Privacy Policy

Last updated: November 1, 2026

Foody ("we", "our", or "us") operates the Foody POS iPad application, the Foody web ordering platform, and the Foody marketing website. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

1. Information We Collect

a) Restaurant Staff (POS App)

• Account information: Name, email address, phone number, and role within the restaurant.
• Usage data: Actions taken within the app such as orders created, menu changes, and print events.
• Device information: Device model, operating system version, and app version for support and compatibility purposes.

b) Restaurant Guests (Web Ordering)

• Order information: Items ordered, order type (dine-in, pickup, delivery), and table number.
• Contact information: Phone number (for OTP verification and order notifications).
• Payment information: Payment is processed securely by our third-party payment provider (PayPlus). We do not store credit card numbers on our servers.
• Push notification tokens: If you opt in, we store a push subscription to notify you when your order is ready.

c) Optional Customer Sign-in

Customers may use email and password or configured Google, Apple and Facebook sign-in methods. Social sign-in shares a provider-specific account identifier and the name, email address or profile image supplied by that provider. Apple may supply a private relay email address. A Facebook contact email alone does not grant access to another Foody account. Foody does not receive your Google, Apple or Facebook password, and does not use this sign-in permission to post on your behalf.

Where configured, provider sign-in libraries load when their choices are displayed and may communicate browser and network information to those providers under their own privacy policies. Foody uses temporary essential cookies to bind the authentication request to your browser and an HttpOnly cookie for the resulting session. Provider tokens are used for authentication and are not stored in browser storage or application logs. You can continue as a guest.

d) Documentation Support Assistant

When you use the support assistant, your question, recent conversation turns and relevant public guides are sent to Anthropic to generate a response. The Admin sends only the current product topic and language, without forwarding sign-in credentials or restaurant records. Do not include passwords, payment details or personal customer information. This feature keeps the conversation in browser-tab memory and does not persist its messages in the Foody application; our AI provider handles requests under the applicable provider agreement.

For abuse prevention, the support service uses a keyed hash of the connection IP address in expiring request counters. Questions and provider response bodies are not written to this feature’s application logs.

2. How We Use Your Information

• To provide and operate our restaurant POS and ordering services.
• To process and fulfill orders.
• To send order status updates and notifications.
• To provide customer support.
• To generate analytics and reports for restaurant owners (aggregated data).
• To improve our services and fix technical issues.

3. Data Sharing

We do not sell your personal information. We share data only with:

• Payment processors: PayPlus, to process transactions securely.
• Restaurant operators: Order and customer data is shared with the restaurant that receives your order.
• Hosting providers: AWS for secure server infrastructure.
• Optional website statistics: Google receives browser and visit data through Google Analytics only after you allow Google Analytics statistics.
• Advertising measurement: Meta receives page-view and browser data from the marketing website through the Meta Pixel, as described below.
• AI support provider: Anthropic receives support questions, recent conversation and public documentation when you use the assistant.
• Legal requirements: When required by law or to protect our rights.

4. Data Security

We use industry-standard security measures including:

• HTTPS encryption for all data in transit.
• JWT-based authentication with role-based access controls.
• Encrypted database storage.
• Regular security reviews and updates.

5. Data Retention

We retain your data for as long as necessary to provide our services. Restaurant staff accounts are retained while active. Order data is retained for business reporting purposes. You may request deletion of your account by contacting us.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Withdraw consent for push notifications at any time.

7. Cookies & Tracking

The Foody POS iPad app does not use cookies. The web ordering platform uses essential cookies for session management only.

The Foody marketing website uses the Meta (Facebook) Pixel to measure page visits and advertising performance. The Pixel can use cookies and share the page URL, browser and device information, and online identifiers with Meta. Learn more in Meta's Privacy Policy.

After our contact API confirms receipt of a demo request, the marketing website records a conversion event. Its custom parameters contain only the form language, entry language and broad acquisition categories such as Google, Bing, an AI assistant, social media or direct access. Names, email addresses, phone numbers, business names, form answers and campaign identifiers are not included in these custom parameters. Entry categories are kept in session storage for the current browser tab. The same event is made available to measurement tools through the browser data layer. If you have allowed Google Analytics statistics, it is also sent as a Google Analytics lead event.

Google Analytics is optional on the marketing website. The Google tag loads after you allow Google Analytics statistics. It can use cookies and process browser, device and online identifier information to report visits and confirmed demo requests. Our configuration disables Google advertising personalization and Google Signals, removes query strings and fragments from the page addresses we send, groups help pages into one section, and sends only the broad acquisition categories described above. Calculator entries and contact-form answers are not included in our analytics events. See how Google uses information from sites that use its services.

You can allow or decline Google Analytics statistics and change this choice through “Google Analytics preferences” in the footer. Withdrawal stops our Google measurement and clears this property’s Analytics cookies. The preference itself is kept in local storage, without a visitor identifier. This choice applies to Google Analytics; the Meta Pixel is described separately above.

8. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: support@foody-pos.co.il

Website: foody-pos.co.il