McDonald's consolidates 220M loyalty records into unified AI system

On August 4, McDonald's CEO Chris Kempczinski unveiled a plan to consolidate customer data from 70 markets into a unified "data lake" designed to power the company's next generation of AI systems. The effort centers on behavioral records from 220 million active users of the MyMcDonald's Rewards program, which has generated over $40 billion in sales over the trailing twelve months. Each transaction logged in the program captures what customers order, when and where they visit, prices paid, and whether digital promotions drove add-on purchases. Across hundreds of millions of users, this generates billions of data points per quarter.

To process this volume, McDonald's employs a hybrid technology stack. Inside restaurants, custom Google Cloud hardware running on the "Restaurant Platform Edge" analyzes up to 120 real-time signals per order—including basket composition, loyalty tier, weather conditions, local traffic, and kitchen capacity—with a refresh rate of 10 milliseconds. This speed enables digital drive-thru boards to adjust in under 80 milliseconds, displaying AI-optimized menu suggestions and pricing tailored to individual customers and local conditions. Simultaneously, a central reinforcement-learning model explores broader trends across the dataset, optimizing for McDonald's margin and lifetime value by testing different price points and item sequences. The system is explicitly designed to maximize McDonald's financial interests rather than respond to stated customer preferences.

The consolidation, however, introduces serious security and privacy vulnerabilities. In June 2025, researchers Ian Carroll and Sam Curry demonstrated that they could access up to 64 million records from McDonald's AI hiring platform McHire—operated by third-party vendor Paradox.ai—simply by logging into an admin portal using the default password "123456." By pooling customer data that was previously kept separate into one global repository, a similar breach could potentially expose the transaction histories of all 220 million users. Additionally, McDonald's has not disclosed a Data Protection Impact Assessment for the consolidation effort, raising questions about GDPR compliance for European customer data and potentially creating a regulatory barrier to the program's rollout in the EU.

McDonald's plans to expand the MyMcDonald's Rewards program to 250 million 90-day active users in the near future. Customers who wish to opt out of the data collection can pay with cash or avoid using the app, though doing so forfeits loyalty discounts. The shift underscores a broader trade-off: while the centralized AI system delivers real-time personalization at scale, it also concentrates risk and raises unresolved questions about data security and regulatory approval in key markets.