Privacy Policy

1. Data Controller

Restia Software SL ("Controller"), registered in Spain. Contact: support@restia.app.

2. Data We Collect

2.1 User Data

• Authentication data: name, surname, email, optional profile photo and, if you sign in with email, a password, of which we store only a hash (Sign-in with Google (OAuth 2.0), Sign in with Apple, or email and password).
• Establishment data: restaurant name, table configuration, menu, prices, operating hours.
• Operational data: orders, reservations, transactions, configuration preferences.

2.2 Technical & Device Data

• Device identifiers: Android Advertising ID (Android app only, through Firebase Analytics) and unique device IDs. The iOS app does not collect the IDFA.
• Device info: model, OS/version, language, timezone, screen resolution.
• Network data: IP, connection type, ISP.
• App data: version, usage time, features used, errors and crashes.

2.3 External Services Data

• Google Services: Firebase Analytics (Android app only), Google auth data.
• Apple Services: Apple ID auth data, App Store Connect info.
• RevenueCat: subscriptions, transactions, payment status, billing IDs.

2.4 Mobile App Permissions

• Camera: to photograph your menu so the app can create its items. Requested only when you scan a menu.
• Bluetooth: to find and connect to Bluetooth thermal printers.
• Location (Android 11 and earlier only): Android requires it to search for nearby Bluetooth printers. The app does not read your location.
• Network access: to connect to our servers and to network printers, and to check the connection state.
• In-app purchases (Google Play Billing on Android): to buy and manage subscriptions.
• Advertising ID (Android): used by Firebase Analytics.
• Tracking (iOS): after sign-in, the iOS app asks for App Tracking Transparency permission. Whatever you answer, the app does not read the IDFA.

3. Purposes & Legal Basis

• Service provision (Art. 6.1.b GDPR).
• Subscriptions: Apple or Google processes the payment through in-app purchase, and RevenueCat manages the subscriptions bought in the apps (Art. 6.1.b GDPR).
• Security and fraud prevention (Art. 6.1.c/f GDPR).
• App improvement and analytics (legitimate interest, Art. 6.1.f GDPR).
• Operational communications (Art. 6.1.b GDPR).
• Opt-in marketing (consent, Art. 6.1.a GDPR).
• Legal compliance (Art. 6.1.c GDPR).

4. Retention Periods

• Account data: active + up to 5 years for legal compliance.
• Transactions: 10 years (tax obligations).
• Error logs & analytics: 90 days, then anonymized or deleted.
• Marketing: until consent withdrawn or 2 years of inactivity.

5. Recipients & Transfers

Data is shared only with processors (Google LLC, Apple Distribution International Ltd (Ireland), RevenueCat Inc., Cloudflare, Inc. for website analytics and the CDN that serves the app's images, and the processors listed below) under GDPR safeguards. No data is sold to third parties. Transfers to the United States: Google LLC and Cloudflare, Inc. under the EU-US Data Privacy Framework adequacy decision; RevenueCat Inc. under Standard Contractual Clauses; Apple Distribution International transfers data to Apple Inc. under Standard Contractual Clauses.

• Hetzner Online GmbH (Germany): hosts our servers and database in Falkenstein, Germany, and stores the database backups in Helsinki, Finland. The data stays in the EU, so there is no international transfer.
• OpenAI Ireland Ltd (Ireland, EU): when you scan a menu, the photos or the PDF are sent to OpenAI to extract its categories, products, prices and descriptions. Nothing else is sent with them. Service provision (Art. 6.1.b GDPR). OpenAI Ireland transfers them to its affiliates in the United States under Standard Contractual Clauses.
• Twilio Inc. (SendGrid, United States): sends our transactional emails (account confirmation, password reset, team invitations, and reservation emails to your guests). It receives the recipient's email address, the guest's name on reservation emails, and the content of each message (for reservations: restaurant, date, time and party size). Reservation emails are sent on the restaurant's behalf (see section 6); for the other emails, operational communications (Art. 6.1.b GDPR). EU-US Adequacy Decision.

6. Restaurant Guests' Data

When someone books a table at a restaurant that uses Restia, the restaurant is the controller of that guest's data. Restia processes it on the restaurant's behalf and under its instructions (Art. 28 GDPR), to manage the reservation and to send the reservation emails that the restaurant's booking flow triggers.

• Data we store: the guest's name, surname, email address and phone number, as provided, and for each reservation the date and time, party size, zone and table, notes, status and its history, cancellation reason, and the language of the emails.
• Recipients: Hetzner Online GmbH, which hosts our servers and database in the EU, and Twilio Inc. (SendGrid), which sends the reservation emails (see section 5). We share guest data with no other provider.
• Rights: guests exercise their rights with the restaurant. If we receive a request from a guest (for example at support@restia.app), we forward it to the restaurant and help it respond.

7. Data Subject Rights

You can request access, rectification, erasure, restriction, portability, objection, and withdraw consent. To exercise, email support@restia.app with ID. We respond within 30 days.

8. Security Measures

• Encryption in transit: the apps connect to our servers only over HTTPS and secure WebSockets (TLS 1.2 or 1.3).
• Sign-in with Google (OAuth 2.0), Sign in with Apple, or email and password.
• Servers on a private network with no public IP addresses; automated monitoring and alerting.
• Session credentials kept in the device's secure storage (Android Keystore, iOS Keychain); the apps check our servers' TLS certificates with the operating system's standard validation.
• Daily database backups, kept for 14 days.

9. Cookies & Similar Tech

Web

The website sets no cookies and stores nothing in your browser. It uses Cloudflare Web Analytics, a cookieless analytics service that provides aggregated visit statistics.

Mobile

• Android Advertising ID, read by Firebase Analytics in the Android app for analytics. The iOS app does not read the IDFA.
• Local storage for offline mode and preferences.

10. Minors

Not directed to users under 18. We delete any minor data upon detection or request.

11. Changes to this Policy

We may update this Policy with at least 30 days notice (email or prominent web notice).

12. Contact

Privacy questions or rights requests: support@restia.app.