Privacy policy

Customers who scan a QR code

We never ask for your name, phone number, email or an account, and you don't need to install an app.

We store the order number, status and times the merchant enters, plus a random identifier for that one order on your device (a cookie and local storage, at most 48 hours) so the order stays open on your phone only.

If you turn on alerts, we store the notification subscription your browser creates, or Apple's device / Live Activity token, encrypted, and delete it when the order expires.

Visit records are deleted one day after the order expires. We do not fingerprint devices or track you across businesses.

Merchants and their staff

We store email, name, a password hash, sign-in sessions, an audit log, order data and the analytics needed to run the service.

Who receives data

Push services (Google, Apple, Mozilla) receive an alert only to deliver it to your device.

If a merchant connects an external system (for example a POS or CRM), we send it that merchant's own order events: order number, status, times and the reference the merchant's system supplied. We send no personal identifiers because we collect none.

Our hosting provider processes data on our behalf. We do not sell data or use it for advertising.

Security and retention

Connections are encrypted (HTTPS), every merchant is isolated from the others, and logs never contain order links. Backups are kept for 14 days.

Your rights

You can ask to access, correct or delete your data via the contact form on our home page. We handle data under the laws that apply in Jordan, including the Personal Data Protection Law.