Privacy Policy

1. Information we collect

• Account information: name (display name), login ID, email address, phone number, password (stored only as a hash; we cannot see the original)
• Store information: store name, address, phone number, qualified invoice registration number, store manager password (stored as a hash)
• Business data: orders, payments, payment methods, sales, cash management, reservations and print records entered or created by the store
• Guest information: names, contact details, notes, gender and date of birth of reservations and members entered by the store (this information is managed by the store; we store it on the store's behalf)
• Attendance: clock-in and clock-out times. If the store restricts clocking to specific Wi-Fi, the name (SSID) and access point ID (BSSID) of the Wi-Fi connected at that time
• Photos: images the user selects as menu or store photos
• Device information: a device ID generated by the app, model, OS, app version, device role (register / handheld / table tablet), local network IP address and connected printer information
• Crash and diagnostic data: records of crashes and errors (configured not to send personal identifiers such as names or email addresses)
• Activity and access records: operation history, access time and IP address
• Website: pages viewed, referrer, country, screen size and device type (aggregated with an anonymous ID stored in the browser), and anything entered in the contact form

2. Location

Android and iOS require the location permission to read the name of the connected Wi-Fi. We use it only to read the Wi-Fi name for attendance checks. We never collect or send latitude, longitude or other location data.

3. How we use information

• To provide the Service (ordering, checkout, printing, attendance, reservations, sales reports, etc.)
• Sign-in, identity verification and fraud prevention
• Investigating failures, fixing bugs and improving the Service
• Responding to inquiries and sending important notices and verification codes by email
• Contract and billing procedures
• Improving the website and help content (aggregated access statistics)

4. Sharing with third parties

We do not provide personal information to third parties without the consent of the person or the store, except as required by law. We do not sell personal information or share it for advertising.

5. Service providers

• Amazon Web Services, Inc. (servers and database, Tokyo region)
• Cloudflare, Inc. (content delivery, image and app storage; United States)
• Functional Software, Inc. (Sentry, crash and diagnostic data; United States)

We entrust storage and processing of data to the following providers:

6. Transfers outside Japan

Personal information may be stored or processed by the US providers above. The United States has no comprehensive federal law equivalent to Japan's Act on the Protection of Personal Information, but these providers apply security measures based on international standards.

7. Retention

• Account, store and business data: kept while the contract is active.
• When an account is deleted: name, email address, phone number and password are erased immediately. Orders and payments made with that account remain in the store's records under "deleted user".
• When a brand (store) is closed: free brands are deleted together with their store data 7 days after the request (the request can be withdrawn within 7 days). Paid brands are deleted after contract and billing matters are settled.
• Information that must be kept by law is kept for the required period.
• Website access records: 1 year

8. Access, correction and deletion

You can view and change your own information in the app settings. See "Account deletion" for how to delete your account.

For guest information (reservations, members, etc.), please contact the store first. Other requests are accepted at the contact below.

9. Security

Communication is encrypted (HTTPS) and passwords are stored as hashes. Data is separated per store and access is limited by permissions.

10. Age

The Service is for restaurant businesses and their staff. It is not directed at children.

11. Changes

We will announce changes to this policy on this page. Important changes will also be announced in the app or by email.