ServFlow

This Privacy Policy describes how ServFlow ("we", "us", or "our") collects, uses, and protects information when you use the ServFlow mobile application (the "Service"). By using the Service, you agree to the practices described here.

ServFlow is a restaurant operations application that helps you manage your menu, take orders, coordinate your kitchen, and review sales reports from your device.

1. Information We Collect

• Account information. When you create or sign in to an account, we collect your email address, a hashed password, and basic business profile details such as your restaurant name.
• Business data you provide. To run the Service, we process the operational data you create, including menu items and prices, orders and kitchen tickets, and sales and reporting data. This is your business data and you control it.
• Photos and media. When you add images to menu items, you may grant the app access to your device photo library. Images are sent to our servers only when you choose to upload them, and we do not access your photos at other times.
• Device and technical information. We collect limited technical details such as device model, operating system version, app version, and identifiers used to keep you signed in securely and to keep the Service reliable.
• Configuration data. The app contacts Firebase Remote Config (a Google service) to check the minimum supported app version so we can prompt you to update when required.
• Log information. Our servers automatically record standard request logs, such as timestamps and approximate request origin, needed to operate, secure, and troubleshoot the Service.

2. How We Use Information

• Provide, maintain, and improve the Service.
• Authenticate you and keep your session secure.
• Process and sync your business data across your devices and staff.
• Detect and prevent fraud, abuse, and security issues.
• Notify you when an app update is required.
• Comply with our legal obligations.

3. How We Share Information

We do not sell your information. We share data only as needed to operate the Service:

• Service providers. We use Google Firebase for Remote Config and for hosting this policy. Google processes data on our behalf under its terms. See Google's Privacy Policy.
• Infrastructure. Our backend services and hosting providers process data to deliver and scale the Service.
• Legal requirements. We may disclose information when required by law or to protect the rights, property, and safety of ServFlow, our users, or others.

4. Data Retention and Security

We retain your data for as long as your account is active or as long as needed to provide the Service, after which we delete or anonymize it subject to legal requirements. We protect data in transit using HTTPS encryption and store authentication tokens securely on your device.

5. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to certain processing. To exercise these rights, contact us at contact@servflow.app. You may also stop using the Service and request account deletion at any time.

6. International Data Transfers

Your information may be processed in countries other than your own. When this happens, we rely on appropriate safeguards, such as standard contractual clauses, to help protect your data.

7. Children's Privacy

The Service is a business tool for restaurant operators and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

8. Changes to This Policy

We may update this policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. For material changes, we will also notify you through the app or other appropriate channels.

9. Contact Us