Privacy policy

Last updated: 7 November 2026

Cafe POS is a staff tool for taking cafe orders and managing kitchen service. This policy describes the Cafe POS waiter and kitchen app and its connected service.

Who handles your information

Damodar Bhattarai develops Cafe POS. The cafe or business that provides your staff account controls its staff and business records. Contact your cafe administrator about those records, or use the contact below for app support and privacy questions.

Information the service processes

• Staff account information: your name, username, account email, branch, assigned permissions and authentication records. Passwords are checked by the server and stored as hashes. If enabled, an authenticator code is used to verify sign-in.
• Orders and service activity: tables, menu selections, quantities, modifiers, instructions, order identifiers and timestamps, and the staff actions that change order or kitchen status.
• Notification and device information: the platform, app version where needed for updates, device name supplied at sign-in, and a Firebase installation identifier used to deliver notifications to your signed-in device.
• Technical and support information: IP addresses and operational logs generated by the server, and information you choose to include when contacting support.

Why this information is used

We use this information to authenticate staff, enforce branch and role access, process orders, coordinate preparation and service, deliver requested alerts, check for app updates, maintain security and respond to support requests. The app does not include advertising, advertising identifiers or cross-app tracking. It does not request camera, microphone, contacts, photo-library or location access.

Notifications and live status

Notifications are optional. You can disable them in your device settings and continue using the app. When enabled, Google Firebase Cloud Messaging processes an installation identifier and notification payload; Apple Push Notification service delivers notifications on Apple devices. Alerts may contain an order number or service status and can appear on your lock screen. iPhone Live Activities and Android ongoing status can display kitchen workload.

Google's processing is described in the Firebase privacy information. Apple describes its processing in the Apple privacy policy.

Storage and sharing

The app stores its sign-in token in the operating system's secure storage. The connected server stores staff, business and device-registration records. Access is limited by branch and permissions. Notification identifiers are encrypted in the database. Signing out revokes that app session and removes its device registration from the service.

Business records are available to authorized cafe staff. Hosting and notification providers process information needed to operate the service. We do not sell personal information. Information may also be disclosed where legally required.

Retention and your choices

Business and audit records are retained according to the cafe's operational needs and applicable recordkeeping requirements. Removing a staff account does not necessarily remove orders or audit records that the business must keep. You can sign out, disable notifications, uninstall the app, and request access, correction or deletion through your cafe administrator or the contact below. Requests are checked to protect other users' and businesses' records.

See account and data requests for the request process. Staff accounts are assigned by a business; the app does not offer public account registration. The service is not directed to children.

Changes and contact

Changes to this policy will appear on this page with an updated date.