Privacy Policy

In short: We collect personal information that you provide to us directly, as well as necessary diagnostic data to ensure app functionality.

• Account Information: If you are a staff member, we collect your username, role, and encrypted password.
• Customer Data: For public ordering, we may collect a name and phone number strictly for order identification and notification purposes.
• Diagnostic Data: We may collect non-identifiable crash logs and performance metrics to improve app stability.

Depending on your device, our mobile application may request access to certain native features:

• Camera: Required exclusively to scan QR codes on tables. Images are processed locally and never uploaded to our servers.
• Storage / Filesystem: Required strictly for generating and saving PDF invoices and receipts directly to your device.

We prioritize the security of your data. We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process.

• All API communication is encrypted in transit using industry-standard TLS (HTTPS).
• Passwords are strongly hashed using BCrypt before storage.
• Access to the internal dashboard is strictly governed by stateless JWT (JSON Web Token) role-based access control.

We do not sell, rent, or trade your personal information to third parties.

Data is only shared when necessary to fulfill business obligations, such as processing a payment through a secure third-party gateway, or when legally required by law enforcement.

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy (such as tax compliance and auditing of past receipts).

Requesting Data Deletion (Google Play Compliance): Click here to request data deletion

If you wish to have your account or personal data permanently deleted from our servers, please contact the restaurant administrator directly, or submit a written request via our support channels. Upon request, all personally identifiable information will be purged from our active databases within 30 days.