Legal

Privacy Policy

Effective 13 October 2026

KinDee is a restaurant management system: the KinDee POS app for iPad, the kitchen display, the guest display, the host console with online booking, the back-office dashboard, and this website. This policy explains what information those products handle, why, and the choices you have. It is written for restaurant owners and their staff, and for guests who book a table or appear on a receipt.

KinDee is operated from Vientiane, Lao PDR. Questions go to sabaidee@kindee.app.

The short version

Your restaurant's data belongs to your restaurant. We process it to run the system you signed up for, nothing else.
We do not sell data, show advertising, or run third-party advertising or analytics trackers in the apps or on this site.
Every organisation's data is isolated at the database level. Staff at one restaurant cannot see another restaurant's data.
You can export or delete your organisation's data by emailing us. Deleting the app does not delete the account; ask us and we will.

What we collect

Account information. When an owner or manager creates a KinDee account we store a name, email address and a password, which is stored only as a secure hash by our authentication provider. Staff members get a profile (name, role) and a numeric PIN for the till; PINs are scoped to one location and stored hashed.

Restaurant operating data. Menus, prices, tables and floor plans, orders and order lines, kitchen tickets, payments and payment methods, tips, voids and discounts, shift and cash drawer counts, inventory, recipes, suppliers, purchase records, staff rosters and clock-in times. This is the business record the system exists to keep. Where a guest's name or phone number is attached to an order or reservation, it is stored as part of that record.

Reservations and online booking. When a guest books through a restaurant's booking page we store the name, contact details, party size, date and time, and any note the guest writes, and share it with that restaurant only.

Device and diagnostic information. The POS records the device name you give a till, the app build it runs, and a connectivity log (when it lost and regained its connection) so we can diagnose outages. The apps do not collect location, contacts, photos, or advertising identifiers. The POS asks for Local Network permission on iPad solely to send print jobs to receipt and kitchen printers on your Wi-Fi.

Website. If you request a demo we store the name, email and restaurant name you type. If you use the help assistant, your question and the matching help articles are sent to our AI provider to compose an answer; we do not attach your identity to that request. The site sets no advertising cookies.

Why we use it

To provide the service: take orders, send them to the kitchen, print, settle payments, keep the books and show reports.
To secure it: authenticate people, enforce roles and PINs, and keep an audit log of sensitive actions such as voids, discounts, refunds and payment corrections.
To support you: investigate a problem you report, which may mean looking at the records involved.
To improve reliability: aggregate, non-identifying usage such as error rates and connectivity statistics.

Who processes it for us

We rely on a small number of infrastructure providers, each bound by their own data processing terms: a managed Postgres and authentication platform (Supabase) for the database and sign-in, a web hosting platform (Vercel) for the websites and web apps, a sync service (PowerSync) that keeps tills working offline, Apple (App Store and TestFlight distribution), and an AI provider (Anthropic) for the help assistant on this website. Data is stored in data centres in the Asia-Pacific region. We do not share your data with anyone else except when the law requires it.

How long we keep it

Business records are kept for as long as your organisation has an account, because sales history is the point of the product. When an account is closed we delete or anonymise its data within 90 days, except where we must keep accounting records for a legally required period. Demo requests are deleted within 12 months if no conversation follows.

Your choices and rights

Access and export. Owners can export their data from the dashboard or ask us for a full export.
Correction. Account and staff details can be edited in the dashboard at any time.
Deletion. Email sabaidee@kindee.app from the owner's address and we will delete the organisation, its users and its records. Individual staff accounts can be removed by the owner inside the dashboard.
Guests. If you are a guest and want a reservation or order record about you removed, contact the restaurant, or contact us and we will route the request.

Security

All traffic uses TLS. Passwords and PINs are hashed. Access to every table is controlled by row-level security tied to the signed-in organisation, so a query cannot return another restaurant's rows even if it tries. Sensitive till actions are PIN-protected and audit-logged. No system is perfectly secure; if we learn of a breach affecting your data we will tell you promptly.

Children

KinDee is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16.

Changes

If this policy changes in a way that matters, we will update the effective date above and notify account owners by email before the change takes effect.