Data Security

The app is built to work offline, so your restaurant data and records are stored on your device and are not sent to our servers in the current version.

• Data is stored inside the app’s own storage area, which the operating system (Android or iOS) keeps separate from other apps.
• Modern phones encrypt their contents when a screen lock (PIN or fingerprint) is turned on, which protects your records if the phone is lost.

• Every page on the website uses an encrypted connection (HTTPS).
• The website is hosted on Cloudflare, which protects it against attacks and malicious traffic.
• The website does not ask for passwords or payment details, and has no advertising trackers.

When cloud sync, backup and team sync launch, we commit to:

• Encrypting data in transit (TLS) and at rest on our servers.
• Keeping each restaurant’s data separate, so only your authorized team can see it.
• Staff permissions set by the restaurant owner, which can be removed instantly.
• Regular server backups.

We will publish more details here and in the Privacy Policy before these features are turned on.

• Only team members who need data for their work can access it, and only as much as necessary.
• We use two-step verification on the system accounts we manage.
• We keep the app and its libraries up to date to close known vulnerabilities.
• We will never ask for your password or a verification code by phone or WhatsApp.

• Turn on the screen lock on the phone used in the restaurant.
• Update the operating system and the app when updates are available.
• Only install the app from the official Google Play or App Store.
• When a staff member leaves, remove their access in the app or change the shared phone’s lock code.
• If the phone is lost, contact us right away so we can help with the next steps.

If personal data we hold is breached in a way that may affect you, we will act immediately to contain it, and we will notify you and the competent authorities as required by Jordan’s Personal Data Protection Law, explaining what happened, the steps we took and what we recommend you do.

If you find a vulnerability in the app or website, please report it to [security@myfoodshield.com] with a description of the problem and the steps to reproduce it. We will confirm receipt within 3 working days and keep you updated until it is fixed.

We will not take legal action against anyone who reports in good faith, as long as they:

• Do not access, change or delete other users’ data.
• Do not disrupt the Service or affect its performance.
• Give us reasonable time to fix the issue before disclosing it publicly.

For security questions: [security@myfoodshield.com]. For privacy questions, see our Privacy Policy.