Privacy Policy

This Privacy Policy explains how the JAJA KDS application ("the App") and its web admin panel handle information. The App is a kitchen / order-management tool for restaurants.

1. What information we process

• Account data: the login (nickname) and password you create. Passwords are handled and stored in hashed form by Google Firebase Authentication — we never see your plain password.
• Your email address: used to restore access to your account if you forget your password, and to contact you about the service. We do not send marketing email and do not share your address with third parties.
• Business data you enter: restaurant name, menu items and prices, orders, payment type (cash/card) and sales totals.
• Staff data entered by the restaurant: employee names, ranks, personal PIN codes and shift start/end times, used to run shifts and statistics.
• Technical data: minimal app-integrity tokens (Firebase App Check) and standard diagnostic data needed to keep the service secure and working.

We do not collect your location, contacts, or advertising identifiers. We do not sell your data or use it for advertising.

2. How the data is stored

Data is stored using Google Firebase (Cloud Firestore and Firebase Authentication), hosted in Google Cloud data centres in the European Union. Google acts as our sub-processor and applies its own security and data-protection measures. Data is encrypted in transit.

3. Why we process it (legal basis)

We process the data to provide the service you signed up for — running orders, shifts and statistics for your restaurant. Under the GDPR our legal basis is the performance of a contract with you and our legitimate interest in operating and securing the service.

4. Roles

The restaurant account owner is the controller of their employees' data and is responsible for informing their staff about this processing. KPMK.digital acts as a processor, handling that data only to provide the service.

5. How long we keep it

We keep your data for as long as your account is active. You can ask us to delete your account and associated data at any time by writing to the contact email above; we will delete it within a reasonable period.

6. Your rights

Under the GDPR you have the right to access, correct, delete or export your data, and to object to or restrict its processing. To exercise any of these, contact privacy@kpmk.digital. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, dvi.gov.lv).

7. Security

Access to data requires authentication. We use Firebase Security Rules so each restaurant can only reach its own data, Firebase App Check to block unauthorised clients, and encryption in transit.

8. Children

The App is a business tool and is not directed at children.

9. Changes to this policy

We may update this policy. The "Last updated" date above reflects the latest version. Significant changes will be communicated through the App or panel.

10. Contact

Questions or requests: privacy@kpmk.digital — KPMK.digital, Rīga, Latvia.