← Back to NotinQNotinQ Privacy Policy
Last updated: 17 October 2026
This Privacy Policy explains how NotinQ (“we”, “us”, or “our”) handles personal information when you use the NotinQ mobile application, notinq.com, restaurant QR menus, ordering features, and related support services. It applies to restaurant managers, customers, and administrators.
Information we collect
Account information. We collect information you provide, such as your name, email address, phone number, profile photo, and restaurant details. Restaurant details can include its name, address, location, contact information, photos, opening hours, and menu. Administrators may create manager accounts on behalf of restaurants. Passwords used for email login are stored as password hashes, rather than plain-text passwords.
Google sign-in. If you choose Google sign-in, we receive identity information used to authenticate you, including a Google account identifier, email address, name, and, where applicable, profile photo. Google also processes information under its own privacy policy.
Orders and restaurant interactions. We collect order items, quantities, prices, order numbers, table or QR-code information, order status, contact details supplied for an order, cancellation reasons, reviews, and other information you submit. Where you upload payment proof, we process the uploaded image or its URL and payment-status information. Avoid including unnecessary banking or other sensitive details in uploaded images.
Location. With your permission, features may access precise or approximate location to show nearby restaurants, place restaurant map pins, check restaurant ordering areas, record QR-scan location, and support manager-device security. Location may be saved with relevant sessions, scans, or other feature records. You can manage location permission in your device or browser settings; features requiring it may then be unavailable.
Device and technical information. We process device or browser information, platform, app version, installation identifiers, session activity, QR-scan events, notification tokens, and service logs. Hosting and network providers may also process IP addresses and connection information when delivering the service.
Diagnostics. The mobile app uses Firebase Crashlytics for crash and error reporting. Reports may contain technical device and app information, stack traces, and an internal account identifier used to diagnose issues.
Support communications. When you contact us, we receive the information you include in your message and information needed to respond.
How we use information
We use information to create and authenticate accounts; provide restaurant menus and QR ordering; route and manage orders; show order progress; support reviews; configure restaurants; send account, password-reset and operational notifications; connect receipt printers; investigate crashes; secure sessions; prevent misuse; respond to support requests; and meet applicable legal obligations.
Permissions and local storage
Depending on the feature you choose, NotinQ may request camera access for QR scanning or taking photos, photo-library access for choosing or saving images, location access, notification permission, and Bluetooth or nearby-device access for receipt printers. Granting one permission does not grant all others. You can change permissions in your device or browser settings.
The app and website use local storage or similar device storage to retain authentication sessions, installation identifiers, preferences, and other information needed for features you use. Clearing this storage may sign you out or reset preferences.
When information is shared
Restaurants and their authorised staff. Information needed to fulfil an order, such as customer details supplied for that order, items, table information, payment proof, and order status, is available to the relevant restaurant and authorised personnel. Reviews and other information intended for display may be visible to other users.
Public restaurant content. Restaurant contact details, location, menu items, photos, and other published restaurant information may be accessible through public restaurant listings and QR menus. Uploaded images can be delivered through publicly accessible file URLs. Do not upload confidential documents or images unrelated to the service.
Service providers. We use providers for hosting, databases, file storage and delivery, authentication, maps, email delivery, push notifications, and crash reporting. Integrations include Google/Firebase services and Cloudflare R2 for uploaded files. These providers process information needed to perform their services and may operate in other countries.
Legal and security needs. Information may be disclosed when required by applicable law or to investigate misuse, protect people and systems, or establish or defend legal claims. If the service is transferred through a business transaction, relevant information may transfer subject to applicable protections and notice requirements.
Retention and deletion
We retain information while needed to operate accounts and restaurants, fulfil and maintain order records, resolve disputes, prevent abuse, meet legal obligations, or maintain necessary service records. Retention depends on the type of record and its purpose.
Removing a restaurant from the app does not necessarily erase every related record. Some restaurant, order, account, session, or other records may remain archived; deleting a restaurant or signing out should not be treated as confirmation that all personal information has been erased. Backups and copies held by relevant restaurants or service providers may also require separate handling.
To request deletion of your account or associated personal information, email [email protected] with the subject “NotinQ account deletion”, identify the account, and describe the request. We may verify ownership before taking action. Do not send your password. We will explain any information that must be retained and the reason, and handle requests in accordance with applicable law. Restaurant managers can also use the restaurant-deletion option available in manager settings to remove their restaurant from active use. Your choices and requests
You can update information through available account or restaurant settings, change device permissions, manage notification settings, and contact us to request access, correction, deletion, or information about how your personal information is handled. Available rights and exceptions depend on applicable law. Restaurants may hold their own copies of order information; we may direct you to the relevant restaurant where appropriate.
Security
We use safeguards such as authenticated access, password hashing, session controls, and encrypted connections to production services. Access is intended to be limited according to user roles. No system or method of transmission is completely secure. Protect your credentials and contact us if you suspect unauthorised access.
International processing
Information may be stored or processed in countries other than your own because our service providers operate internationally. Applicable legal requirements and safeguards govern those transfers.
Children
Restaurant-manager and administrator functions are intended for authorised adults. If you believe a child has supplied personal information without the authorisation required by applicable law, contact us so we can investigate and take appropriate action.
Other services
Restaurant services, payment services, Google sign-in, and other external services may have separate terms and privacy policies. This policy covers NotinQ’s handling of information; it does not replace those policies.
Changes and contact
We may update this policy as the service or its data practices change. The updated policy will show a revised date, and we will provide additional notice where required.
Contact NotinQ about privacy