1. Introduction

Restaurantware, Inc. ("Restaurantware," "we," "us," or "our") is committed to protecting your privacy. This Mobile Application Privacy Policy ("Policy") explains how we collect, use, disclose, and safeguard your information when you download and use our mobile application (the "App") available on iOS and Android platforms.

This Policy supplements our general Website Privacy Policy located at www.restaurantware.com and governs personal information collected through the App. By installing or using the App, you agree to the practices described in this Policy. If you do not agree, please uninstall the App and discontinue use.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account, place an order, or contact us through the App, we may collect:

• Full name and business name
• Email address and phone number
• Billing and shipping address
• Payment information (processed securely by our payment processor; we do not store full card numbers)
• Account credentials (username and hashed password)
• Communications you send to our customer support team

2.2 Information Collected Automatically

When you use the App, we automatically collect the following categories of data:

2.2a Device and Technical Information

• Device type, make, and model
• Operating system version (iOS or Android)
• Unique device identifiers (Device ID, Advertising ID such as Apple IDFA or Google GAID)
• Mobile network carrier and connection type (Wi-Fi, LTE, 5G)
• App version number
• IP address and derived approximate geographic location (city/country level)
• Language and time zone settings
• Crash logs, error reports, and performance diagnostics

2.2b In-App Activity and Usage Data

We track your activity within the App in order to improve your experience, personalize content, and understand how our features are used. This tracking includes, but is not limited to:

• Screens and pages viewed, and the order in which they were viewed
• Products searched, browsed, and viewed
• Items added to or removed from your cart or wish list
• Purchase history and order status interactions
• Features and filters used within the App
• Tap, scroll, and navigation interactions
• Session start and end times, and session duration
• Referring source if you opened the App from a notification, link, or advertisement

2.3 Push Notification Data

If you grant permission for push notifications, we collect and store a push token issued by Apple (APNs) or Google (FCM) associated with your device. This token is used solely to deliver notifications to your device. We also log when notifications are delivered and opened.

2.4 Location Data

The App may request access to your approximate location (derived from IP address) to provide region-relevant shipping estimates and tax calculations. We do not collect precise GPS location unless you explicitly grant foreground location permission for a specific feature. You may revoke location permissions at any time in your device Settings.

2.5 Information from Third Parties

• Social login providers (e.g., Apple Sign-In, Google Sign-In, Shop/Shopify) may share your name and email address
• Payment processors share transaction confirmation details
• Analytics partners provide aggregated and attributed behavioral data

3. How We Use Your Information

3.1 To Operate and Provide the App

• Create and manage your account
• Process and fulfill orders
• Provide customer support
• Authenticate your identity and secure your account

3.2 In-App Activity Tracking Purposes

• Personalize product recommendations and search results
• Remember items in your cart and wish list across sessions
• Analyze feature usage to improve App design and navigation
• Detect and prevent fraudulent transactions and abuse
• Generate aggregated analytics and business intelligence reports
• Optimize App performance and reduce crash rates

3.3 Push Notifications (Opt-In Only)

• Order confirmations, shipping updates, and delivery notifications
• Alerts about items back in stock or price changes
• Promotional offers, new product launches, and seasonal sales
• Account security alerts
• Abandoned cart reminders

3.4 Marketing and Advertising

We may use your activity data and device identifiers to serve you personalized in-app and cross-platform advertisements, subject to applicable consent requirements.

3.5 Legal and Safety Purposes

• Comply with applicable laws
• Enforce our Terms of Service
• Protect the rights, property, and safety of Restaurantware, our users, and the public

4. Legal Basis for Processing (Where Applicable)

Where required by law (including GDPR for EEA users), we rely on the following legal bases:

• Contract Performance: Processing necessary to fulfill your orders and manage your account
• Legitimate Interests: Analytics, fraud prevention, and product improvement, balanced against your rights
• Consent: Push notifications, advertising tracking (ATT), and optional personalization features
• Legal Obligation: Compliance with tax, consumer protection, and data protection laws

5. Third-Party Services and SDKs

The App integrates third-party software development kits (SDKs) and services that may independently collect data subject to their own privacy policies. These may include services in the following categories:

Category	Purpose	Examples
Analytics	Track usage, performance, and crashes	Firebase Analytics, Crashlytics
Payment Processing	Secure transaction handling	Stripe, Braintree
Push Notifications	Deliver push messages	Apple APNs, Google FCM
Advertising	Personalized ad delivery	Meta Audience Network, Google Ads
Customer Support	In-app messaging	Zendesk, Intercom
Authentication	Secure sign-in	Apple Sign-In, Google Sign-In

6. How We Share Your Information

We do not sell your personal information. We may share your data in the following circumstances:

• Service Providers: Vendors acting on our behalf (e.g., payment processors, shipping carriers, analytics providers) who are contractually bound to protect your data
• Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred with appropriate notice
• Legal Requirements: When required by subpoena, court order, or applicable law
• Safety: To protect against fraud, security threats, or to protect the rights and safety of Restaurantware and its users
• Aggregated/De-Identified Data: We may share anonymized, aggregated data that cannot reasonably be used to identify you

7. App Store Platform Requirements

7.1 Apple App Store — Privacy Nutrition Label

Consistent with Apple's App Store requirements, we disclose the data types we collect in our App Store Privacy Nutrition Label, including data linked to your identity (such as purchase history, email address, and device ID) and data used to track you across apps. The data categories declared in our App Store Connect Privacy section are consistent with this Policy.

7.2 Apple App Tracking Transparency (ATT)

On devices running iOS 14.5 or later, we request your permission before tracking your activity across apps and websites owned by other companies. You will see an ATT prompt the first time the App requires this capability. You may change your response at any time under Settings > Privacy & Security > Tracking.

7.3 Google Play — Data Safety Section

Our Google Play Data Safety declaration is consistent with this Policy and discloses data collection, sharing, and security practices as required by Google Play policy. Users on Android devices can review this declaration in the Google Play store listing for the App.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the App's services. We retain usage and activity data for up to 24 months from collection for analytics and fraud prevention purposes. Push tokens are retained while your account is active and deleted within 30 days of account deletion or permission revocation.

We may retain certain data longer where required by law (e.g., tax and financial records) or to resolve disputes. Upon account deletion, we will de-identify or delete your personal data within 90 days, except where retention is legally required.

9. Your Rights and Choices

9.1 All Users

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated personal data
• Portability: Receive a machine-readable copy of data you provided to us
• Opt-Out of Push Notifications: Disable via device Settings or in-app Notification Preferences
• Opt-Out of Personalized Advertising: Use device-level Ad Tracking controls (iOS: Settings > Privacy & Security > Apple Advertising; Android: Settings > Google > Ads)

9.2 California Residents (CCPA / CPRA)

California residents have the following additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know: Know what categories and specific pieces of personal information we collect, use, disclose, or sell
• Right to Delete: Delete personal information we hold about you (subject to exceptions)
• Right to Correct: Correct inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell personal information; however, certain advertising SDK integrations may constitute "sharing" under CPRA. You may opt out at any time by contacting us or using the in-app privacy settings
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond what is necessary to provide our services
• Non-Discrimination: We will not discriminate against you for exercising any CCPA/CPRA rights

To submit a verifiable consumer request, contact us at service@restaurantware.com or call 1-800-851-9273. We will respond within 45 days.

9.3 Other U.S. State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy laws have rights including access, correction, deletion, portability, and opt-out of targeted advertising. Submit requests to service@restaurantware.com.

9.4 EEA, UK, and International Users

If you access the App from the European Economic Area, United Kingdom, or other regions with data protection laws, you have additional rights including the right to object to processing, restrict processing, and lodge a complaint with your local supervisory authority. Please contact us at service@restaurantware.com to exercise these rights.

10. Children's Privacy

The App is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at service@restaurantware.com. We will promptly delete such information. Users between the ages of 13 and 18 should use the App only with parental consent.

11. Data Security

We implement technical and organizational safeguards to protect your personal information, including:

• TLS/SSL encryption for all data transmitted between the App and our servers
• Encryption of personal data at rest using AES-256 or equivalent standards
• Role-based access controls limiting data access to authorized personnel only
• Regular security assessments and penetration testing
• Incident response procedures and breach notification protocols

No method of transmission or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach affecting your rights and freedoms, we will notify you as required by applicable law.

12. International Data Transfers

Restaurantware is based in the United States. If you use the App from outside the U.S., your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.

13. Links and Third-Party Content

The App may contain links to third-party websites or services. This Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy
• Send a push notification to users who have opted in to notifications (if the change is material)
• Display an in-app notice the next time you open the App
• Where required by law, obtain renewed consent

Your continued use of the App after notice of changes constitutes your acceptance of the updated Policy. If you do not agree with the updated Policy, you should discontinue use of the App.

15. Contact Us