Last updated: May 19, 2026
Effective date: May 19, 2026
This Privacy Policy describes how MR Rest (“the App”, “we”, “us”, or “our”) collects, uses, stores, and shares information when you use our mobile application for restaurant ordering (menu browsing, cart, checkout, order tracking, dine-in table QR scanning, and related features).
By using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.
The App is operated on behalf of the restaurant business that uses it. Technical development is provided by Moharam Radwan Software & Information Systems (moharamradwan.com).
For privacy-related requests, contact:
Email: [INSERT_CONTACT_EMAIL]
Website: [INSERT_RESTAURANT_WEBSITE_OR_SUPPORT_URL]
Data
When collected
Purpose
Name
Sign-in (Google / Apple) or profile update
Account identification, order fulfillment
Email address
Sign-in (Google / Apple)
Account identification, communication
Profile photo
Sign-in (Google / Apple), if shared by the provider
Display in your account
Phone number
Checkout / account
Order contact, delivery coordination
Delivery address / area
Checkout (delivery orders)
Shipping calculation and delivery
Order details
Placing an order
Preparing and fulfilling your order (items, quantities, notes, order type)
Table number / QR data
Dine-in flow
Associating your order with a table
Discount codes
Checkout
Applying promotions
Search queries
Using catalog search
Improving search and restaurant analytics
Data
How
Purpose
Device location (approximate GPS coordinates)
When you allow location permission during delivery checkout
Detecting emirate/area and calculating shipping
Device identifiers & push token (FCM)
On sign-in and when notifications are enabled
Sending order status push notifications
Authentication token
After login
Keeping you signed in and securing API requests
App language preference
When you change language
Displaying content in Arabic or English
Usage / visitor data
Background API calls
Restaurant analytics (e.g. visits, activity)
Technical logs
Server and app errors (if enabled)
Security, debugging, and service reliability
Note: We do not continuously track your location in the background. Location is requested only when needed for delivery shipping calculations.
The App may request camera access only to scan a table QR code for dine-in orders. Camera images are processed directly on your device to read the QR value; we do not store photos from the camera unless required to complete your order (e.g., sending the table identifier to the kitchen).
Payments are processed securely through Stripe via a checkout interface opened inside the App (WebView). We do not store your full card number on our servers. Stripe processes payment data according to Stripe’s Privacy Policy. We may receive payment status, transaction references, and order-linked billing metadata from our backend.
We use collected information to:
Create and manage your account
Process orders (delivery, pickup, dine-in)
Calculate shipping fees based on your area
Send order updates and notifications
Provide customer support
Improve the App, menu selection, and restaurant operations
Prevent fraud and enforce our terms
Comply with legal obligations
Depending on your jurisdiction, we rely on the following legal foundations:
Performance of a contract — to fulfill and deliver your orders
Consent — for optional device permissions (location, notifications, camera)
Legitimate interests — to maintain security, analyze app performance, and improve our services
Legal obligation — when required to comply with local laws and tax regulations
You may withdraw consent for optional permissions at any time through your device settings, though some app features may stop functioning as a result.
We use trusted third parties that process data on our behalf to ensure a seamless experience:
Service
Role
Privacy information
Google Sign-In
Authentication
Sign in with Apple
Authentication
Firebase (Google)
Push notifications (FCM)
Stripe
Payment processing
Our backend API
Orders, catalog, account data
Hosted servers operated for the restaurant (see Section 1)
We do not sell your personal data.
We only share data with:
Restaurant staff and systems — to prepare, package, and deliver your orders.
Service providers — hosting, payment, and messaging platforms operating under strict confidentiality obligations.
Authorities — only when explicitly required by applicable law.
We retain personal data only as long as needed for business and legal purposes:
Account data: Maintained while your account is active and for a reasonable period following a deletion request.
Order records: Retained as required for accounting, auditing, tax purposes, and dispute resolution.
Device tokens: Automatically stored until you log out or clear the app data.
We implement appropriate technical and organizational safeguards (including HTTPS encryption, strict access controls, and secure authentication tokens) to protect your data. However, please note that no method of transmission over the internet or electronic storage is 100% secure.
Your data may be processed on servers located outside your country of residence (including cloud infrastructure utilized by Firebase, Stripe, or our backend). Where required, appropriate safeguards are applied to ensure your data remains protected.
Subject to your local regulations (including UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection where applicable), you may have the right to:
Access a copy of the personal data we hold about you
Correct inaccurate or incomplete data
Request data deletion (subject to legal or tax retention rules)
Object to or restrict certain types of data processing
Withdraw consent for optional processing features
Lodge a complaint with your local data protection authority
To exercise any of these rights, please reach out to us using the contact channels listed in Section 1.
The App is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately so we can remove it.
We may update this Privacy Policy from time to time to reflect changes in our practices or regulatory requirements. We will post the updated version along with a revised “Last updated” date at the top of this page. Your continued use of the App after updates indicates your acceptance of the revised policy.
MR Rest — Privacy inquiries
Email: [INSERT_CONTACT_EMAIL]
Technical Developer: Moharam Radwan Software & Information Systems — https://moharamradwan.com