Privacy Policy

Effective and last updated: 21 September 2026

RestoBill is a billing and restaurant management app made by Code Implants Software Technologies Pvt Ltd, Pune, Maharashtra, India ("Code Implants", "we", "us"). This policy covers the RestoBill apps for Android and iOS and the RestoBill web app at restobill.codeimplants.com. It explains what we collect, why, who processes it for us, how long we keep it, and how you can delete it.

In short: we collect what we need to run your outlet's billing — your mobile number, your business details and the records you create. We don't show ads, we don't sell data, and we never see card payments. You can delete your account from inside the app, and we then erase your outlet's data for good within 30 days.

1. What we collect

Your account

Mobile number — you sign in with a one-time code sent by SMS.
Your name, and for staff you add: their name, mobile number and login ID. Staff passcodes are stored only as a one-way hash; we cannot read them.

Your business

Business profile — outlet name, logo, address, phone, email, GSTIN, FSSAI number and business type.
Records you create — menu items and prices, categories, tables and floors, orders, bills and KOTs, payments you record, expenses, purchases, staff and roles, and reports.
Your customers' details, if you choose to record them — for example a name, mobile number or balance. You collect this information and decide how it is used; we store and process it on your behalf only to run RestoBill for you. Please make sure you have your customers' consent where the law requires it.
Photos you upload — your logo and item and category pictures.

Your device

A random identifier created when the app is installed, your device make and model, operating system and app version. We use them to keep you signed in and to protect your account.

How the app is used (analytics)

We use Firebase Analytics (Google) in the mobile apps to count a small set of events: the app being opened or closed, signing in and out, a bill printed or failing to print, a report downloaded, and an account deleted. Firebase also records standard usage information of its own, such as sessions, app version, device model and approximate country, together with an app-instance identifier. The only account detail we attach is our internal account number.
We never send your mobile number, name, customers or bill contents to analytics, and we don't use the advertising ID.

Permissions the app asks for

Permission	Why
Bluetooth and nearby devices	To find and connect to your receipt printer.
Location (Android)	Older Android versions require it to scan for Bluetooth printers. We don't read, collect or store your location.
Camera	To photograph menu items and to scan the QR code that joins another device's hotspot.
Photos	To pick an existing picture for an item, a category or your logo.
Fingerprint / Face ID	To unlock the app if you turn on app lock. Your device checks it; we never receive biometric data.

2. How we use it

To provide RestoBill: billing, KOTs, menus, tables, reports and printing.
To sign you in, keep your account secure and sync your data between your devices.
To show your public menu — only if you turn it on. It shows your outlet name, address, phone and menu to anyone with the link or QR code; turn it off at any time.
To answer you when you contact support.
To understand, in aggregate, which parts of the app work and which fail, so we can improve it.
To meet legal obligations.

3. Where your data is stored and who processes it

RestoBill works offline: a copy of your outlet's data is kept on each device you use, and it syncs with our servers when you are online. We use these service providers, each only for the task listed:

Provider	What it does for us	Data it handles
Hostinger — servers in Mumbai, India	Runs our servers, database and backups	Everything you store in RestoBill
2Factor.in (India)	Sends the sign-in SMS	Your mobile number and the one-time code
ImageKit	Stores and serves the photos you upload	Your logo and item and category photos
Google Firebase	Analytics; hosts the RestoBill web app	The analytics events described above

Some of these providers may process data outside India. They are bound by their own security and privacy commitments, and we share only what each one needs.

4. Sharing

We don't sell or rent your data, and we don't share it for advertising. We share it only with the providers above to run RestoBill, when the law requires us to, or as part of a merger or acquisition — in which case this policy continues to apply to your data.

5. Security

All traffic between the app and our servers is encrypted (HTTPS).
Sign-in codes and staff passcodes are stored only as one-way hashes. Sign-in sessions use short-lived tokens that you can end by logging out.
Access to our servers and backups is restricted to the people who run RestoBill.

No system is completely secure, but we work to protect your data and will tell you, and the authorities, as the law requires if a breach affects you.

6. How long we keep it

While your account is active, we keep your data so the app works on all your devices.
When you delete your account, sign-in ends on every device (an open session stops working within 15 minutes) and your public menu goes offline. Thirty days later all of your outlet's data — records, customers, staff logins and uploaded photos — is erased permanently. Copies in our backups are overwritten within a further 14 days. The copy on your device is removed when you delete the account from that device.
Sign-in codes are deleted within a day of expiring; old sessions within a week.
Analytics are kept by Google Analytics for up to 14 months.

Indian tax law may require your business to keep its invoices for several years. Download the reports you need from RestoBill before deleting your account.

7. Your rights

Under India's Digital Personal Data Protection Act, 2023 and other applicable laws you can:

Access and correct your data — most of it you can see and edit in the app.
Delete your account and data — see how to delete your account.
Withdraw consent — by deleting your account or contacting us.
Raise a grievance with us, and if unresolved, with the Data Protection Board of India.
Nominate someone to exercise these rights on your behalf.

We reply to requests within 30 days.

8. Children

RestoBill is a tool for businesses and is meant for people aged 18 and over. We don't knowingly collect data from children.

9. Changes to this policy

When we change this policy we update the date at the top. If a change is significant, we will also tell you in the app before it takes effect.

10. Contact and grievance officer

Grievance Officer, Code Implants Software Technologies Pvt Ltd
Pune, Maharashtra, India
Email: codeimplants@gmail.com
Phone: +91 98509 29690