Privacy notice

This app belongs to Bean Bliss & Co., which decides what goes into it and who may use it. It was built and is maintained by Spotneck Technologies, which handles the records only on Bean Bliss & Co.’s instructions.

• Your login: the name and 10-digit phone number the owner enters for you, which screen you use, and whether the login is still active. Your PIN is never stored — only a scrambled form of it (scrypt), from which the PIN cannot be read back, not even by us.
• The work itself: every order, what was asked for and what was sent, the slips and receipts, and the name of whoever placed, sent out or received each one, and why an order was cancelled or its time changed, when somebody wrote it. Stock counts and corrections carry the same.
• Payments the kitchen records: which hotel paid, how much, the day, how (cash, UPI…), an optional note, and who entered it. If the owner chooses, a photo of the bill, cheque or UPI screen behind a payment — which can show a bank or UPI detail written on it; only the owner can see it, and the camera’s hidden details are removed by the browser before it is sent. This app does not take payments itself.
• The cashbook, if the owner keeps it: money in and out of the kitchen — the amount, the day, what it was for, how, a note, and the name typed in “Paid to” or “Received from”, with who entered it. A stock purchase also changes the stock count. A bill photo may be attached; only the owner sees it.
• The team, if the owner keeps it (ATTENDANCE): each member’s name, job, an optional phone number, pay, each day’s attendance (who marked it and when), and what was earned, advanced and paid. A photo taken from the phone’s camera when someone is marked is kept 90 days, then deleted; only the owner and whoever took it see it.
• Counter customers, if the kitchen sells at its counter: the phone number typed on a bill and, if given, a name; each bill (what was bought, how it was paid, the discount); the loyalty points earned, used and expiring; and the customer’s loyalty card code. The card’s own page — opened from its QR or its link, with no sign-in — shows only the first name, the last four digits of the phone and the points, to whoever holds the code; a lost card is replaced with a new code and the old one stops working. A customer who asks not to be messaged is marked so, and no WhatsApp goes to them.
• Your photo, only if you choose one: a small square copy, shown beside your name. The camera’s hidden details (where and when it was taken) are removed by your browser before it is sent. Remove it any time in Settings → Profile, and it is deleted.
• A record of changes: who changed a rate, a dish, a unit, stock, a login, what a login may do, or a setting, and when. The owner can read it in the app (Activity log).
• Your device, only if you turn alerts on: the address your browser gives us to send a notification to. Turning alerts off, or signing out, stops anything being sent to it.
• The owner’s recovery email, only if they set one: where a “Forgot your PIN?” link is mailed. When a link is asked for, its time and the network address it came from are kept, so misuse can be traced. Staff logins have no email here.
• Faults: when a screen fails, the server keeps what broke and where, to be fixed. The web address is kept without anything after the “?”, so what you were looking at is not kept with it.

No location, no contacts, no photos except the one you choose for yourself, the payment photos the owner attaches and attendance photos (90 days), no bank-card details, no ID documents. There is no advertising in this app, nothing is tracked across other websites, and nothing recorded here is sold or shared for anybody’s marketing.

The cookie that keeps you signed in, for 7, 15 or 30 days as the owner sets it (30 unless changed). Your browser’s own code cannot read it.

A few more that only remember this device’s own choices — light or dark, text size, 12- or 24-hour clock, rows per page, which tab it opens on, a folded sidebar — and nothing about you. The chime’s sound, a snooze, the order sounds’ on/off, the alerts you put away and which badges this device has already seen are kept in the browser the same way, and never sent to us. There are no analytics, advertising or third-party cookies.

• Orders, slips, receipts, payments, cashbook entries and stock movements — kept, because they are the business’s own accounts.
• Counter bills and the customers on them, with their points — kept, like the accounts. Points themselves expire as the owner’s loyalty rules say.
• Your photo — until you remove it, or the owner removes your login.
• Attendance photos — 90 days. The attendance marks and the team’s ledger are kept, like the accounts.
• A payment’s photo — as long as the payment, unless the owner takes it off (then it is deleted).
• The record of who changed what — one year.
• Faults — 90 days after the last time one happened.
• “Forgot your PIN?” links — they work for 30 minutes; the record of one is deleted after 30 days.
• Backups — a backup is a file the owner downloads and keeps; it holds names and numbers but never PINs. The app keeps only the last three copies it makes itself just before a backup is restored.
• Your signed-in device — 30 days from signing in (or the 7 or 15 the owner may set), or until you sign out.

The app runs on Vercel’s servers; the database is hosted by Neon in Singapore. Alerts go to your phone through the notification service your browser’s maker runs (Google, Apple, Mozilla or Microsoft) — the message says what is waiting, and no more. A “Forgot your PIN?” link is sent by email from Spotneck Technologies’ mailbox (Google Workspace).

If the kitchen has WhatsApp messages switched on, a counter bill’s message — the customer’s first name, the bill’s number and amount, and their points — goes to the customer’s number through Meta’s WhatsApp Business service.

If the owner uses the AI Advisor, a summary of the numbers of the pages he chooses — counts and amounts, and the names of hotels, dishes and stock items — is sent to Google’s Gemini service to be read. Never a phone number, a PIN, a photo, a note someone typed, or the name of a person. The owner can see exactly what each read sent, and the reads are kept in the app like the rest of the accounts.

Ask the kitchen’s owner: only the owner adds a login, resets a PIN or removes one. A name or phone number is changed by removing the login and adding it again. Records of work already done — a slip that went out, a receipt somebody signed for — are kept as they are, because they are the business’s account of what happened.

If you would rather ask us, or you are not satisfied with the answer, write to Spotneck Technologies at anuragthakur20for7@gmail.com.