Privacy Policy

1. Information We Collect

1.1 Restaurant Owner Accounts

• Email address (used as login identifier and for transactional emails).
• Restaurant name, address, contact details, logo, and menu content you upload.
• No payment information is collected — the Service is currently free for all restaurant owners.
• Web Push subscription endpoints and VAPID keys so we can alert you about new orders when the app is in the background.

1.2 Customer (Diner) Information

• Orders you place (table number, items, quantities, special instructions).
• We do not require customers to create an account or share personal identity to place an order.

1.3 Automatically Collected Technical Data

• Device identifiers and platform information (OS version, app version).
• IP address and approximate location derived from the network.
• Usage logs and crash reports to improve stability and diagnose issues.

2. How We Use Your Information

• To provide, operate, and maintain the Service.
• To authenticate restaurant owners and secure accounts.
• To manage account access to the Service.
• To send real-time order notifications to restaurant owners.
• To generate, display, and fulfil customer orders placed via QR code.
• To detect, prevent, and address technical issues, fraud, or abuse.
• To comply with applicable legal obligations.

3. Legal Basis for Processing

We process personal data on the basis of (a) the performance of a contract with you (providing the Service and fulfilling orders), (b) our legitimate interests in operating and securing the Service, and (c) compliance with legal obligations. Where required, we obtain your consent, for example before sending promotional communications.

4. Data Sharing and Sub-Processors

We do not sell your personal data. We share information only with trusted service providers who help us operate the Service, under appropriate data-processing agreements:

• Backend & Authentication — Supabase (database hosting and user authentication).
• Push Notifications — Web Push (W3C Push API via the browser/OS push service, e.g. Firebase Cloud Messaging on Android) for order alerts.
• Email — Lovable email infrastructure (transactional OTP and account emails).
• App Distribution — Google Play (app delivery and updates).

We may disclose information when required by law or to protect the rights, property, or safety of QRDine Life, our users, or others.

5. Pricing and Payments

QRDine Life is currently offered free of charge to restaurant owners. There is no subscription, no in-app purchase and no payment processor integrated in the app or on our website. Customers (diners) never pay through the app either — they only place orders, which are settled directly with the restaurant.

• What we collect: no card numbers, UPI details, bank account information or billing addresses.
• Future paid plans: if we introduce a paid plan in the future, it will be offered through Google Play Billing for the Android app, and this policy will be updated before any charge applies. You will always be told the price and asked to confirm before paying.

6. Data Retention

We retain account and order data for as long as your restaurant account is active. You may request deletion of your account and associated data at any time via https://qrdine.life/delete-account. Transactional and billing records are retained as required by applicable tax and accounting law.

7. Data Security

We protect your data using industry-standard measures including encrypted transport (TLS), Row-Level Security on the database, and access controls. We collect no payment data at all. While we work to protect your information, no method of transmission or storage is completely secure.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your personal data.
• Withdraw consent for processing based on consent.
• Object to or restrict certain processing activities.
• Request data portability.

To exercise any of these rights, contact us at support@qrdine.life.

9. Push Notifications

The QRDine Life app uses the Web Push standard (W3C Push API) to alert restaurant owners when a new order arrives. When you enable notifications, the browser or operating system registers a push subscription that lets our server deliver an alert even when the app is not in the foreground. On Android this is delivered through Firebase Cloud Messaging; on other platforms through the browser's own push service. Push subscription identifiers are used solely for delivering these alerts and are removed when you disable notifications or delete your account. You can disable notifications at any time through your device or browser settings.

10. Children's Privacy

The Service is not intended for use by children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal data, please contact us and we will delete it.

11. Third-Party Links

Our Service may contain links to third-party websites or services that we do not control. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies.

12. International Transfers

Your information may be transferred to and processed in countries other than your country of residence. Where required, we use appropriate safeguards such as standard contractual clauses to protect your data during such transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the app or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us:

• Email: support@qrdine.life
• Website: https://qrdine.life