Privacy policy

The short version

If you are a guest sitting at a table, we hold nothing that identifies you. There is no account, no sign-in, and no field to type your name into. Tapping the screen records that a tap happened at a table at a time, and that is all.

The only measurement on this website is Vercel Analytics, which counts page views without cookies and without identifying anyone. No Google Analytics, no advertising pixel, no session recorder, no heat maps. That is a fact about the code, not a promise about our intentions.

What we collect

From this website. Only what you type into the contact form: whether you are a venue or an advertiser, your name, your business, your email address, your phone number and your message.

From venue staff. Name, role, which section of the floor they are covering, a session token so they stay signed in, and a push subscription if they turn alerts on.

From the tablets. A device identifier, the table it sits on, battery level, whether it is online, which slides played and when, and each order tap, staff call and offer claim with its timestamp.

From guests. Nothing that identifies you.

What the tablets cannot do

They have no camera and no microphone. They do not photograph, film or record anything. The phone charger supplies power only: nothing is read from or written to a phone plugged into it.

Why we hold it

To reply to enquiries, to send an alert to the right person on the floor, to know when a tablet is offline, and to show an advertiser that their slide actually ran. Advertisers receive counts and never anything about an individual.

Who else sees it

Our actual service providers, named:

• Supabase, our database, hosted in the United States
• Vercel, which hosts this website and counts its page views. Its analytics set no cookie and store no identifier; a visit is a number, not a person
• Apple and Google, whose push services carry staff alerts. An alert contains a table number and a section name
• Google Fonts, which serves the typefaces on this site and therefore sees the IP address of anyone who loads a page

We do not sell data. We do not share it for advertising. We do not build profiles of guests, and we do not track anyone between venues or between websites.

Cookies

One: a session cookie that keeps venue staff signed in to their own tools. It is necessary for those tools to work. There are no advertising or analytics cookies on this site.

How long we keep it

• Contact form messages: 24 months after we last hear from you
• Staff records: deleted within 30 days of a venue relationship ending
• Tablet status data: 90 days
• Play and tap records: 24 months, for advertiser reporting

Your rights

You can ask us what we hold about you, correct it, delete it, get a copy, or tell us to stop contacting you. Write to the address below and we will answer within 30 days, at no cost and with no consequence for asking. If you filled in the contact form and want us to forget you, say so and the record goes.

Children

Our tablets sit on restaurant tables, so a child may well tap one. We do not knowingly collect personal information from anyone under 13, and in practice we collect none from any guest of any age. There is nothing on the tablet for a child to tell us.

Security

Our database is reachable only by our own server, never directly from a browser or a tablet, and every table is closed by default. Staff sessions use signed, HTTP-only cookies. We store no card details anywhere, because we never receive any. No system is perfect and we do not claim ours is.

Contact

Rikabi Group LLC, a Washington limited liability company
2601 15th Avenue West
Seattle, Washington 98119
legal@rikabigroup.com

Changes

If we change this policy we will post the new version with a new date. If a change is material we will email venues and advertisers at least 30 days beforehand. We will not make a material change by quietly editing this page.