Restaurant Privacy Policy

Restaurant is a restaurant management app provided by Septillion Pro. This policy covers the Android app and Restaurant booking pages. Updated: 26 October 2026.

Information used by Restaurant

• Account information: Account name, email address and account identifier used for Google or existing Email/password sign-in. Passwords are handled by the authentication service and are never included in shop reports.
• Shop information: shop name, business phone, address, location when you choose to add it, logo, assigned members and roles.
• Operations: menus, prices, stock quantities and costs, purchases and suppliers, expenses, tables, orders, receipts, payment-method records, profit/loss reports and customer notes entered by your shop.
• Reservations: customer name, phone, visit time, party size and notes submitted through a shop's booking link.
• Subscription records: the shop's plan, invoices and payment status. The Play Store app displays subscription status and does not offer bank-transfer payment or payment-slip uploads for the software subscription. Payment records supplied to Management through other authorized channels may be retained for account administration.
• Technical information: service access and security logs such as IP address, request times, device connection identifiers and errors. The QR scanning SDK can send device identifiers, app/device details, performance and usage diagnostics to Google.

Menu photos

Photos you select from your device or take with the camera for menu items are saved on the counter, shared with paired shop devices for offline viewing, and backed up to the shop server when online. Active menu names, prices and their photos are visible to customers through your shop link. Camera metadata is removed when menu photos are resized. Removing or disabling a menu item stops its photo from being served publicly; backup copies may remain for recovery.

Permissions and device processing

Camera access is used when you open QR pairing or choose to take a picture. QR images are processed on the device. Shop logos or other images you choose to upload are sent to the shop service. Location is requested only when you choose to set the shop location; Restaurant does not track location in the background. You can decline camera or location access and use the available manual entry options.

While counter mode is running, a foreground notification indicates that the tablet is serving authorized shop devices over the local network. The tablet stores orders locally so the shop can continue using it without Internet. The counter tablet and local Wi-Fi network must stay available.

How information is used and accessed

We use information to authenticate accounts, manage shops and member access, synchronize orders, process reservations, provide receipts and reports, maintain subscription status, and keep the service secure. Authorized shop owners and staff can access information according to their role; Kitchen views omit customer contacts and financial details. Shop owners and managers can access purchase costs, expenses and profit/loss. Authorized Application Management administrators can view shop-level monthly revenue, costs and profit/loss for service oversight. Other service-administrator access is limited to support, security and account administration. We do not sell personal information or use it for advertising.

Google provides account sign-in and the on-device QR scanning SDK. Hosting and technical service providers process information to operate the service. When you print or export, the printer or destination you select receives the selected document. Google describes QR SDK technical collection in its ML Kit disclosure and handles its services under its privacy policy.

Storage and security

Counter and paired devices keep local operational data. When Internet is available, the counter synchronizes shop snapshots to the cloud service. Cloud traffic uses HTTPS. Paired local device messages use authenticated encryption and device-specific keys. Access controls restrict cloud information by shop and role. Protect your counter tablet, pairing QR codes and Wi-Fi network. No storage or transmission method can guarantee absolute security.

Retention and deletion

Account and shop data are kept while needed to operate the shop, until an approved deletion request, or where retention is necessary for accounting, security, fraud prevention or legal obligations. Backups may contain prior copies until replaced or expired through backup maintenance; retained backup data is not used to reactivate a deleted account. We explain any required retention when handling a request.

You can request deletion of your Restaurant account and associated personal data from the app's privacy menu or the account deletion page. We verify account ownership before action. Shared shop records may require owner confirmation or retention by the shop; this does not require you to continue using the app. A shop-wide deletion must be requested by the authorized owner. Device copies must also be removed from the counter and paired devices. Uninstalling does not delete cloud records. A Restaurant deletion does not delete your Google account or unrelated services such as Lo Ta Ya or Beauty Mall.

Contact and changes

For corrections, privacy questions or deletion requests, email septillionprofordeveloperacc@gmail.com. Do not send passwords, payment PINs or authentication codes. We may update this policy when the service changes and will publish the updated date here.