Privacy Policy

1. Who this covers and who we are

This Privacy Policy explains how Summit Systems LLC (“Summit Systems,” “we”), a Nevada limited liability company based in Reno, Nevada, doing business as Kitchen on Hand, handles personal information in connection with Kitchen on Hand: the app at app.kitchenonhand.com, our Android and iPhone apps, the website at kitchenonhand.com, the order pages we host for suppliers, our phone line, and the emails, app notifications and text messages we send (together, the “Service”).

It applies to visitors to the website, to people who create accounts, to Team Members who are invited to a restaurant’s account or given a login by their restaurant, and to suppliers and their staff who receive an order through the Service. It doesn’t cover the practices of your restaurant, your suppliers or other websites we link to. In this Policy, “Owner,” “Team Member” and “Restaurant Data” have the meanings given in the Terms of Service.

Two roles. For the information a restaurant enters about its business, its staff and its suppliers, the restaurant decides what goes in and who on the team sees it; we process that information on the restaurant’s behalf, as its service provider, under the data processing terms in the Terms of Service. For your account details and for how the website and app are used, we decide how the information is handled. Either way, this Policy tells you what happens.

No sale, no ads. We don’t sell personal information, we don’t share it for cross-context behavioral advertising, and we don’t use it for advertising at all.

2. What we collect

Information you give us

• Account details — email address, username, password (stored only as a one-way hash that we can’t read; while you finish signing up by email — up to about an hour — it is held encrypted so your account can be created when you enter the emailed code, then deleted), and the display name you choose. If your restaurant invites you or makes a login for you, it gives us your name, email address or username. If you sign in with Google, the name, email and profile picture link Google sends us (Section 7). When you create an account we record which version of the Terms you agreed to, and when. The first time you say yes to an AI feature sending what you give it to Anthropic, we record which feature, and when (Section 5). If you later turn one off under My Account, we record which one, and when, so that saying yes to another feature doesn’t turn it back on.
• Mobile number and text-alert consent — only if you turn on text alerts: your number, the exact consent wording you agreed to, when you agreed, and when you confirmed the code we texted to prove the number is yours; or a manager types your number to send you one invite text (kept on the invite for 7 days or until it’s used) (Section 8).
• Restaurant information — restaurant name, time zone, the address, phone and reply email you add for orders, and everything your team enters to run the kitchen: items, vendors and their contact details (including rep names, email addresses, phone numbers and the account numbers you save for sending them orders), prices, orders, deliveries, waste logs, inventory counts, sales totals you type in, recipes, calendar tasks, food-safety logs, daily safety checks and quiz answers, team notices, notes, and Feedback Hub posts (a complaint, praise, a shout-out, an idea or an issue, with the sender’s name, the teammate a shout-out names, and the follow-up notes and who resolved it).
• Photos — item and recipe photos, delivery-invoice photos (including a store receipt you snap when logging a purchase, which is kept as that purchase’s invoice photo), photos attached to audit answers, pictures a manager adds to a daily safety check or quiz question, photos attached to Feedback Hub posts, and photos attached to bug reports. Photos are re-saved in the app before they’re uploaded, which removes hidden details such as the location, time and device the picture was taken with. A photo or PDF (of an invoice or order guide, for example) used to add items is read and then discarded; it isn’t stored, and neither is a list you paste in to be read, or a screenshot of an order read on Open Orders.
• Payment information — when you subscribe, your card details are entered directly with Stripe, our payment processor. We receive only your billing status and subscription details (plan, number of locations, renewal date) — never your card number.
• Messages to us — support emails, bug reports and suggestions (with the page you were on and your browser type and screen size, so we can reproduce a problem), and questions you type into the in-app help assistant.
• Calls to our phone line — when you call our phone line ((775) 305-7624), the call rings our founders’ phones through Twilio. If nobody picks up, you can leave a voicemail. The voicemail is recorded and kept by Twilio, and an email with your phone number and a link to the recording goes to our founders. To limit repeat calls, we count calls by the calling number, and delete those counts within 2 days.

Information from suppliers

When a restaurant sends a supplier an order through the Service, the supplier’s staff can answer through a private order page with no account: confirm the order, mark items short or out, suggest a substitute or a different price, give a delivery date and leave a note. We store what they send with that order and show it to the restaurant (Section 4).

Information collected automatically

• App activity — the actions you take (for example marking an item as needing an order) and when, and your answer to “Are you working today?” (one yes or no a day, which decides whether a day’s checks you didn’t do count as missed). Much of this is the product: the app records who checked what and when so the restaurant can see it.
• Device and technical data — browser type, operating system, screen size, IP address (in our hosting and sign-in providers’ logs and session records), and error reports if something goes wrong in the app (Section 6).
• Sign-in protection — to slow down password guessing we count failed sign-ins against two one-way codes, one made from the account’s email address (or the name typed, if it matches no account) and one from the IP address — never the address itself — and delete the counts after a day.
• Kitchen tablet — only if a restaurant’s owner sets a device up as its kitchen tablet: the name they give it, who set it up and when, and when it last signed someone in (the tablet holds a code that identifies it, which we keep only as a one-way hash). For each team member given a tablet PIN: a one-way code made from the PIN (a hash) — never the PIN itself — and who made it and when. A log of who signed in with a PIN, on which tablet, when, and when that sign-in ended (Section 10). Wrong PINs are counted against the tablet and the restaurant, not a person, and the counts are deleted within two days; if PIN sign-in is paused after too many, we keep when it was paused and who turned it back on.
• Sign-ups that aren’t finished — if you start creating an account but don’t enter the emailed code, we keep the email address and restaurant name you typed for 30 days so we can see where sign-up goes wrong. We don’t email you or use it for anything else.
• Website analytics — page views and referring sites on kitchenonhand.com, counted without cookies (Section 6).
• Push notification tokens — if you turn on notifications on a device, we keep a token that lets us send them to it, and the day it was set up. In a browser, the browser issues the token. In our Android and iPhone apps, Google’s Firebase Cloud Messaging issues it, and we also keep which kind of phone it is and when the app last checked in. To set it up, the Firebase software in the app sends Google details such as an ID for that install of the app, the app’s version and the phone’s model and system version. The app doesn’t contact Firebase until you turn notifications on, and has no Firebase analytics (Section 4).

Voice entry

On a browser that offers it, a microphone button on a food-safety reading lets you say a number instead of typing it. Your phone’s or browser’s own speech service (for example Apple’s or Google’s) turns what you say into text. We don’t receive or store the audio, and it doesn’t go to our servers or our AI services. Only the number it fills in is used, and nothing is recorded until you tap Record.

Information we don’t collect

We don’t collect precise location, contacts, biometrics, government ID numbers, dates of birth, or anything about your customers’ identities. The Service is not designed to hold health, allergen or dietary information about any person, and we ask that you not enter it.

3. Why we use it

We use personal information to:

• Provide the Service: sign you in, show your restaurant its data, run the arithmetic, send the orders, emails, notifications and texts you or your restaurant ask for.
• Bill for paid plans and keep the records tax and accounting law requires.
• Answer support requests and bug reports.
• Keep the Service secure: detect misuse, limit abuse (for example how many codes or emails can be sent), enforce permissions, investigate incidents.
• Stop the free trial from being restarted: we keep a one-way fingerprint (a hash) of the email address that started each trial, which lets us recognize that address if it is used again — it is not the address itself, though anyone who already has an address could check it against the fingerprint — and while a restaurant is on its free trial we compare its item names with other accounts’ — when it imports an item list, and once a day. Only our team sees a possible match; it is never shown to another customer.
• Fix problems: error reports tell us where the app broke.
• Understand how the Service is used, in aggregate, so we can improve it.
• Send the account and service emails described in Section 9.
• Comply with the law and protect our rights and yours.

We don’t sell personal information, we don’t use it for advertising, and we don’t use your restaurant’s data to train AI models.

4. Who can see it

Inside your restaurant

The Owner of a restaurant can see all of its data, including what each Team Member entered and each Team Member’s name and email address or username. Team Members see what their role allows, including their coworkers’ names. A Team Member’s mobile number for text alerts is never shown to anyone else on the team. Every restaurant’s data is separated from every other restaurant’s; a person can only see restaurants they have been added to.

Our team’s access

Kitchen on Hand is run by a small team. Our operators can see account details and Restaurant Data when that’s needed to give you support, fix a problem, keep the Service secure, run billing, prevent abuse (such as restarted free trials) or comply with the law — not for any other reason. An internal admin area shows them accounts, restaurants, team lists and bug reports for those purposes; its lists are not logged one by one, except that opening a restaurant’s team list (which shows login email addresses) is. Our operators’ own accounts can also read restaurants’ records directly in the database for these purposes, and those reads are not individually logged. Our team also uses AI coding tools (Anthropic’s Claude) to build and fix the Service. We give those tools the database’s structure and test restaurants rather than your records wherever we can; when a problem can only be found in a restaurant’s own records, they may process the account or restaurant data involved. They are used under Anthropic’s consumer terms — not a data-processing contract negotiated with us — with the setting that allows Anthropic to use our conversations to train its models switched off. Each time an operator uses “view as” to open a restaurant in the app (a read-only view of that restaurant), the time, the restaurant and the operator are recorded in a log we keep for 2 years. Support emails are read by our team.

Service providers

We share information with companies that help us run the Service. Each receives only what it needs, and we choose providers whose terms limit how they may use it:

We’ll update this table before a new provider starts receiving personal information, and we’ll email Owners when one is added.

Other situations

• Legal requirements — if we’re required to by law, subpoena or court order, or to protect the safety or rights of any person or of the Service.
• Business changes — if Summit Systems is acquired, merges or sells the Service, the information would transfer with it; we’d notify Owners when that happens, or as soon as we are permitted to, and this Policy would continue to apply until changed as described in Section 14.
• With your direction — for example, when you export data and send it elsewhere.
• With your suppliers, when you send them an order — an emailed or texted order includes a private link. The order, and anyone who opens the link (no account needed), shows that one order: your restaurant’s name, the address and phone you added for orders, your account number with that supplier, the name of the person who sent it, the items and quantities, your note, and prices only if you chose to share them. A sender whose sign-in email is confirmed gets a copy of an emailed order, and if your restaurant hasn’t set an order reply email, the supplier’s replies go to that sender’s sign-in email. The supplier can use it to confirm the order and send back changes and a note, which we store with the order and show to your team. The link stops working when the order is received or cancelled, when you send the order again or turn the link off, and 30 days after sending.

We do not share personal information with data brokers, advertisers or anyone else for their own marketing, and no third party collects information about your activity over time and across different websites through the Service.

5. Where AI is used

Six features send information to Anthropic, an AI provider, to work. The app says so on the screen where each one is used, and asks you once, before the first time any of them sends anything: one question that says what each feature sends and why, and nothing is sent unless you say yes. Your yes covers all six. If you choose “Not now”, nothing is sent and you can do the same job by hand. We remember your yes on your login, and you can turn any one of the six off under My Account:

• Adding items from photos, a PDF or a pasted list — when you choose to add items from photos or a PDF (of an invoice or order guide, for example) or from a list you paste in, that photo, PDF or text is sent so the items, units and prices in it can be read. What comes back is shown to you for review before anything is saved, and the photo, PDF or text isn’t kept. A spreadsheet you upload, and cells copied from a spreadsheet (two or more columns) and pasted in, are read in your browser instead and aren’t sent to Anthropic.
• Receiving invoice reader — when you attach a photo of a delivery invoice at check-in, the photo is sent together with the names, units and ordered quantities of the lines on the purchase order it belongs to, so the invoice can be matched against them. What comes back is shown to you for review before anything is changed.
• Receipt reader on Log a purchase — when you snap or upload a receipt to log a store run or another purchase that had no purchase order, the photo alone is sent so its rows can be read; nothing from your orders or your item list goes with it. What comes back is shown to you for review before anything is saved, and the photo is then kept with that purchase as its invoice photo. A store receipt can show payment details — the last digits of a card, an authorization code, the cashier’s name — so fold those out of the picture if you would rather they weren’t read.
• Order screenshot reader on Open Orders — when you choose to add an order you placed in a vendor’s own app or website, the screenshots you add are sent on their own so the order’s lines, its dates and the vendor’s order number can be read; nothing from your orders or your item list goes with them. What comes back is shown to you for review before anything is saved, and the screenshots aren’t kept as photos. A vendor’s order page can show your account number and delivery address — crop those out if you would rather they weren’t read. The same reader also reads an invoice you send in by text to our alerts number or by email to your restaurant’s invoice address. Only the photos are sent, and nothing from your orders or your item list goes with them. The invoice becomes an order in Receiving for you to check, and the first readable photo (shrunk to a smaller size) is kept with that order as its invoice photo. We accept these only from a team member’s own text-alert number or sign-in email, and only when the restaurant has turned this on.
• Help assistant — when you type a question into the in-app help, your question, the conversation so far, your restaurant’s name and your role are sent so it can answer for what your permissions allow. The conversation isn’t saved by us.
• Suggested safety checks and quiz questions — when a manager taps “Suggest 5 checks” or “Suggest 5 questions” on Daily Safety Checks → Manage, the words of the checks and quiz questions your kitchen already has (never the answers, never any reading or any person’s results), your restaurant’s name and the short description the manager typed are sent so new ones can be suggested. What comes back is shown for you to edit and save, or ignore; nothing is saved until you do.

Each runs only when you use that feature — for the invoice reader, when you attach an invoice photo; for the receipt reader, when you snap or upload a receipt; for the order screenshot reader, when you choose to add an order from a screenshot, or for invoices sent in, when you text or email one; none of them sends anything in the background. (Separately, our team’s own use of AI tools is described under Section 4.) Under Anthropic’s commercial terms, the information is used to produce the response and is not used to train its models; Anthropic may keep it for a limited time under its own policies to run and secure its service. AI output can be wrong; treat it as a suggestion to check, not a fact, and don’t rely on it for legal, safety, medical or financial decisions.

6. Cookies, analytics and tracking

• The website (kitchenonhand.com) sets no cookies and uses no browser storage. We count page views with Vercel Web Analytics, which does not use cookies, does not store IP addresses, and does not follow you across other sites. The website has no chat widget, no error tracking in your browser and no session recording.
• The app (app.kitchenonhand.com) uses only cookies it needs to work: the ones that keep you signed in, remember which restaurant you have open, protect the sign-up and Google sign-in flows, show a one-time notice about a weak password, and, for our operators only, the read-only “view as” described in Section 4. It stores some information in your browser’s local storage so the walkthrough, inventory counts and food-safety readings keep working without a connection, to keep an entry you were saving (waste, or a purchase) until the app hears it saved, to remember choices like how a list is sorted or how a spreadsheet’s columns were matched, to hand an order’s note to its print page (then deleted), and so you aren’t shown the same tip twice. In our phone apps it also keeps the phone’s push token there, once you turn notifications on, so signing out can stop that phone’s notifications.
• Error reports in the app — if something breaks in the app (including the supplier order page), a report goes to Sentry with the technical details described in Section 4. For about one page load in ten, Sentry also gets a performance report (which page, how long it took, the browser), and it counts app sessions so we can see how stable the app is. We don’t record your screen, your clicks or what you type (no “session replay”), and reports never include what you sent in a form.
• There are no advertising cookies, no third-party tracking pixels, and no cross-site tracking anywhere in the Service. Because we don’t track visitors across sites or sell or share information, there is nothing for a “Do Not Track” or Global Privacy Control signal to switch off; we treat every visitor as if it were on.

7. Signing in with Google

If you choose “Continue with Google” or “Sign up with Google”, we ask Google only for basic sign-in information (Google’s standard “email” and “profile” sign-in permissions). Google tells us your name, your email address and whether Google has verified that address, your Google account ID, and — for a Google Workspace account — your organization’s domain, and sends a link to your profile picture. We use the domain to check that Google runs the inbox for that address. We use them to sign you in, to set up and identify your account, and to show your name to your team. Your email address is then used the same way as one typed in at sign-up — for the uses in Section 3: service, security and billing emails, your billing record with our payment processor, telling our team a new account was made, and the one-free-trial check. The profile picture link is stored with your sign-in details; we don’t show it or use it for anything else.

• We don’t get your Google password.
• We don’t ask for access to your Gmail, contacts, calendar, files or anything else in your Google account.
• We don’t sell this information, use it for advertising or to train AI, or share it with anyone except the service providers listed in Section 4 (for example our hosting, email, payment and error-reporting providers, our team’s email for new sign-up notices, and our AI coding tools when we investigate a problem), your own restaurant team and suppliers in the ways that section describes (for example your name on an order you send), when the law requires it, or as part of a merger or sale of the business described there. People on our team look at it only when needed for support or security.
• Google sign-in works only with Gmail and Google Workspace addresses, where Google runs the inbox itself. For any other address, sign in with your email or username and password.
• You can add a password in My Account and sign in with that instead. You can remove Kitchen on Hand in your Google Account settings (third-party connections) at any time; Google then stops sharing your details with us unless you choose “Continue with Google” again. To delete your account and what we hold about you, delete it yourself under My Account, or email us (Section 15).

Our use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.

8. Text messages (SMS)

If you choose to turn on text alerts under Settings → Notifications → Text alerts, we’ll send you operational messages about the restaurant you work at — for example an item flagged as an emergency. We don’t send marketing texts.

An invite by text is the one text we send to a number someone else typed: a manager on a restaurant’s team can enter your mobile number to invite you. It is one message — who invited you, the restaurant, a link to join, and “Reply STOP to opt out” — and nothing follows it. Reply STOP and we text that number nothing more. The number is kept on the invite for 7 days or until it’s used, and isn’t used for anything else — no alerts, no marketing.

• You opt in yourself, in the app: you enter your own number, tick the consent box, and type back a code we text to that number to prove it’s yours. Nobody else — not your manager, not the Owner — can sign you up, and no alert is sent before you enter the code.
• Message frequency varies with your restaurant’s activity. Message and data rates may apply.
• Reply STOP to any message to opt out. STOP and replies like it (“unsubscribe”, “wrong number”, “take me off”) end your alerts at once; any other reply asking us to stop, in whatever words, ends them within 10 business days. Every reply is kept and read by our team. You can also turn text alerts off in the app. Reply HELP for help.
• We keep a record of your consent — the number, the exact wording you agreed to, and when you agreed, confirmed and stopped — for 5 years after your text alerts end, as proof of consent. The record is visible only to the server, not to anyone at your restaurant.
• If you change your number or give up your phone, turn text alerts off first (or reply STOP), so the next owner of the number doesn’t get your alerts.
• We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Your mobile number and your text-message opt-in are shared only with Twilio, the service that delivers the messages, to deliver them — and, if you text our alerts number anything other than STOP or HELP, with our email providers (Resend, Google) so a person on our team can read it.

9. Email and app notifications

• Account and service emails — sign-up and confirmation codes, invitations (sent to the address a restaurant gives us when it invites you — we don’t use that address for anything else), password resets, security notices (for example when Google sign-in is added to your account), the welcome email, free-trial and yearly-renewal reminders, billing notices, notices when a restaurant is scheduled for deletion or deleted, an automatic “we got your message” reply when you write to our support address, and important changes to the Service or these policies. These are part of having an account and can’t be turned off while the account is open.
• Notification emails — emergency alerts, urgent team alerts, urgent item requests, delivery problems, suppliers’ replies to your orders, and the Monday summary of last week’s spend, waste and food safety. You can turn each of these off under Settings → Notifications, or all of them at once. The Monday summary has a one-click unsubscribe link in every email.
• Orders to your suppliers — we email a purchase order to a supplier only when someone on your team presses Send, and only to the addresses your team saved for that supplier. It comes from our orders address in your restaurant’s name (“Your Restaurant via Kitchen on Hand”), shows your restaurant’s name, the order-contact details from Settings and the order itself (with prices only if you chose to share them), and replies go to your restaurant, not to us. A record of each order sent is kept with your order history. The email (and a texted order) carries a private link to that order for the supplier — see “With your suppliers” under Section 4.
• App notifications — only if you enable them on a device; turn them off at any time in the app (Settings → Notifications), in your browser’s settings, or, for our phone apps, in your phone’s settings.
• We don’t send marketing email. If we ever do, it will go only to people who agreed to it, and every one will have an unsubscribe link and our mailing address.

10. How long we keep it

• Restaurant Data — for as long as the restaurant exists in the Service. When a restaurant is deleted, its data is removed from the live Service on the day it is deleted, 7 days after the Owner asks, and its photos and invoice photos shortly after — at the latest by the next day’s clean-up if the first attempt fails — and copies in backups are overwritten on our database provider’s backup schedule. (A photo that was copied to another of your locations stays with that location.)
• Account details — for as long as the account exists. When you ask us to delete your account, we delete it within 30 days, except for the records listed below that we keep for the times given. A login that no longer belongs to any restaurant can be deleted automatically. What you entered for a restaurant stays with that restaurant, with your name taken off it (on a Feedback Hub post it reads “Former team member”) — except copies of orders you sent to suppliers, which keep the name and email they went out with, and food-safety records from October 20, 2026 on (readings you took, signed off or voided, and cooling batches you started or stopped), which keep your name even after your account is deleted, because they are the restaurant’s record of who checked the food. Earlier food-safety records have your name taken off, like the rest.
• Record that an account was deleted — the date and a shortened form of the address (for example m•••@gmail.com), in our operators’ log, for 2 years.
• Billing records — Stripe keeps payment records under its own policies, and we keep what tax and accounting law requires, typically seven years.
• Free-trial record — a one-way fingerprint (a hash) of the email address that started a free trial, not the address itself, and when, kept after the account is deleted, for as long as we offer free trials, so the same trial can’t be restarted. A note our team makes when two restaurants’ item lists match keeps the restaurant names, not anyone’s email address.
• Text-alert consent records — 5 years after your text alerts end (Section 8), then deleted. Replies to our alerts number — 5 years, then deleted.
• Kitchen tablet sign-ins — the log of who signed in with a PIN on which tablet, for one year from the sign-in, then deleted. A tablet’s details stay with the restaurant after the owner removes it, and a PIN until it is cleared or made again or its holder leaves the team; both go when the restaurant is deleted.
• Record of agreeing to the Terms — which versions of the Terms and this Policy a login agreed to, when and how, any arbitration opt-out, and a one-way fingerprint (a hash) of its email address: kept after the account is deleted, for 7 years after the deletion (the time a claim about the agreement could be brought, plus a margin), then deleted.
• Unfinished sign-ups — 30 days for an email sign-up that never got its code. A login made with Google that never finishes setting up a restaurant stays until you finish or ask us to delete it. Failed sign-in counts — one day.
• Error reports and technical logs — up to 90 days.
• Bug reports and suggestions, with their photos — 2 years, then deleted. Support emails — up to two years, so we can refer back if a problem recurs. That includes our team’s own email copies: notices and forwarded messages in our team’s inboxes are deleted within the same periods. Voicemails on our phone line — the recording in our Twilio account and the email about it, up to two years, like support emails. Call counts by calling number — up to 2 days.
• Our operators’ activity log (team changes with the names and email addresses involved, restaurant deletions, “view as”) — 2 years, then deleted, even after an account is deleted.
• Invitations — the email address a restaurant invited stays with that restaurant’s pending and past invitations until the restaurant deletes the invitation or the restaurant is deleted.
• Inactive restaurants — if a restaurant has had no sign-ins for 18 months and no active plan, we may delete it after emailing the Owner at least 60 days in advance.

11. How we protect it

We use reasonable technical and organizational measures to protect personal information, including encryption in transit (HTTPS everywhere) and at rest, hashed passwords, checks of new passwords against known breaches, limits on repeated sign-in attempts, row-level access rules in the database so each restaurant can only reach its own data, role-based permissions inside a restaurant, private storage with short-lived links for invoice and audit photos, pictures on safety checks and quiz questions, and Feedback Hub and bug-report photos, removal of location data from photos, automated backups, error monitoring that strips personal details, and access to production systems limited to the people who need it, with each time an operator uses “view as” to open a restaurant in the app logged.

No system is perfectly secure, and we can’t promise that information will never be accessed or disclosed without authorization. If we learn of a breach that affects your personal information, we will notify you by email at the address on your account, and notify any regulator, as the law requires — including, for Nevada residents, as required by Nevada Revised Statutes 603A.220 — without unreasonable delay.

You can help: use a strong, unique password, remove Team Members who leave, and don’t share logins.

12. Your choices and rights

Things you can do yourself

• Change your name, username, password and notification settings in the app.
• Unsubscribe from the Monday summary with the link in any of those emails.
• Turn text alerts on or off, where they are offered.
• Turn any of the six AI features off, or back on, under My Account.
• Export your restaurant’s items, vendors, purchases, waste and recipes as spreadsheets, and its food-safety records for any period you pick, up to a year at a time (Owners, and roles the Owner allows).
• Delete a restaurant (Owners).
• Delete your account (My Account). A Team Member’s account is deleted right away; an Owner’s restaurants are deleted first, and the account with the last of them. How to delete your account, and what is kept.

Things you can ask us for

Email us (Section 15) to request a copy of the personal information we hold about you, to correct it, to delete your account, or to ask a question about this Policy. We’ll respond within 45 days (we may extend that once by 45 more days if we need to, and we’ll tell you why). We may need to verify that a request comes from the account holder before acting on it — usually by replying from, or confirming with, the email address on the account. You can also have someone else make a request for you; we’ll ask for proof that you authorized them, and we may still confirm the request with you directly. We won’t treat you differently for exercising these rights. If we turn down a request, we’ll say why, and you can appeal by replying with “Appeal” in the subject line; we’ll answer the appeal within 45 days.

If you’re a Team Member

Information you enter into a restaurant’s account (checks, counts, waste logs, notes) belongs to that restaurant and is visible to its Owner. Requests to change or delete it should go to the Owner; we act on the Owner’s instructions for Restaurant Data, and we’ll pass a request we receive to the Owner.

If you’re a supplier

Your contact details and anything you send through an order page are held for the restaurant that sent you the order. Ask that restaurant to correct or delete them; we’ll help it do so.

State privacy laws

Residents of states with consumer-privacy laws (for example California, Colorado, Connecticut, Nevada, Oregon, Texas, Utah and Virginia) may have specific rights to know about, access, correct, delete or get a copy of their personal information, and to opt out of its sale, of targeted advertising and of profiling. We do not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or use it for profiling that has legal or similarly significant effects, and we don’t use or disclose sensitive personal information for anything but providing the Service. We honor the rights above for everyone, regardless of state or of whether a law applies to us. California residents: we don’t share personal information with third parties for their direct marketing.

Nevada residents

We do not sell covered information as defined in Nevada Revised Statutes 603A.300 to 603A.360. You may still send us a request directing us not to sell it, at support@kitchenonhand.com with “Nevada opt-out” in the subject line. We’ll confirm within 60 days. To review or ask us to change the covered information we hold about you, use the same address (Section 15).

Children and young workers

Kitchen on Hand is a business tool, not a service for children. Owners must be 18 or older. Team Members must be at least 14, or the minimum age to work in a restaurant where they are, if higher — restaurants often employ teenagers, and the Owner is responsible for having any permission a young worker needs. No one under 13 may use the Service. We don’t knowingly collect personal information from children under 13; if we learn that we have, we delete it. If you believe a child under 13 has an account, email us.

13. International visitors

Kitchen on Hand is offered to businesses in the United States, and personal information is processed and stored in the United States. If you visit the website or use the Service from somewhere else, your information is transferred to and handled in the United States, where privacy laws may differ from those where you live.

If you are in the European Union, the United Kingdom or another place whose law gives you specific rights over your personal information — such as the right to access, correct, delete, restrict or object to the use of it, or to receive a copy in a portable form — you can exercise them by emailing us (Section 15), and we will honor them as that law requires.

14. Changes to this Policy

We’ll update this Policy when our practices change. If a change materially reduces your rights or changes how we use information you’ve already given us, we’ll email account holders and show a notice in the app at least 30 days before it takes effect. The date and version number at the top of this page identify the version you are reading.

15. Contact

Summit Systems LLC (doing business as Kitchen on Hand), Reno, Nevada. Email support@kitchenonhand.com with “Privacy” in the subject line — it’s the address for every privacy request, including the ones above.