This Privacy Policy describes how iTechX UG ("we", "us", or "our") collects, uses, and protects your personal information when you use the GPLUG mobile applications ("GPLUG Guest" and "GPLUG Suite") and related services.
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address when signing in via Google or Apple Sign-In.
- Order Information: Food and beverage orders, table numbers, payment preferences.
- Feedback: Ratings and reviews you submit about restaurant experiences.
1.2 Automatically Collected Information
- Device Information: Device model, operating system version, unique device identifiers.
- Bluetooth Data: BLE beacon signals for restaurant and table detection. This data is processed locally and not stored on our servers.
- Location Data: Approximate location when you grant permission, used to find nearby restaurants.
- Usage Data: App interaction patterns, feature usage, crash reports via Firebase Crashlytics.
2. How We Use Your Information
- Process and deliver your food orders to the restaurant.
- Identify your table via BLE beacon technology.
- Send push notifications about order status updates.
- Improve our services and user experience.
- Diagnose technical issues and prevent fraud.
3. Data Sharing
We do not sell your personal information. We share data only with:
- Restaurants: Your order details and table number to fulfill your order.
- Payment Processors: Stripe processes payments; we do not store credit card numbers.
- Service Providers: Firebase (crash analytics, push notifications), hosted on EU servers.
4. Data Storage and Security
- Data is stored on servers located in the European Union (Germany).
- All data transmission is encrypted using TLS 1.3.
- Sensitive data (tokens, credentials) is stored using platform-secure storage (iOS Keychain / Android EncryptedSharedPreferences).
- We retain order data for 12 months, after which it is anonymized.
5. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access: Request a copy of your personal data.
- Rectification: Correct inaccurate personal data.
- Erasure: Request deletion of your personal data ("right to be forgotten").
- Portability: Receive your data in a machine-readable format.
- Object: Object to processing of your personal data.
- Withdraw Consent: Withdraw consent at any time.
To exercise these rights, contact us at privacy@gplug.ai.
6. Bluetooth and Location Permissions
GPLUG Guest uses Bluetooth Low Energy (BLE) to detect nearby restaurant beacons. This enables automatic table detection without manual input. Location permission is required by iOS/Android for BLE scanning. We do not track your location history.
GPLUG Suite uses Bluetooth to broadcast a BLE beacon signal so that guest devices can discover the restaurant. No personal location data is collected.
7. Push Notifications
We use Firebase Cloud Messaging to send order status updates. You can disable push notifications at any time through your device settings.
8. Children's Privacy
Our services are not directed to children under 16. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email.
10. Contact Us
If you have questions about this Privacy Policy:
Last updated: March 21, 2026