Privacy Policy

Who this applies to

Restaurants sign up for DineyPOS and their administrators create accounts for their staff. Each restaurant's data is kept separate from every other restaurant's data. Staff can only see what their role and outlet allow.

Staff account details

• Name, username, and optionally an email address and phone number.
• Role and outlet assignments.
• Your PIN, which is stored securely and which we cannot read.

Restaurant and outlet details

• Restaurant name and the owner's email and phone number.
• Outlet name, address, phone, email and GSTIN.

Restaurant operations data

• Orders, tables, guest counts, kitchen tickets, bills and menu items.
• Payments recorded by staff: method, amount, an optional reference number, and the last four digits of a card if staff enter them. The app does not process card payments and never sees full card numbers.
• Optional customer details staff add to a bill for an invoice: name, phone number, GSTIN and address.
• Shifts, taxes, discounts, printer settings and a log of staff actions.

Device and sign-in information

• A device identifier, used to recognise the device and not to identify you.
• Device name, platform, operating system version, app version and when the device was last seen.
• For each sign-in and session: your username, IP address, platform, app version, time, and whether the attempt succeeded.
• A push notification token for your device, when notifications are enabled.

Diagnostic logs

The app keeps technical logs on your device. They contain app events, error messages, the app version and the device identifier, and are designed to exclude PINs, passwords and access tokens. Logs are sent to us, or shared through your device's share sheet, only when you choose to from the app's Settings.

This website

If you send a registration request, we receive the name, restaurant name, email, optional phone number, number of outlets and message you enter. The request is handled by a third-party form service. This website does not use analytics or advertising cookies.

Permissions the mobile app asks for

• Bluetooth: to find and connect to thermal printers.
• Local network: to find printers on your Wi-Fi network.
• USB: to connect to USB printers on supported Android devices.
• Location (Android 11 and below only): Android requires this permission to scan for Bluetooth devices. The app does not read or store your location.
• Notifications: to show order alerts.
• Internet and network state: to sync with our servers and work offline.

How we use information

• To sign you in and apply the right permissions.
• To run the POS: orders, kitchen, billing, shifts and reports.
• To keep orders and tables in sync across staff devices in real time.
• To send push notifications about your outlet.
• To protect accounts: session management, device approval and account lockout after repeated failed sign-ins.
• To investigate problems from diagnostic logs you send.
• To reply to registration requests from this website.

Who we share it with

We do not sell personal data. We share information only with service providers who help us run the service, and only as needed for that purpose:

• Cloud hosting and data storage providers.
• Authentication and real-time sync providers.
• Push notification providers.
• Form handling providers for registration requests from this website.

Within a restaurant, information is visible to that restaurant's authorised staff according to their role.

Security

We use reasonable technical and organisational measures to protect your information, including access controls and keeping each restaurant's data separate from others. No system is completely secure, so we cannot guarantee absolute security.

How long we keep it

• Operational records such as orders, bills and payments are kept while the restaurant's account is active, because restaurants need them for their accounts.
• Diagnostic logs are kept only for troubleshooting. Default retention periods are 30 days for routine entries, 180 days for errors and 90 days for uploaded log files, and our team can delete logs on request.
• Data cached on your device stays until you clear the app's data or uninstall it.

Your choices

• Ask your restaurant administrator to correct your details or deactivate your account.
• Turn off notifications or revoke Bluetooth, local network and other permissions in your device settings.
• Choose whether to upload or share diagnostic logs.
• To ask about your data or request deletion, contact us using the form on our website and we will work with your restaurant.

Children

DineyPOS is intended for restaurant staff and is not directed at children. We do not knowingly collect information from children.

Changes to this policy

If we change this policy, we will update the date at the top of this page.

Contact us

For privacy questions, use the registration and contact form on our website.