the account and pass associated bank fees to you.
- 9.7 Invoices. Stripe issues invoices and receipts accessible via the Portal and panel. Any local e-invoicing or archive obligations remain yours.
10. Refunds
- Section 2 confirms that statutory consumer cooling-off rights do not apply. The following are concessions, not entitlements.
- 10.1 Mealar Points — strictly non-refundable. Points packs are consumed digital content and cannot be refunded under any circumstance, except (a) automatic Point re-credit when a job fails due to a Provider or third-party fault (no cash refund), and (b) correction of a Provider-side technical error that yielded an incorrect credited amount.
- 10.2 Monthly subscription — de-minimis refund. You may request a refund of the first monthly fee only if all of the following are true: the request is submitted within fourteen (14) calendar days of the start of the first billing period; less than 100 Mealar Points of AI usage have been consumed by the time of the request; this concession is used once per account lifetime; the request is sent to [email protected] in writing. If approved, the monthly fee is refunded via Stripe to the original method. Points packs are not refunded under this concession.
- 10.3 Annual subscription — no prorated refund. Annual fees are non-prorated. You may decline renewal; you may not recover a portion of the current annual term.
- 10.4 Provider-caused extended outage. If the Service or its core features are unavailable for thirty (30) consecutive days for a reason within our control, you may request a prorated refund or credit for the remaining paid period. Force-majeure events (Section 18) and wide third-party cloud outages are excluded.
- 10.5 Tax effects. Approved refunds trigger issuance of a credit invoice in line with applicable bookkeeping rules.
- 10.6 Mandatory law saved. Mandatory legal protections in your jurisdiction (including but not limited to fairness-of-contract review, fraud or mistake avoidance, and similar non-waivable rights) are preserved to the extent they apply.
11. Intellectual Property and Licences
- The Service, the "Mealar" brand, all documentation, and any aggregated analytics are owned by Kalirox AS or its licensors. You receive a non-exclusive, non-transferable, non-sublicensable, revocable licence to use the Service for your own business while the subscription is current.
- You retain ownership of content you upload (photos, menu text, logo). You grant us a non-exclusive, royalty-free, worldwide licence to host, copy, transmit, transform (resize, compress), display in the Public Menu, process for AI features at your request, scan for moderation, and back up, all solely to deliver the Service and for thirty days after account closure.
- AI outputs that you explicitly accept are licensed to you to the extent permitted by applicable law; we make no warranty that AI outputs are protectable by copyright or free of third-party rights, given current legal uncertainty around AI-generated works. Rejected AI outputs are deleted; you may not use them.
- Feedback you provide may be used by us without compensation.
12. Acceptable Use
- You must not (i) use the Service for unlawful, fraudulent, money-laundering, sanctions-evading, bribery, corrupt-payment, or comparable purposes; (ii) infringe third-party copyright, trademark, trade-dress, or other rights, including by copying menu content, photography, or branding from another business; (iii) post fake, paid, or manipulated reviews, or solicit them; (iv) reverse engineer, scrape, mirror, white-label, or build a competing service from the platform, or attempt to extract training data; (v) attempt unauthorised access, deploy malware, brute-force credentials, abuse one-time-code or CAPTCHA systems, run denial-of-service or rate-limit-evasion attacks, or test our security without prior written authorisation; (vi) use bots, multi-account abuse, dormant-account stockpiling, or content related to pornography, violence, hate speech, child exploitation, controlled drugs, firearms, gambling, or sanctioned counterparties; (vii) abuse the public contact form, phone-verification SMS, or transactional email channels for spam, phishing, or harassment; (viii) make health, medical, therapeutic, or organic / halal / kosher / certification claims about menu items that you cannot substantiate with the corresponding documentation. Breach allows us to remove content, suspend or terminate the account, withhold refunds, claw back promotional credits, and pursue indemnification under Section 17.
13. Data Protection and Administrative Access
- All processing of personal data is described in the Mealar Privacy Policy, which is incorporated into these Terms.
- Administrative support access. We operate a controlled support-access mechanism allowing authorised Mealar administrators to temporarily impersonate a Customer account (default scope: one hour) where required for diagnostic or support purposes. Each access is logged in our audit trail. By using the Service you consent to such access being granted for legitimate support, fraud-investigation, or compliance reasons; revocation requests can be made at [email protected].
- Corporate Customers may request a standard Data Processing Agreement (DPA).
14. Availability, Third-Party Dependencies
- We do not offer a service-level agreement (SLA). The Service relies on independent third parties — Stripe (payments), Microsoft Azure (hosting, storage, AI), Google Cloud Vertex AI, Meshy AI, Google Firebase (identity), Cloudflare (CDN, security), Twilio SendGrid (email), Cloudflare Turnstile (anti-abuse), Twilio Verify (phone verification). Their outages or policy changes do not give rise to liability beyond Section 10.4 and the limitations in Section 16.
15. Warranty Disclaimer
- THE SERVICE IS PROVIDED "AS-IS" AND "AS-AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, WE DISCLAIM ALL EXPRESS AND IMPLIED WARRANTIES, INCLUDING FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY, NON-INFRINGEMENT, ACCURACY OF AI OUTPUTS, UNINTERRUPTED OPERATION, AND ABSENCE OF DATA LOSS.
16. Limitation of Liability
- Our aggregate liability for any and all claims arising out of or relating to the Service is capped at the net amount you actually paid to us in the twelve (12) months preceding the event giving rise to the claim. For periods of free use the cap is zero.
- We exclude liability for indirect, consequential, special, exemplary or punitive damages; loss of profit, revenue, business, goodwill, opportunity, or data (beyond restoration from our backups); third-party damages (including End-User claims); harm from AI inaccuracy; and harm caused by your failure to verify AI outputs.
- These limitations apply to the maximum extent permitted by applicable law. Liability for intentional misconduct, gross negligence, personal injury, and death, and any other liability that cannot lawfully be excluded, remains unaffected.
17. Indemnification
- You will defend, indemnify and hold harmless Kalirox AS, its officers, employees, processors, and partners from claims, proceedings, regulatory actions, losses, and costs (including reasonable legal fees) arising from: (i) your content; (ii) your breach of these Terms or the Privacy Policy; (iii) your breach of Section 6.2 (AI verification) and consequent End-User claims (allergic reactions, foodborne illness, mislabelling, dietary or religious breach, certification-claim disputes); (iv) prohibited use under Section 12; (v) your handling of End-User personal data under your own controller responsibilities; (vi) tax non-compliance on your side; (vii) missing or invalid consent from identifiable individuals appearing in uploads (Section 6.9); (viii) misleading-advertising or unfair-commercial-practices claims arising from how you present AI-generated content or your menu (Section 6.6); (ix) trademark, trade-dress, or hostname disputes connected to a custom domain you bind to the Service (Section 7).
18. Term, Termination, Suspension, Effects
- The contract starts when you create an account and runs until either party terminates or the Service is discontinued. You may cancel at any time via the panel or Stripe Customer Portal, effective at period end. We may terminate immediately and without compensation for prohibited use, payment default exceeding thirty (30) days, suspected fraud or sanctions exposure, insolvency, or breach that is by its nature not curable. For curable material breach, we will issue notice describing the breach and allow a cure period of fifteen (15) days; if the breach is not cured we may terminate. For convenience we will give at least sixty (60) days' notice and pro-rate any unused paid period (Points excluded); for Service discontinuation we will give at least ninety (90) days' notice and pro-rate likewise. We may suspend access — without prior notice where the situation warrants — for reasonable suspicion of abuse, payment failure, security threat, lawful order, sanctions exposure, or excessive resource consumption; suspension is not termination and incurs no obligation to refund the suspended period.
- On termination, your access ends, the Section 11 licence terminates, your data is deleted or anonymised within thirty days (subject to mandatory legal retention — see Privacy Policy), unused Points are forfeited, and Sections 11, 15, 16, 17, and 22 survive.
- Data export. We currently do not provide a one-click machine-readable export. While the account remains active you can view your information in the panel and back it up manually; statutory data-portability requests are fulfilled manually via [email protected] within the timeframes required by applicable data-protection laws.
19. Force Majeure, Assignment, Subcontractors
- Neither party is liable for failure caused by events beyond reasonable control (natural disaster, war, terror, pandemic, government act, sanctions, internet or major-cloud outage, cyber-attack, blackout); if such an event lasts ninety days either party may terminate without liability.
- Assignment by Provider. We may assign these Terms (and the underlying Customer relationship and data) in a merger, acquisition, restructuring, financing, or transfer to an affiliate, in each case subject to applicable data-protection law. In the event of our insolvency, dissolution, or wind-down of the Service, we will (where reasonably practicable) use commercially reasonable efforts to give at least thirty (30) days' notice during which Customers may extract their information, and will dispose of remaining personal data in line with the retention rules of the Privacy Policy.
- Assignment by Customer. You may not assign or otherwise transfer these Terms — including in a sale, merger, share transfer, or transfer of the underlying restaurant business — without our prior written consent. We will not unreasonably withhold consent provided the proposed assignee (a) passes the same KYC and sanctions checks as a new Customer, (b) accepts these Terms in writing, and (c) is not a sanctioned or restricted party. Unauthorised assignment is void and is grounds for termination.
- Subcontractors. We may use the subcontractors listed in Section 14 and the Privacy Policy.
20. Notices and Changes
- We notify you at the email on file or via the panel. You send legal notices to [email protected] or by any means acceptable under applicable local procedural rules. We may revise these Terms with at least thirty days' prior notice; continued use after the effective date constitutes acceptance, otherwise cancel free of charge before that date.
21. Governing Law and Jurisdiction
- These Terms are governed by Norwegian law, excluding conflict-of-laws rules and the UN Convention on Contracts for the International Sale of Goods (CISG). The Drammen Tingrett (District Court of Drammen) has exclusive jurisdiction over disputes, save for non-waivable rights of the Customer to bring an action in the courts of their own jurisdiction where applicable law so requires.
- We comply with applicable local registration, tax, bookkeeping, representation, and data-protection-authority requirements in jurisdictions where we offer the Service. Where applicable law requires us to appoint a local representative, data-protection officer, or to register with a local authority, we will do so; current representative details, where appointed, are available on request from [email protected].
22. General
- Independent parties. Nothing in these Terms creates a partnership, joint venture, agency, franchise, employment, or fiduciary relationship between the parties; neither party may bind the other to any obligation.
- Severability and waiver. If a provision is found invalid the remainder stands and the invalid provision is reformed to reflect the parties' intent as closely as the law allows. A delay in exercising a right is not a waiver; a waiver in one instance is not a waiver in another.
- Headings. Section headings are for convenience and do not affect interpretation.
- Equitable relief. Monetary damages may be inadequate for breaches of Sections 11 (IP), 12 (Acceptable Use), and 13 (Confidentiality of administrative access); we may seek injunctive or other equitable relief without proving damages or posting bond, in addition to any other remedies.
- Export control and sanctions compliance. You warrant that you, your beneficial owners, and your end-users are not subject to applicable export controls or sanctions, and that you will not export, re-export, or otherwise make the Service or its outputs available to any sanctioned party or restricted destination, or for any prohibited end-use (including weapons of mass destruction or military intelligence end-use).
- Anti-corruption. You will not, directly or indirectly, offer, promise, give, request, or accept any improper financial or other advantage in connection with the Service, and you will comply with applicable anti-bribery and anti-corruption laws.
- Counterparts and electronic acceptance. Acceptance of these Terms by click-through, account creation, payment, or continued use after the effective date constitutes valid execution under applicable electronic-signature law; no physical signature or paper counterpart is required.
- Successors and assigns. These Terms bind and benefit the parties and their permitted successors and assigns.
- Order of precedence. In case of conflict, mandatory applicable law prevails, then these Terms, then the Privacy Policy (on data-protection matters the Privacy Policy controls), then any documents referenced from them.
- Language. Where these Terms are published in multiple languages, the English version controls in case of conflict unless a local-language version is required to control by mandatory applicable law.
- Entire agreement. These Terms (with the Privacy Policy and any documents expressly referenced) constitute the entire agreement and supersede prior discussions or communications between the parties.
- Kalirox AS · Org.nr 836 971 752 · Drammen, Norway · [email protected] · [email protected] · [email protected].