Privacy Policy for Flysoft POS

Last updated: July 13, 2026

This Privacy Policy explains how Flysoft Systems GmbH ("Flysoft", "we", "us", or "our") collects, uses, stores, and shares information when you use the Flysoft POS application, its cashier and management features, and the related hosted, web, support, and server services (together, the "Service"). Flysoft POS is a business operations service intended for restaurants, hospitality businesses, their owners, administrators, and authorized staff.

The restaurant, store, or other organization subscribing to the Service (the "Store Operator") generally decides which staff, customer, transaction, and business information is entered into and used through Flysoft POS. For that information, the Store Operator is generally the controller and Flysoft processes the information on its behalf to provide the hosted Service. Flysoft is independently responsible for processing that we determine for purposes such as account administration, service security, support, legal compliance, and operation of the Service. If you use Flysoft POS through a Store Operator, its own privacy notice may also apply.

Flysoft POS does not sell personal data and is not designed to track users across third-party apps or websites or to provide behavioral advertising.

Information We Collect or Process

Account, Identity, and Access Information
We may process names, email addresses, user identifiers, password hashes, email verification and one-time-code records, authentication tokens, social sign-in identifiers when that option is enabled, staff roles, Store memberships, permissions, account status, and login history. We do not store your plain-text password.
Store, Staff, and Business Information
We process information configured by a Store Operator, such as business and legal names, business addresses and contact details, tax and receipt settings, operating hours, languages, currencies, store preferences, licenses, staff profiles, work roles, terminal assignments, and onboarding information.
Catalog and Media Information
The Service processes menu items, categories, prices, taxes, product identifiers, ingredients, dietary or allergen information, availability, translations, modifiers, recipes or preparation information, and images or files selected by an authorized user. Optional import features may process CSV files, documents, or photographs that a user chooses to submit.
Orders, Customers, and Restaurant Operations
We process restaurant operations data such as tables, order numbers, ordered items, quantities, notes, timestamps, fulfillment status, discounts, tips, staff actions, and related audit events. Where a Store Operator enters customer details for an order, receipt, invoice, delivery, reservation, or communication, the Service may also process names, contact details, billing or delivery addresses, tax information, and customer-provided notes.
Payments, Receipts, and Financial Records
The Service processes payment method, amount, currency, tip, tax, tender, change, refund, correction, receipt and invoice details, business-day records, and accounting or reporting totals. If a Store Operator enables an external payment terminal or payment service, payment instructions and provider references may be exchanged with that service at the user's direction. Flysoft POS is not intended to store complete payment-card numbers, card security codes, or online banking credentials.
Device, Installation, and Network Information
We may process a device or installation identifier, device name, manufacturer and model, operating system, app version and build, language, terminal profile, IP address, server address, request timestamps, connection state, authentication status, and similar technical data. This information helps a Store Operator register and manage terminals and helps us operate, secure, and support the Service.
Logs, Diagnostics, and Support Information
The application and server may create technical logs containing event timestamps, feature and endpoint names, status codes, performance information, device identifiers, app state, and error details. Diagnostic logs may be uploaded to the hosted Service in the background or provided to Flysoft when support is requested. Support communications may contain contact information, messages, attachments, and information about the reported issue. We design our logging to avoid recording passwords, authentication tokens, full payment-card details, and similar secrets.
Local Application Data and Files
Flysoft POS stores authentication material in protected device storage and may store settings, cached operational data, logs, print jobs, generated documents, and other files locally so that the application can function reliably. Authorized users may initiate imports, exports, backups, restores, or file sharing. Files exported outside the application are controlled by the user and the device or destination to which they are exported.

Device Permissions and Access

Depending on the platform and features you choose, Flysoft POS may request or use:

  • Camera and photo library: to capture or select menu and catalog images. The app accesses only content selected or created for the feature.
  • Bluetooth and local network: to discover, connect to, and communicate with receipt printers and other supported equipment.
  • Location permission on older Android versions: Android may require coarse or precise location permission for Bluetooth discovery. Flysoft POS uses this permission to discover nearby Bluetooth devices and does not use it to build a location history.
  • Files and documents: to let an authorized user select imports, save exports or backups, restore data, and share generated documents.
  • Background processing: to maintain reliability and synchronize application diagnostics where supported by the device.
You can manage permissions in your device settings. Refusing an optional permission may prevent the related feature from working but does not prevent use of unrelated features.

How We Use Information and Our Legal Bases

We use information to:

  • register accounts, authenticate users and devices, manage licenses, permissions, and Store memberships;
  • provide ordering, catalog, payment-recording, receipt, reporting, management, printing, import, export, and backup features;
  • synchronize data between authorized devices and the hosted Service;
  • communicate about accounts, verification, security, Service operation, and support requests;
  • diagnose failures, monitor performance, maintain auditability, prevent misuse, and protect users and the Service;
  • improve and develop the Service using operational feedback and appropriately limited technical information; and
  • comply with legal, tax, accounting, regulatory, and contractual obligations and establish, exercise, or defend legal claims.
Where applicable, processing is based on performance of a contract, compliance with legal obligations, our or a Store Operator's legitimate interests in running and securing restaurant operations, or consent when the law requires consent. When we rely on consent, it may be withdrawn at any time without affecting earlier lawful processing.

How Information Is Shared

We may disclose information only as reasonably necessary:

  • Within the Store Operator: to authorized owners, administrators, staff, and terminals according to configured roles and business needs.
  • Hosting: to Alwyzon, which provides infrastructure used to host and operate the Service on our behalf.
  • User-directed integrations: when an authorized user enables or invokes a feature that communicates with an external device or service, such as a payment terminal, identity provider, or communication service. The external provider's own privacy terms may apply.
  • Professional and legal recipients: to auditors, insurers, legal and professional advisers, regulators, courts, law enforcement, or other authorities when required by law or reasonably necessary to protect rights, security, and the Service.
  • Business transactions: as part of a merger, financing, restructuring, acquisition, or sale of assets, subject to appropriate safeguards.
We require service providers acting on our behalf to handle information for the agreed purpose and subject to appropriate contractual and security obligations.

Data Retention, Inactive Licenses, and Deletion

We retain personal data only for as long as reasonably necessary to provide and secure the Service, maintain accounts and Store operations, handle support and disputes, and meet legal, tax, accounting, contractual, and regulatory requirements. Retention therefore varies by the type of record and the context in which it is processed. Receipts, invoices, payment records, audit history, and related business records may be retained for longer periods where law requires the Store Operator or Flysoft to keep them.

When a license becomes inactive, its hosted data may remain available for a limited operational period to support reactivation, export, dispute handling, and legal compliance. Flysoft may then delete or anonymize data under its operational retention schedule when the information is no longer required. Backup copies may remain for a limited backup lifecycle before they are overwritten or securely removed.

Local application data can generally be removed by signing out where supported, clearing app data, deleting exported files, or uninstalling the app. Copies exported to another location must be deleted from that location by the user or Store Operator.

There is currently no automated self-service deletion tool. You may request access or deletion by emailing privacy@flysoft.restaurant. We may verify your identity and involve the relevant Store Operator. We may retain or restrict information instead of deleting it where retention is required or permitted by law, including for fiscal records, security, fraud prevention, disputes, and legal claims.

Security

We use technical and organizational measures designed to protect information, including account and role-based access controls, tenant data separation, protected storage for authentication material, encrypted network transport where the hosted Service is used, backups, monitoring, and efforts to redact secrets from diagnostic logs. Store Operators are responsible for managing their authorized users, devices, passwords, local networks, exported files, and access permissions. No transmission or storage system is completely secure, and we cannot guarantee absolute security.

Your Privacy Rights

Subject to applicable law, you may have rights to request access to and a copy of your personal data; correction or deletion; restriction of or objection to processing; data portability; and withdrawal of consent. You may also have the right to lodge a complaint with your local data protection supervisory authority. If the relevant information was entered or controlled by a Store Operator, please contact that organization first. You may contact Flysoft at privacy@flysoft.restaurant, and we will respond where we are responsible or assist the Store Operator where appropriate. We may request information necessary to verify your identity and protect other users' data.

Children's Privacy

Flysoft POS is a business operations tool and is not directed to children. We do not knowingly invite children to create accounts or provide personal data through the Service. If you believe a child has provided personal data inappropriately, contact us so that we can investigate and take appropriate action.

Automated Decisions and Local App Storage

Flysoft POS does not use personal data to make solely automated decisions that produce legal or similarly significant effects about individual users. The app may use protected device storage, application preferences, local databases, and cached files for authentication, security, user and Store settings, offline or reliable operation, and the other purposes described in this Policy.

Changes to This Policy

We may update this Privacy Policy as the Service, our providers, or legal requirements change. We will update the "Last updated" date and make the revised Policy available through our website, the application, or another appropriate channel. Where required, we will provide additional notice or request consent.

Contact Us

For questions, privacy requests, or deletion requests, contact privacy@flysoft.restaurant.
Flysoft Systems GmbH
Josephsplatz 8
90403 Nürnberg
Germany