Privacy policy

Who processes your data

The apps are operated by {{NAZEV_FIRMY}}, company ID {{ICO}}, {{ADRESA}}. Contact for all privacy questions: {{EMAIL_PODPORY}}.

Roles differ by whose data it is. We are the controller for your account and how you use the app (sign-in, notifications, devices). Data that a business enters about its guests and staff (loyalty programme, bookings, orders, shifts, attendance) is processed on behalf of that business, which is the controller and decides why and for how long it needs it.

Guests (Managero client)

• Name, email and password (stored only as a one-way hash).
• Phone number and date of birth, both optional. The phone number is used to confirm a booking, the birthday for a greeting or reward at venues you joined.
• Your loyalty card code and memberships: points, stamps, credit, visits, coupons and ratings you send to a venue.
• Bookings and table orders: time, party size, items, table and any note you write. You pay at the venue; the app does not process payment details.
• Location: when you order from a table, the device asks whether the app may use your location, to check that you are at the venue. Coordinates are not stored, only the distance to the venue and the result of the check.
• Notifications: a device token to deliver booking and order updates. News and offers from venues are sent only if you explicitly allow them, and you can switch them off in your profile at any time.

People in a business (Managero)

• Name, email, phone, job title, avatar and password (hash only).
• Shifts, availability, time-off requests, attendance (clock-in and clock-out), shift ratings and rewards. Only management sees the hourly rate.
• Content the team creates: chat messages including photos, voice messages and videos, ideas, tasks, receipts, stock, closings and procedures.
• Change log of the business: who changed important settings and when.

Technical data

To protect sign-in we briefly store the number of failed attempts with the email and IP address; these records are deleted after a short time (days). Other technical logs are kept by the hosting provider.

We use no advertising or tracking tools, we do not sell data and we do not track you across other apps and websites.

Why we process data

• To provide the app: sign-in, loyalty programme, bookings, orders, rota, chat (performance of a contract).
• To secure the account and service and prevent abuse (legitimate interest).
• To send news and offers of venues, only with your consent, which you can withdraw at any time.
• To meet legal obligations, in particular accounting and tax duties of businesses.

Who receives data

We use providers that process data for us:

• Neon (Postgres database) and Vercel (app hosting and file storage),
• Resend (sending email, for example password reset),
• Apple (notifications on iPhone) and Google (notifications on Android),
• Stripe (subscription payments of businesses; not relevant to guests and not used in the mobile apps),
• Storyous (point of sale, only if a business connects it).
• Where data is stored: {{REGION_DAT}}.

How long we keep data

For as long as the account exists. When you delete your account, personal data is removed or anonymised (see below). Records a business must keep by law or needs for operations, such as shifts, attendance and closings, stay in the business without a link to your name.

Your rights

You have the right of access, rectification, erasure, restriction, portability, objection and to withdraw consent. Write to {{EMAIL_PODPORY}}. If we cannot resolve the matter you may complain to the Czech Office for Personal Data Protection (uoou.gov.cz).

You can delete your account directly in the app (Settings or Profile, Delete account) or on the /smazat-ucet page, even without the app installed.

Children

The apps are not intended for children under 15. If we learn that a child created an account without parental consent, we will delete it.

Changes

We will announce material changes in the app or by email. The current version is always on this page.