This is a draft: the company details have not been filled in yet. A lawyer must review it before it is relied on.
Privacy policy
Contact:
This policy explains what we collect, why, who it is shared with and what your rights are. The principle: we collect the minimum needed to run the menu, and we never sell anyone's data.
Who is responsible
For the business owner's account data, we are responsible. For a café's guest data (orders, ratings), the café is responsible and we process it on its behalf, only to run the service.
What we collect
| Whose | What | Why |
|---|---|---|
| Owner and staff | Name, username, email, password (hashed), the audit log and IP address | Sign-in, security, and who changed what |
| Guests | The order content, table number, an optional note, an optional rating, and a phone number only if they type it (for example order-ahead or a gift) | Fulfilling the order and improving the menu |
| Visitors | View counts, with no advertising trackers; small items stored on your device to remember language, theme, table and cart | Running the menu and the café's analytics |
We do not collect payment card details; card payments happen with the payment provider.
Who it is shared with
- Hosting and off-site backup providers (to store the data).
- The subscription payment provider (Lemon Squeezy) when you pay by card.
- The AI provider when an AI feature is used: only the text or photo to be processed is sent, without guest identities.
- Google if you choose to sign in with Google, and an email provider to send account emails.
- Authorities, if the law requires it.
We do not sell data and we do not use it for advertising.
Customer list and WhatsApp offers
If a café turns on “offers on WhatsApp”, the guest sees an optional tick box at checkout. A guest joins the offers list only by ticking it themselves, receives only what they agreed to, and can stop at any time by replying, after which the café stops messaging them. The café sends the messages from its own WhatsApp, not us.
How long we keep it
Guest data (old orders) is deleted automatically after the period the café sets in its retention settings. The audit log is deleted after a fixed period. When a café account is deleted its data is removed from the system immediately and disappears from backups as they rotate out.
Your rights
- See and export your data: from the dashboard (data export).
- Correct or delete it: from the dashboard, or by asking us at the email above.
- A guest who wants their data removed contacts the café, or us and we pass it on.
Security
Passwords are hashed, connections are encrypted, there are passkeys and limits on sign-in attempts, and backups are taken and tested. No system is perfectly safe; we will tell you if a breach affects your data.
Cookies and local storage
We use a necessary session cookie for sign-in and local storage to remember your preferences. We use no advertising cookies.
Changes and contact
When this policy changes materially we will tell you and the version above changes. For questions write to the email above.