Privacy Policy

Who we are

Muznly makes point-of-sale software for restaurants and cafés: a till app for Windows and Android tablets (iPad coming soon), a web back office and a driver app. We are based in Dubai, United Arab Emirates.

This policy explains how we handle personal data when you visit muznly.com, apply to our Founding Restaurant programme, or use Muznly. “We”, “us” and “our” mean Muznly. “You” means the person or business we are dealing with.

Questions about privacy? Email us at hello@muznly.com.

What we collect

On our website. We don't use cookies, analytics, tracking or advertising tools. Our fonts are hosted on our own site, so your browser doesn't contact other companies when you visit. Your browser's local storage keeps three preferences, on your own device only:

• whether you chose the light or dark theme
• whether the flashlight effect is on
• that you have already seen the intro animation

These preferences never leave your device and we can't see them. You can clear them at any time in your browser settings.

In the Founding Restaurant application form. When you apply, we collect:

• your name
• your restaurant or café's name
• your mobile (WhatsApp) number
• your email address
• your emirate
• how many branches you have
• if you choose to tell us: the point-of-sale system you use now, and one thing you wish it did
• the language of the page you applied from, and the date and time of your application
• your agreement to our Terms & Conditions and this Privacy Policy

When you use Muznly. If you create an account, we collect details about you and your team so we can run your account: names, email addresses, roles, sign-in details and 6-digit till codes. We never store passwords themselves, only a one-way scrambled version (a hash). If you choose Sign in with Google, Google shares your name and email address with us.

Your restaurant's business data. Muznly also stores the data your restaurant puts into it: menus and prices, orders, payments, sales, shifts and cash counts, stock, suppliers, tax invoices, customer details (such as names and phone numbers for delivery or house accounts) and car plate numbers at the drive-thru. Some of this is personal data about your customers and staff. For that data, your restaurant is in charge and we act on its behalf: see “Your customers' and staff's data” below.

We also keep an activity log of every change made in your account (who did what, and when), so you can check your records and we can keep the service secure.

Why we use it, and on what basis

We use personal data only for clear reasons, each with a legal basis:

• Your consent: to review your Founding Restaurant application and contact you about it by WhatsApp, phone or email. You can withdraw your consent at any time.
• Our contract with you: to create and run your account, provide the service, sign you in, send you account and security emails, and bill you.
• Legal obligations: to keep tax and accounting records, and to respond to lawful requests from authorities.
• Legitimate interests: to keep the service secure, prevent fraud and misuse, and fix problems, in ways you would reasonably expect and that don't override your rights.

We don't sell personal data. We don't use it for advertising, and we don't build advertising profiles.

Who we share it with

We share personal data only with the service providers we need to run Muznly. They act on our instructions and may use the data only to provide their service to us:

• Google Cloud: hosts our servers and database in Doha, Qatar, and our backups.
• Postmark: delivers our emails.
• Google: only if you choose Sign in with Google.

If we contact you on WhatsApp, WhatsApp's own terms and privacy policy also apply to that conversation.

We may share data with courts, regulators or other authorities when the law requires it.

We never sell personal data or share it with advertisers.

Where your data is stored

Muznly's data is stored on Google Cloud in Doha, Qatar (region me-central1). Backups are kept outside the Gulf region, so your data can be recovered even if something goes wrong in the region.

This means personal data is transferred outside the UAE. We do this only as UAE law allows, and we use providers that protect the data to an appropriate standard.

How long we keep it

• Founding Restaurant applications: if your application is accepted, we keep it with your account. If not, we delete it within 12 months, or sooner if you ask.
• Account data and your restaurant's data: for as long as your account is active. After you cancel, we keep it for a limited time so you can still download it, then we delete it.
• Records the law requires us to keep, such as tax and billing records: for as long as the law requires.
• Website preferences: on your own device, until you clear them.

Deleted data may remain in our backups for a limited time until those backups are replaced.

How we protect it

• Each company's data is kept apart in our database (row-level security), so one business can't see another's.
• We never store passwords, only a one-way hash (argon2id).
• You can protect your account with two-step sign-in, passkeys or Sign in with Google.
• Every change in your account is written to an activity log by the database itself.
• Our support team can see your business data only if you grant access, for between 1 and 168 hours. Access is read-only unless you allow more, every action is logged under the support person's name, and you can revoke access at any time.

No system is perfectly secure, but we work hard to protect your data. If a breach affects your personal data, we will tell you and the authorities as the law requires.

Your rights

Under the UAE's personal data law (Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data), you have the right to:

• access: get a copy of the personal data we hold about you
• correction: ask us to fix data that is wrong or incomplete
• deletion: ask us to delete your data
• restriction: ask us to limit how we use your data
• objection: object to how we use your data
• portability: get your data in a format you can take elsewhere
• withdraw consent: where we rely on your consent, withdraw it at any time (this doesn't affect what we did before)

To use any of these rights, email hello@muznly.com. We may need to confirm who you are first, and we will reply within the time the law requires. Some rights have limits: for example, we can't delete records the law requires us to keep.

Restaurants can also download all their data at any time from the back office, as spreadsheets (CSV files in a ZIP).

If you're not happy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the UAE Data Office.

Your customers' and staff's data

When your restaurant uses Muznly, it decides what personal data about its customers and staff goes into the system, and why. For that data, your restaurant is the controller and Muznly is the processor: we process it only on your behalf, to provide the service, following your instructions.

This means your restaurant is responsible for having a lawful basis to collect that data, telling your customers and staff how you use it, and answering their requests. If one of your customers or staff contacts us about their data, we will refer them to you and help you respond where we can.

Children

Muznly and this website are for businesses. They are not meant for anyone under 18, and we don't knowingly collect personal data from people under 18. If you think we have, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top. If the changes are important, we will also tell you by email if you have an account or an application with us.

Contact

Muznly, Dubai, United Arab Emirates. Email: hello@muznly.com.