1. Who this policy covers
KhajaQR provides ordering and operational tools for cafes and restaurants. This policy covers restaurant owners, managers, staff, customers using QR menus and ordering, and people who contact the KhajaQR team. Different features collect different information; you do not need to provide every category listed below to use every part of the service.
Restaurants also use KhajaQR to manage information for their own business purposes. For questions about a specific order, bill, or customer record, contact the restaurant involved. You can also contact us for help with information held in KhajaQR.
2. Information we collect
- Account and business information: names, email addresses, account credentials, staff roles, restaurant names, contact details, addresses, and business settings you provide. Passwords are stored as hashes.
- Orders and customer records: table and session identifiers, ordered items, order notes, order history, bills, and, where provided, customer names, phone numbers, visits, preferences, and house account balances.
- Payments and subscriptions: payment methods, amounts, transaction references, payment status, subscription details, and payment proof or billing documents you submit. Payment providers handle information entered directly into their own payment services.
- Business content and uploads: menu content, images, inventory, expenses, supplier details, receipts, and documents you choose to upload or scan.
- Device and service information: IP addresses, request and error logs, login and activity records, session tokens, device platform, notification preferences, and push notification tokens when notifications are enabled.
- Support communications: information you send when asking for help, reporting an issue, or requesting a demonstration.
3. How we use information
We use information to:
- Create and authenticate accounts, manage staff access, and keep restaurant workspaces separate.
- Deliver menus, process and track orders, manage bills and payments, and provide restaurant reports, inventory, and expense tools.
- Send account verification and password reset emails, service updates, and operational notifications such as new orders or low stock.
- Extract expense details from receipts or bills when you choose to use AI-assisted scanning.
- Respond to support requests, diagnose failures, prevent misuse, and maintain the service.
5. Permissions and local storage
Notifications: the mobile app requests notification permission to deliver operational alerts. You can change notification permissions in your device settings and use notification preferences available in the app.
Camera and files: website features such as QR scanning may request camera access. Upload features process images or documents you choose to provide. You can decline optional access, although the related feature may be unavailable.
Cookies and device storage: KhajaQR uses cookies, browser storage, app storage, and caching for sign-in, session continuity, preferences, carts, and service operation. The mobile app uses secure device storage for authentication tokens. Clearing storage or signing out can remove local preferences or sessions; uninstalling the app does not delete server-side account or restaurant records.
6. Security
We use safeguards such as password hashing, authenticated sessions, and access controls to protect information. No storage or transmission method is completely secure. Keep your login details private and contact us if you suspect unauthorized access to your account.
7. Data retention
We retain information while it is needed to operate your account, provide restaurant services, resolve disputes, maintain security, or meet legal and accounting obligations. Retention depends on the type of record and the purpose for which it is held.
Following a verified deletion request, we delete or anonymize associated personal information that is no longer needed. Some transaction, accounting, fraud-prevention, or legal records may need to be retained for those purposes. Backup copies may remain until they are replaced through the backup cycle. We can explain applicable retention limits when handling your request.
8. Your choices and deletion requests
You can ask to access, correct, or delete your personal information, or request deletion of your KhajaQR account and associated personal data, by emailing rohanstha000@gmail.com. You can send this request without signing in or reinstalling the app.
Use the subject KhajaQR account and data deletion request and include your account email, restaurant name, and whether you want to delete your account or specific records. For a customer order request, include the restaurant and enough order details to locate the record. Do not send passwords, one-time codes, or full payment credentials.
We may verify your identity and authority over the account before acting. We will explain any information that must be retained and why. Restaurant records shared with other staff or needed for business accounting may require coordination with the restaurant. Account deletion and subscription cancellation are separate requests; mention any active subscription so we can help with both.
9. Children’s privacy
KhajaQR is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and address it.
10. Changes to this policy
We may update this policy as KhajaQR changes. The latest version will be available on this page with an updated date. Where required, we will provide additional notice of material changes.
11. Contact us
For privacy questions or requests concerning the KhajaQR app or website, contact the KhajaQR team at rohanstha000@gmail.com.