Privacy Policy
This policy covers the laCafe platform and its apps — laTable (guest tablet), laBoard (point-of-sale display), laWaiter (waiter app), laCourier (courier app), laCollector (cashier/collector app), laKiosk and laMenu (menu tablet). They are restaurant work tools: they run the ordering flow and are used by restaurant staff.
1. General principles
No data is used for advertising, none is sold, and none is used to track you across other companies’ apps or websites. The apps contain no advertising networks.
The apps do not access contacts, the photo library, the camera or the microphone. Only laCourier uses location (section 4); the other apps do not access location.
laTable, laBoard, laWaiter and laKiosk contain no analytics or crash-reporting SDKs (laWaiter for Android includes only Firebase Cloud Messaging for push). laCourier, laCollector and laMenu use Google Firebase (section 8).
2. Data processed by all apps
Order data: chosen dishes, quantity, table number, timestamp and total. The restaurant needs this to prepare the order and settle the bill.
Device token: when a tablet or phone is connected to the restaurant system it receives a technical token, stored in the device Keychain.
Diagnostics: app version, device model and error text, used to fix crashes.
3. laWaiter (waiter app)
Waiter ID and name (assigned by the restaurant), the orders the waiter enters and table calls.
A push token is sent to the restaurant server to deliver notifications: Apple Push Notification service (APNs) on iOS, Firebase Cloud Messaging (FCM) on Android.
laWaiter contains no analytics or crash-reporting SDKs; the iOS version contains no third-party SDKs at all.
4. laCourier (courier app)
Precise location: collected only while the app is in use ("When In Use" permission) and only while the courier has an active delivery. The location is sent to the restaurant so the operator can follow the delivery on a map. No location is sent when there is no active delivery, and the app does not track location in the background.
Courier ID and name, the deliveries assigned to the courier and their status.
The customer's name, phone number and delivery address are shown to the courier solely to complete the delivery.
Google Firebase: Analytics (app usage statistics), Crashlytics (crash reports) and Cloud Messaging (push notifications; the FCM token is sent to the restaurant server).
5. laCollector (cashier/collector app)
Cashier ID and name, and the payments and orders the cashier handles.
The customer's name, phone number and address are shown to restaurant staff to fulfil the order.
Google Firebase: Analytics, Crashlytics and Cloud Messaging (push notifications; the FCM token is sent to the restaurant server).
6. laMenu (menu tablet)
laMenu neither requests nor stores any guest personal data; it only displays the restaurant menu.
Device telemetry: so the restaurant can monitor its tablets, the tablet periodically sends its battery level, app version and device model to the server.
Google Firebase: Analytics and Crashlytics.
7. Local network access
laBoard and laWaiter discover the in-restaurant point-of-sale server over the local network using a UDP broadcast, which is why iOS asks for the "Local Network" permission.
The permission is used solely to find the point-of-sale server inside the restaurant network; no data leaves the venue through this channel.
8. Third-party services
laCourier, laCollector, laMenu (and laWaiter for Android, FCM only) use Firebase services provided by Google LLC: Firebase Analytics (usage statistics, device identifiers), Firebase Crashlytics (crash reports: device model, OS version, stack trace) and Firebase Cloud Messaging (push token). Ad personalization signals are disabled. Google processes this data under its own policy: https://firebase.google.com/support/privacy
Apple Push Notification service (APNs) is used to deliver push notifications.
9. Where data is stored
Order data is stored on the point-of-sale server on the restaurant premises in an encrypted database (SQLCipher) and in the laCafe cloud (Uzbekistan).
Access is limited to the restaurant itself and laCafe technical staff. Apart from the services listed above, data is not shared with third parties except where required by law.
10. Retention and your rights
Order records are kept for the restaurant's accounting needs and are deleted at the restaurant's request.
To access, correct or delete data, write to hello@lacafe.app. Requests are handled within 30 days.
11. Children
The apps are intended for restaurant staff and guests. They are not directed at children and do not knowingly collect data from them.
12. Changes and contact
When this policy changes, the date on this page is updated. Customer restaurants are notified separately about material changes.
Questions: hello@lacafe.app · DIGITAL RESTAURANT LLC, Tashkent, Uzbekistan.