1. Introduction
MyCounter ("we", "our", or "us") operates the MyCounter platform: the MyCounter Management web platform and its staff applications — MyCounter POS (point of sale, iPad), the Kitchen Display app, the Waiter app, and MyCounter Stock (goods receiving and inventory counting, iPhone and iPad). This Privacy Policy explains how we collect, use, and protect information across all of them.
These are business (B2B) applications used by restaurant staff. Accounts are issued by the venue that employs them; they are not consumer sign-ups. We do not use the data for advertising, and we do not track users across other companies' apps or websites.
2. Information We Collect
We may collect the following types of information:
- Account Information: Name, email address, phone number, and business details when you create an account.
- Business Data: Restaurant information, menu items, inventory data, orders, sales records, and staff schedules that you enter into the platform.
- Device Information: Device type, operating system, and app version for providing technical support and improving our services.
- Usage Data: How you interact with our app to improve the user experience.
- Staff Sign-in Data (POS / Kitchen / Waiter apps): The employee's work email address, a numeric cashier PIN (stored only as a one-way hash — never in readable form), and a terminal label that identifies the tablet so a shift and its cash drawer can be attributed to the right device.
- Your Customers' Details: If a venue chooses to attach a customer to an order (for example to redeem cashback), the customer's name, phone number and loyalty balance are shown to the cashier. This information belongs to the venue and is entered by the venue — we process it on the venue's behalf and never use it for our own purposes.
2.1 Device Permissions in the POS App — and Why
The MyCounter POS app requests a small number of device permissions. Each one is used only for the stated purpose, and the app remains usable if a permission is declined:
- Bluetooth: To connect to a thermal receipt printer at the counter and to open a connected cash drawer. We do not scan for or record any other nearby devices. Without a printer, the app simply reports that none is connected.
- Local Network: To send new orders to Kitchen Display screens on the same restaurant Wi-Fi, so the kitchen keeps working even if the internet drops. No data leaves the venue's own network through this channel.
- Camera: Used only to scan a pairing QR code shown by the manager's admin app when setting a tablet up, and to scan item barcodes. Images are processed on the device and are never stored or uploaded.
The POS app does not request access to your location, contacts, photo library, microphone, or health data.
2.2 Data Stored on the Device (Offline Mode)
So a venue can keep serving customers during an internet outage, the POS app keeps a copy of the working data on the tablet itself: the menu, table layout, the current shift, and any orders that have not yet been uploaded.
- This data stays in the app's private storage on the device and is uploaded to the venue's account as soon as the connection returns.
- Payment card numbers are never stored, entered, or processed by the app. Card payments are handled entirely by the venue's certified payment provider or terminal; the app only records the payment method, an approval reference, and the amount.
- Signing out of the app after all data has synced clears the local copy.
2.3 Device Permissions in the Kitchen Display App — and Why
The Kitchen Display app runs on a fixed tablet in the kitchen. Two of its permissions behave differently from the POS app's, so they are described separately here rather than being covered by section 2.1:
-
Camera — recipe access records: A venue may protect its recipes. When that is switched on, the front camera takes a small number of still photos of whoever is standing at the screen while a protected recipe is open, and those photos are uploaded to the venue's own account as evidence of who opened it. The number of photos and how long they are kept are set by the venue. This feature is off unless the venue's owner turns it on. By default the employee is also told on screen — before entering their PIN — how many photos will be taken and how long they are kept, and must acknowledge it before the recipe opens; a venue can switch that acknowledgement step off, and is responsible for informing its staff by other means if it does. The photos are reviewed by a human at the venue: we do not perform facial recognition or matching, and we do not create or store any biometric template. The camera never records audio.
-
Location — keeping the tablet in the restaurant: A venue may require that a kitchen tablet only work inside the restaurant, so a device taken home cannot open orders or recipes. When that is switched on, the app sends its coordinates with its requests so the server can allow or refuse them. The coordinates are used for that check and to record refused attempts; they are not used to build a movement history and are never used for advertising. This is also off unless the venue turns it on.
-
Device identifier: The app generates an identifier for the tablet itself (not for a person) so a manager can pair it to a branch and block it remotely if it is lost or stolen.
The Kitchen Display app does not request access to your contacts, photo library, microphone, or health data.
2.4 Device Permissions in the MyCounter Stock App — and Why
MyCounter Stock is used by the person who takes a supplier delivery in at the door. Photographs are the point of the app rather than a side feature, so its permissions are described separately here:
-
Camera — invoices, goods and shelf labels: The camera is used to photograph the supplier's paper invoice, to photograph the goods that arrived (including any damage), and to read the QR labels printed for shelves and production batches. An invoice page is straightened and cleaned up on the device before it is sent. The camera points at paperwork and at stock; the app never records audio, and it does not take photographs of the person holding the phone.
-
Photo library — attaching a photo already taken: The app can attach an invoice or delivery photo the employee already has, instead of shooting it again. Only the photos the employee picks are read; the app does not browse or upload the library.
-
What happens to these photographs: They are uploaded to the venue's own account and kept with the delivery as the record of what actually arrived, which is what a dispute over a short or damaged delivery is settled with. Each photo carries who took it and when. They are visible to that venue's staff, and a photo can be removed by the person who took it or by an administrator.
-
Working without a signal: Loading bays and cold rooms often have no coverage, so a delivery taken in offline is held on the device — its lines and its photographs — and uploaded when the connection returns. Signing out after everything has synced clears that local copy.
MyCounter Stock does not request your location, contacts, microphone, or health data, and it does not send location coordinates at any time. It does not use the advertising identifier, and it does not track you across other companies' apps or websites.
3. How We Use Your Information
We use the information we collect to:
- Provide and maintain our restaurant management services.
- Process orders, inventory tracking, and business analytics.
- Send important notifications about your account or service updates.
- Improve and optimize our application.
- Provide customer support.
4. Data Security
We take appropriate security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. All data is transmitted using SSL/TLS encryption and stored on secure servers.
5. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share data only in the following cases:
- With your explicit consent.
- To comply with legal obligations or court orders.
- To protect the rights and safety of our users and the public.
5.1 Restaurant Chat Rooms — What Your Alias Does and Does Not Hide
When you join the chat room for a restaurant you are sitting in, other guests see only a number — “Guest 7”. They do not see your name, your phone number, your table, or what you ordered. That number belongs to that one room: the same person is Guest 3 in one restaurant and Guest 7 in another, and the two cannot be connected.
Your alias protects you from the other guests. It does not hide you from us. Chat-room messages are stored with the account that sent them and that account's phone number, and our platform administrators may read them when there is a report, a complaint, or a legal request. Access of that kind is recorded, limited to a stated reason, and expires by itself.
Three separate periods apply, and they are not the same period:
- Taking part ends when your visit ends — when you leave, when your order completes, or at most 90 minutes after it began. After that you can no longer post, and you see the conversation only up to the moment you left.
- On your screen, the conversation disappears after 24 hours.
- In our records, messages are kept for 90 days and then deleted, unless a message is part of a report that is still open.
A message leaving your screen after 24 hours is not the same as the message being erased: it remains in our records for the period above, and routine database backups may hold it for their own cycle. We therefore do not describe a message as permanently deleted at the point it stops being visible to you.
A restaurant may close its chat room at any time, and a room is only open during the hours that restaurant has told us it is able to respond to a report.
غرف المحادثة في المطاعم — ما يُخفيه اسمك المستعار وما لا يُخفيه
عندما تنضمّ إلى غرفة محادثة مطعمٍ أنت جالسٌ فيه، لا يرى الضيوف الآخرون إلّا رقمًا — «ضيف ٧». لا يرون اسمك، ولا رقم هاتفك، ولا رقم طاولتك، ولا ما طلبته. وهذا الرقم خاصٌّ بتلك الغرفة وحدها: الشخص نفسه يكون «ضيف ٣» في مطعمٍ و«ضيف ٧» في آخر، ولا يمكن الربط بينهما.
اسمك المستعار يحميك من الضيوف الآخرين، ولا يُخفيك عنّا. تُحفظ رسائل غرف المحادثة مع الحساب الذي أرسلها ورقم هاتف ذلك الحساب، ويجوز لإدارة المنصّة قراءتها عند وجود بلاغٍ أو شكوى أو طلبٍ قانونيّ. وكلّ وصولٍ من هذا النوع يُسجَّل، ويكون محدودًا بسببٍ مُعلَن، وينتهي من تلقاء نفسه.
وتنطبق ثلاث مدَدٍ منفصلة، وهي ليست المدّة نفسها:
- المشاركة تنتهي بانتهاء زيارتك — عند مغادرتك، أو عند اكتمال طلبك، أو بعد ٩٠ دقيقة من بدئها على أبعد تقدير. وبعد ذلك لا يمكنك الإرسال، ولا ترى من المحادثة إلّا ما قيل حتّى لحظة مغادرتك.
- على شاشتك، تختفي المحادثة بعد ٢٤ ساعة.
- في سجلّاتنا، تُحفظ الرسائل ٩٠ يومًا ثمّ تُحذف، إلّا أن تكون الرسالة جزءًا من بلاغٍ ما زال مفتوحًا.
واختفاء الرسالة من شاشتك بعد ٢٤ ساعة ليس هو محوَها: فهي تبقى في سجلّاتنا المدّةَ المذكورة أعلاه، وقد تبقى في النسخ الاحتياطيّة الدوريّة مدّةَ دورتها. ولهذا لا نقول عن رسالةٍ إنّها حُذفت نهائيًّا عند اللحظة التي تتوقّف فيها عن الظهور لك.
ويجوز للمطعم إغلاق غرفته في أيّ وقت، ولا تكون الغرفة مفتوحة إلّا في الساعات التي أخبرَنا فيها المطعم بأنّه قادرٌ على الردّ على أيّ بلاغ.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by contacting us.
Recipe access records (section 2.3) are kept for a period the venue chooses — 90 days by default, and never longer than one year, whatever the venue sets. They are deleted automatically once that period passes. The venue's owner can also view and delete any individual record at any time before then, and an employee may ask their employer to delete a record of themselves.
7. Your Rights
You have the right to:
- Access your personal data.
- Correct inaccurate data.
- Request deletion of your data.
- Withdraw consent at any time.
- Export your data in a portable format.
8. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13 years of age.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.