Bar & Resto Menu — Privacy Policy

Effective Date: May 13, 2026
Last Updated: May 13, 2026

This Privacy Policy describes how Q&A IT (“we,” “us,” or “our”) collects, uses, and protects information in connection with the Bar & Resto Menu mobile application (“the App”). This policy applies specifically to the App and is supplemented by our general Q&A IT Privacy Policy.

1. About the App

Bar & Resto Menu is a commercial Android application for restaurants, cafés, and bars. It provides digital menu management, table-side ordering, kitchen display, ingredient tracking, and sales analytics. The App is offline-first — your menu, orders, sales, and operational data are stored on your own devices and synchronized peer-to-peer over your local WiFi network.

Developer: Q&A IT, Dhaka, Bangladesh
Support: [email protected]
WhatsApp: +880 1535-132390

2. Our Privacy Principles

We designed Bar & Resto Menu with privacy as a core principle:

• We do not collect or store your restaurant’s business data on our servers. Your menu, orders, customers, sales records, ingredients, tables, reservations, and analytics never leave your devices except through your own local WiFi sync between your devices.
• We do not collect personal data about your customers (the restaurant patrons). The App processes orders locally on your devices only.
• We do not track your usage of the App. No analytics, telemetry, or behavioral data is sent to us.
• The App works fully offline. Internet is only required at specific moments for license verification.

3. Information We Collect

The only information we collect about you is limited to license management and is collected only when the App is connected to the internet for license verification.

3.1 At License Activation

When you activate your license key, we collect:

• License key — the key you enter
• Email address — the email used for purchase (provided by our payment processor)
• Device identifier — an anonymized fingerprint of your device used to bind the license to your hardware. This identifier is generated by combining device characteristics (model, manufacturer, system identifiers) and is hashed before transmission. It cannot be used to identify you personally.
• IP address — the IP address from which the activation request is made
• Activation timestamp — when activation occurred

3.2 During Periodic License Verification

The App periodically contacts our license server (approximately every 30 days when internet is available) to verify that your license remains valid. During verification, we collect:

• License key
• Device identifier (same as activation)
• IP address
• Verification timestamp

3.3 Support Communications

If you contact us for support, we collect any information you provide in your message (name, email, description of issue, screenshots, etc.).

3.4 Payment Information

We do not process payments directly. Payments are processed by third-party payment providers (currently Paddle and/or others as listed on our website). These providers collect and process your payment information according to their own privacy policies. We receive only confirmation of purchase, the email address used, and the license key associated with the purchase.

4. Information the App Does NOT Collect

To be explicit, the App does not collect:

• Menu items, prices, photos, or restaurant content
• Customer orders, sales records, or transaction data
• Restaurant patron information (names, emails, payment details)
• Photos or images stored in the App
• Audio (the App makes sound for order notifications but does not record audio)
• Location data (the App does not access GPS or location services)
• Contact lists
• Calendar data
• Files outside the App’s own storage
• Browser history or usage of other apps

The App does request the following Android permissions for its core functionality:

• Bluetooth — required for device-to-device sync via Google Nearby Connections
• Local network access — required for WiFi sync between your tablets
• Notifications — to alert the kitchen when new orders arrive
• Foreground service — to keep sync running during a service shift

These permissions are used only for the App’s local features and do not result in data being sent to us.

5. How We Use Your Information

The information we collect is used only for:

• License verification — to confirm your license is valid and active
• Fraud prevention — to detect unauthorized use of license keys
• Customer support — to respond to your inquiries and provide assistance
• Service communications — to send important notices about the App (security updates, major changes)
• Aggregate statistics — to understand active license counts (in anonymized form only)

We do not use this information for advertising, profiling, or any commercial purposes beyond delivering the App and its license services.

6. How We Share Your Information

We do not sell, rent, or trade your information. We share information only in these limited cases:

6.1 Service Providers

• Payment processors (Paddle, etc.) — for processing your purchase
• Web hosting providers — for operating our license server
• Email delivery services — for sending license keys and support communications

These providers receive only what they need to perform their function and are contractually obligated to protect your information.

6.2 Legal Requirements

We may disclose information if required by law, court order, or to protect our legal rights, prevent fraud, or address security incidents.

6.3 Business Transfers

If Q&A IT undergoes a merger, acquisition, or sale of assets, your information may be transferred. You will be notified of any such change.

7. Data Retention

• License records — retained for as long as your license is active, plus 7 years for tax and legal purposes
• Support communications — retained for up to 3 years
• License verification logs — retained for 12 months for fraud detection
• Payment records — retained for 7 years for tax purposes (as required by law)

8. Your Rights

You have the right to:

• Access the information we hold about you
• Correct inaccurate information
• Delete your information (subject to legal retention requirements)
• Object to how we process your information
• Withdraw consent where we rely on consent
• Receive your data in a portable format
• Lodge a complaint with a data protection authority

To exercise these rights, contact us at [email protected]. Note that deleting your license records will revoke your license — we cannot honor a deletion request and continue providing the licensed service.

9. Children’s Privacy

The App is intended for use by restaurant business owners and their staff. It is not directed at children under 18. We do not knowingly collect information from children.

10. Data Security

We protect license data with industry-standard measures:

• License keys are signed using HMAC-SHA256 cryptography
• License server uses HTTPS encryption
• Database access is restricted to authorized personnel
• Regular security reviews and updates

However, no security measure is perfect. We cannot guarantee absolute security and encourage you to also protect your devices.

11. International Data Transfers

We operate from Bangladesh and use service providers in the United States and European Union. By using the App, you understand that your information may be transferred to and processed in countries other than your country of residence.

12. Changes to This Privacy Policy

We may update this Privacy Policy as the App evolves. The “Last Updated” date at the top indicates when changes were made. Significant changes will be communicated within the App or via the email associated with your license. Your continued use of the App after changes constitutes acceptance of the updated policy.

13. Contact

For privacy questions or to exercise your rights:

Q&A IT
Email: [email protected]
WhatsApp: +880 1535-132390
Address: Dhaka, Bangladesh

14. Governing Law

This Privacy Policy is governed by the laws of Bangladesh. Disputes shall be resolved in the courts of Dhaka, Bangladesh.