Privacy Policy for G-RESTO

1.Information stored on your device

The following data is created and stored locally on your device only. It is held in an encrypted (SQLCipher/AES-256) database and is never sent to the Developer:

• Restaurant records: menu items, categories, orders and order items, table numbers, order notes, order type, payment method, discounts, service charge and tax amounts, and the reports derived from them.
• Staff accounts: usernames, display names, and roles (administrator, supervisor, cashier). Passwords are stored only as bcrypt hashes — never in plain text.
• Restaurant settings: restaurant name, address, logo, receipt footer, currency and decimal places, tax rate, service charge configuration, number of tables, language, theme, paired printer identifier, and idle-timeout period.
• Audit log: an insert-only record of key actions taken in the App — which staff account did what, to which record, and when.
• Images: menu item photos and your restaurant logo, stored in the App’s private folder on your device.
• Account recovery code: stored only as a hash, so the code itself cannot be read back off the device.

G-RESTO has no customer database, no loyalty program, and no customer contact fields — we never ask you to enter your diners’ personal information. You remain in control of the data above; uninstalling the App removes it from your device.

2.Device permissions and why we use them

• Internet — to load advertisements, verify your subscription, and process purchases.
• Camera — optional, to photograph a menu item as you add it. Photos are saved on your device and are not uploaded. Barcode scanning does not use the camera; G-RESTO reads barcodes from a connected Bluetooth scanner.
• Photos / media (read) — optional, to let you pick a menu item photo or your restaurant logo from your device.
• Bluetooth (scan/connect) — to pair with receipt printers and barcode scanners. Used only for pairing and printing; no data is transmitted to the Developer. On Android the Bluetooth scan permission is declared neverForLocation, so it cannot be used to derive your location.
• Approximate location (Android 11 and below only) — required by older Android versions solely so that Bluetooth scanning for printers and scanners works. Newer Android versions do not request it, and the App never uses, stores, or shares your location.

3.Third-party services

The App uses the following third-party services, which may collect data under their own privacy policies:

Google AdMob (advertising)

Ads are shown on the free tier through Google AdMob, and are removed by an active Pro subscription. AdMob may collect and process device identifiers (including the advertising ID), IP address, and ad-interaction data to serve and measure ads. Before ads load, the App requests your consent where required — Google’s UMP consent form in the EEA/UK and applicable US states, and Apple’s App Tracking Transparency prompt on iOS. Google’s policy: https://policies.google.com/privacy

RevenueCat (subscription management)

The optional Pro subscription is managed through RevenueCat, which handles purchase and entitlement data and assigns an anonymous app-user identifier. RevenueCat’s policy: https://www.revenuecat.com/privacy

Google Play Billing (payments)

Subscription payments are handled by Google Play. The Developer does not receive or store your payment card details. Google’s policy: https://policies.google.com/privacy

Sentry (crash reporting)

If the App crashes or hits an unexpected error, a diagnostic report (error message, stack trace, app version, and device model) is sent to Sentry so the defect can be fixed. The App is configured with personally identifiable information disabled, and crash reports do not include your orders, menu, staff accounts, or any other database contents. Sentry’s policy: https://sentry.io/privacy/

4.How we use information

• To provide point-of-sale functionality — taking orders, printing receipts, and generating reports (all handled locally on your device).
• To display advertisements on the free tier (via AdMob).
• To enable, verify, and restore the optional Pro subscription (via RevenueCat and Google Play).
• To diagnose crashes and fix defects (via Sentry).

We do not sell your personal data, and we do not use your restaurant data for advertising.

5.Data sharing

We do not share your restaurant data with anyone. Limited data is shared only with the third-party services listed in Section 3, strictly to provide ads, subscriptions, and crash diagnostics, and only as described in their policies.

6.Data retention and deletion

• On-device data is retained until you delete it within the App or uninstall the App.
• Third-party data (AdMob, RevenueCat, Google Play, Sentry) is retained according to those providers’ policies.

To request deletion of any data held by third-party services, refer to the respective provider’s privacy policy, or contact us at the email above.

7.Account and data deletion

All accounts and data in G-RESTO are stored locally on your device. There is no server-side account or data held by the Developer, so there is nothing for us to delete on your behalf.

To delete a staff account: sign in as an administrator, open Settings → User Management, select the user, and delete (or deactivate) the account. This removes that account from the device.

To delete all app data (all accounts, menu items, orders, settings, images, and the audit log): uninstall G-RESTO from your device. Uninstalling permanently and immediately removes the App’s encrypted database and its encryption key from the device. No data is retained after uninstall.

Data handled by third-party services (AdMob, RevenueCat, Google Play Billing, Sentry) is governed by those providers’ policies; see Section 3 to request deletion from them.

8.Internet connection

On the free tier, G-RESTO requires an active internet connection and will not open without one, because the free tier is funded by advertising. With an active Pro subscription the App runs fully offline. In both cases your restaurant data stays on your device — the connection is used for ads and subscription checks, never to upload your data.

9.Children’s privacy

G-RESTO is a business tool intended for use by adults (restaurant owners and staff). It is not directed to children under 13, and we do not knowingly collect personal information from children.

10.Security

Your data is stored in a database encrypted with SQLCipher (AES-256). The encryption key is generated on your device at first launch and held in the iOS Keychain / Android Keystore, marked device-only so it is never included in backups or transferred to another device. Staff passwords are stored as bcrypt hashes, and the account recovery code as a hash. However, no method of electronic storage is completely secure; you are responsible for securing physical access to the device on which the App is installed.

11.Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted at this page with a revised “Last updated” date.

12.Contact

For questions about this Privacy Policy, contact:

Ida Bagus Made Rai Suartama
Email: contact@kronoskomputer.com