This policy explains what information RekordPlate collects, why we collect it, who we share it with, and the choices you have. It covers the website at rekordplate.com, the web app, and the Windows, Android and iOS apps.

RekordPlate is operated by Devcity, SP14842022, Maldives (“Devcity”, “we”, “us”). For privacy questions, contact us at info@devcitymv.com.

1. Two kinds of information

• Information about our customers. The restaurants and businesses that use RekordPlate, and the owners and staff who sign in to it. We decide how this information is used, and this policy describes it.
• Information a business records about its own customers. For example, the names, phone numbers, delivery addresses and order history of the people who eat at or order from a restaurant. The restaurant is responsible for this information. We store and process it on the restaurant's behalf, only to provide RekordPlate to them. If you are a restaurant's customer, please contact the restaurant about your information.

2. What we collect

• Account and business details — your name, email address, phone number, business name, address, type of business and logo.
• Staff users — the names, contact details and roles of people you add to your account.
• Billing — your plan, payment history and any receipts you upload for bank transfers. Card payments are handled by the payment provider; we do not receive or store full card numbers.
• Business data — the menus, prices, tables, orders, sales, expenses, stock and other records you enter.
• Device and usage information — IP address, browser and device type, app version, sign-in times, and error logs. The apps also create a notification token so we can send the push notifications you turn on.
• Messages — what you send us through the contact form or by email, including your name, phone number, email and company.

3. How we use it

• To provide RekordPlate: run your account, keep your data in sync across devices, and show your reports.
• To take subscription payments and keep billing records.
• To send service messages — receipts, renewal reminders, security alerts and notice of important changes — and the in-app notifications you turn on, such as a new order arriving.
• To answer your questions and give support.
• To keep the service secure: detecting fake sign-ups, limiting repeated failed sign-ins, and blocking abusive traffic.
• To understand how the service is used, in aggregate, so we can improve it.
• To meet our legal obligations.

We do not sell personal information. We never use a restaurant's customer information for our own marketing.

4. Product news

We may occasionally email account owners about new features. You can unsubscribe at any time using the link in the email, or by contacting us. Service messages, such as billing and security notices, are sent regardless.

5. Who we share it with

• Service providers who help us run RekordPlate — hosting, email and SMS delivery, and push notifications (Google Firebase Cloud Messaging). They may use the information only to provide their service to us.
• Payment providers, to process subscription payments, and any provider you connect to take payments from your own customers.
• App stores (Google Play and the Apple App Store), which handle app downloads under their own privacy policies.
• Your own team — staff users see your business's data according to the permissions you give them.
• Authorities, where the law requires us to disclose information, or to protect people's safety, our rights or the service.
• A successor, if Devcity or RekordPlate is merged or sold, in which case this policy continues to apply to your information.

6. Where it is stored

RekordPlate's servers are run by a hosting provider on our behalf and may be located outside the Maldives. Wherever information is stored, we protect it as this policy describes.

7. Cookies

We use only the cookies RekordPlate needs to work: to keep you signed in, to protect forms against forgery, and to remember your language. We do not use advertising cookies or third-party tracking.

8. How long we keep it

• Account and business data is kept while your account is active.
• After an account closes or a subscription expires, we keep the data for 30 days so you can return or ask for a copy, then delete or anonymise it.
• Records we must keep by law, such as payment records, are kept for as long as the law requires.
• Security and error logs are kept for a short period, then deleted.

9. How we protect it

Information travels over encrypted connections (HTTPS), passwords are stored hashed rather than readable, and access to data is limited by role — both within your business and within our team. No system is perfectly secure, so please keep your password private and tell us straight away if you notice anything unusual.

10. Your choices and rights

You can see and correct most of your details in your account settings. You can also ask us to:

• give you a copy of the personal information we hold about you;
• correct information that is wrong;
• delete your account and information, subject to what we must keep by law;
• stop sending you product news.

Email info@devcitymv.com and we will reply within 72 hours . We may need to confirm your identity first.

11. Children

RekordPlate is a business tool and is not intended for children. We do not knowingly collect information from anyone under 18.

12. Changes to this policy

We may update this policy as RekordPlate changes. The date at the top of this page shows when it last changed. If a change is significant, we will tell account owners by email or in the app.

13. Contact

Questions or requests about your information: [Contact email], or write to us at [Registered address].