Privacy policy

Sufra (“Sufra”, “we”) is a system for cafés and restaurants at sufra.app: reservations, QR menus and ordering, pickup, delivery, payments, station screens, staff, stock, accounts and reports. This policy explains what personal data we handle, why, and the choices you have.

1. Who is responsible

For owners and staff who use Sufra, and for people who contact us or answer our ads, Sufra decides how the data is used. For guests of a café or restaurant (bookings, orders, payments, surveys), that café or restaurant is responsible for their data, and Sufra processes it on its behalf to provide the service.

2. What we collect

• Owners and staff: name, mobile number, email, password (stored encrypted), role and branch, language, and activity in the system (orders handled, payments collected, discounts and refunds).
• Staff attendance (only if the restaurant turns it on): your location when you check in or out, to confirm you are inside the branch, and an optional selfie taken at that moment. Location is not tracked at any other time.
• Guests: name, mobile number and email when you book, order or pay; your orders, bills and payments; survey answers and comments; and notes the restaurant adds to your visits.
• Delivery customers: your address and, if you choose to share it, your map location, so the driver can reach you.
• Payments: card and wallet payments are handled by Paymob — Sufra never sees or stores card numbers. For InstaPay, we keep the screenshot you upload so the staff can confirm it.
• People who contact us or answer our ads (WhatsApp, forms on TikTok, Facebook or Instagram): name, mobile number, the name, type and size of your place, and what you tell us.
• Technical data: IP address, browser and device type, kept in security logs and used to stop abuse.

3. Why we use it

• To run the service: bookings, orders, station screens, payments, receipts, delivery and reports.
• To send messages you expect: booking confirmations and reminders, “your order is ready”, delivery updates and after-visit surveys, by WhatsApp, SMS, email or push notification.
• To set up accounts, give demos and answer people who contacted us or answered our ads.
• To bill restaurants for their plan, keep the system secure, and meet legal and tax obligations.

We do not sell personal data, and we do not use guests’ data to advertise to them.

4. Who we share it with

• The café or restaurant you visit, book with or order from.
• Service providers that work for us, only for these purposes: Paymob (payments), Meta / WhatsApp and Twilio (messages and SMS), our email provider, our hosting and security providers (including Cloudflare), and OpenStreetMap (to show the map and turn a pinned location into an address).

5. Cookies

We only use cookies needed for the site to work: to keep you signed in and protect forms (session and security cookies), to remember your language, and to let guests find their own orders again on the same phone. We do not use advertising or tracking cookies on sufra.app.

6. How long we keep it

We keep data while the restaurant’s account is active and as long as needed for the purposes above. Financial records are kept as long as the law requires. When a restaurant closes its account, its data is deleted or anonymised within a reasonable time, except what we must keep by law. Leads who don’t become customers are deleted within 12 months.

7. How we protect it

Encrypted connections (HTTPS), encrypted passwords, permissions per role so each person sees only what their job needs, protected payment callbacks, and limits against abuse. Each restaurant’s data is kept separate from other restaurants’.

8. Your rights

You can ask to see, correct or delete your personal data, or to stop marketing messages, in line with the applicable law, including Egypt’s Personal Data Protection Law (No. 151 of 2020). Guests can contact the restaurant directly or write to us at [email protected] and we will pass the request on and help. We reply within 30 days.

9. Children

Sufra is a business tool and is not directed at children. We do not knowingly collect data from children under 18 except what a restaurant records for a booking made by an adult.

10. Changes

We may update this policy. The date at the top shows the latest version; important changes will be announced in the app.

11. Contact us

Email [email protected] or WhatsApp +20 150 153 3000.