1. Scope
This policy covers the bringmymeal.com website, the BringMyMeal app guests use to order from their table (mobile app and the order.bringmymeal.com web version) and the BringMyMeal Staff app used by restaurant teams. The service is provided by Biz4Cloud Yazılım Limited Şirketi ("Biz4Cloud", "we").
BringMyMeal has no user accounts: guests order without giving their name, phone number or e-mail address. We use no advertising, analytics or tracking tools. Restaurants may act as separate data controllers for their own processing.
2. Data we process
2.1 Website
- Restaurant application: restaurant name, contact person’s name, phone, e-mail, city and district, number of branches and tables, your optional note.
- Contact form: name, e-mail, subject and message.
- The language the form was sent in and your IP address (to prevent abuse), and the server’s technical logs.
2.2 BringMyMeal (guest app)
- Anonymous guest ID: a random number created on your device. It groups your orders at a table and is not linked to your name or device.
- Table and restaurant: the table and branch of the QR code you scanned.
- Orders: items, options, quantities, your order notes, order time and status; waiter calls and bill requests.
- Session key: a temporary key that validates the table session.
- Notification token: if you allow notifications, your device’s notification token, to tell you the order status.
- Camera: used only to scan the QR code; no image is stored or sent.
We do not collect your location, contacts, photos or advertising ID.
2.3 BringMyMeal Staff (staff app)
- Staff details set up by the restaurant in its management panel: name, role (waiter, kitchen, cashier, manager), branch and sign-in PIN.
- A random device ID created on the device (to limit wrong PIN attempts).
- Actions performed: the staff member who approved, prepared, served or took payment for an order.
3. How we use data
| Data | Purpose | Legal basis (KVKK art. 5) |
|---|---|---|
| Orders, guest ID, table | Send the order to the restaurant and show you its status | Performance of a contract |
| Session key, device ID, IP and technical logs | Service security, abuse prevention | Legitimate interest; legal obligation |
| Notification token | Order status notifications | Explicit consent (notification permission; you can withdraw it at any time) |
| Application and contact forms | Review your application and reply to you | Entering into a contract; legitimate interest |
| Staff details and action records | Let the restaurant manage orders and bills | Performance of a contract; legitimate interest |
We do not sell your data or use it for advertising or profiling.
4. Who we share data with
- The restaurant you order from: sees your orders, your table and your requests.
- Infrastructure providers: server hosting (Scaleway, France / European Union), the e-mail service that delivers notification e-mails and, if you allow notifications, Google Firebase Cloud Messaging.
- Authorities: only where the law requires it.
Some providers are located outside Türkiye, so data may be transferred abroad. Such transfers follow the procedures of article 9 of the Turkish Personal Data Protection Law (KVKK); details are in the KVKK privacy notice.
5. Retention
- Table session: ends immediately when your bill is paid or your order is cancelled; otherwise automatically after 20 minutes of inactivity without an order, or 90 minutes with one.
- Guest ID, language and theme: only on your device; delete the app or clear your browser data to remove them.
- Order records: for as long as the restaurant’s accounting and legal obligations require; the guest ID does not identify you.
- Notification token: deleted when the session ends or when you withdraw permission.
- Applications and contact messages: at most 2 years.
- Technical logs: for the periods required by law.
6. Cookies and device storage
The website uses only one strictly necessary security cookie that protects the forms against abuse. We use no analytics, advertising or tracking cookies, and we serve our fonts from our own server, so your visit is not reported to third parties.
The apps use your device’s local storage instead of cookies: language and theme, the anonymous guest ID and the temporary session key.
7. Your rights
Under article 11 of the KVKK you may ask whether your data is processed, request information, ask for correction or deletion, and object. All rights and how to exercise them are listed in the KVKK privacy notice.
As there are no accounts, uninstalling the app removes the guest ID from your device. For any other request write to info@biz4cloud.com.
8. Children
BringMyMeal is not directed at children and we do not knowingly collect personal data from children. Orders are placed from a restaurant table, usually together with an adult.
9. Contact and changes
Data controller: Biz4Cloud Yazılım Limited Şirketi, Çeliktepe Mah. İsmet İnönü Cad. Yıldırımlar İş Merkezi No: 11 İç Kapı No: 501, Kağıthane / İstanbul. E-mail: info@biz4cloud.com.
We may update this policy as the service changes. The current version is always on this page; the date at the top shows the latest update.