Privacy policy

This policy explains what the FiFO mobile app and web portal collect, why, who we share it with, and the control you have over it. It covers both the app and fifo.ae.

1. Who we are

FiFO is operated by FIFO Restaurant Operations LLC, a limited liability company licensed in the Sharjah Media City (Shams) Free Zone, United Arab Emirates. In this policy “we”, “us” and “FiFO” mean that company.

Where a restaurant subscribes to FiFO and its staff use the app, the restaurant is the controller of the operational data its team enters, and we act as the processor on that restaurant’s instructions. For account and billing information we are the controller.

2. What we collect

Account information

• Name, email address and phone number
• Your role (admin, manager, person-in-charge, central kitchen or staff) and the branches you are assigned to
• Restaurant or company name and billing contact
• An encrypted password, or the credential used by your sign-in provider

Operational data you enter

• Purchases, supplier orders, prices and delivery confirmations
• Wastage entries, reasons and quantities
• Inventory counts and stock levels
• Daily revenue and order counts
• Petty cash top-ups, expenses and approvals
• Checklist completions, temperature readings and sign-offs, including who completed them and when
• Recipes, ingredients, costs and menu information entered in the web portal

Technical information

• Device type, operating system and app version
• Log data such as sign-in times, actions taken in the app and error reports
• A push notification token, if you allow notifications
• Approximate location derived from your IP address, used for security and nothing else

We do not collect precise GPS location, we do not read your contacts, and we do not use advertising identifiers or sell data to advertisers.

3. Why we use it

• To provide the service: showing your branches’ numbers, sending supplier orders, producing reports
• To authenticate you and apply the access limits your administrator has set
• To send operational notifications, such as a missed checklist or a petty cash approval request
• To answer questions you ask the in-app assistant about your own data
• To bill your subscription and keep accounting records
• To diagnose faults, improve reliability and protect against misuse
• To comply with UAE legal and tax obligations

We do not use your operational data to train third-party AI models. The in-app assistant answers questions about your data for you alone.

4. Who we share it with

We do not sell your data, and we never share it with another restaurant. We share it only with the companies that help us run FiFO, each doing one job on our instructions:

• Supabase — the database and hosting your account runs on
• Anthropic — powers the in-app assistant. Your question and the figures needed to answer it are sent when you ask something; see section 5 below
• Stripe — takes your subscription payment. Stripe handles your card details directly; FiFO never receives or stores your card number
• Resend — sends purchase orders to your suppliers and system emails to you
• Firebase Cloud Messaging — delivers push notifications to your device
• Apple and Google — the app stores you download FiFO from, which tell us anonymous install and crash information
• Vercel — hosts fifo.ae, this page included

Within your own organisation, data is visible according to the role and branch limits your administrator sets. A person-in-charge sees only their branch; a manager sees only the branches assigned to them.

We may also disclose data where required by a UAE court, regulator or law.

5. The AI assistant

When you ask the in-app assistant a question, the question and the figures from your own account needed to answer it are sent to Anthropic, which generates the answer and returns it. Nothing from another restaurant is ever included.

• Your questions and the answers are stored in your account, so you can see your history and so we can count them against your plan’s monthly allowance.
• They are not used to train AI models — not ours, not anyone else’s.
• They are kept for 12 months, then deleted automatically. You can clear your history sooner in the app.
• Deleting your account deletes them with it.

6. Who signed up, and for whom

FiFO is bought by the person who signs up. By creating an account you confirm you are acting for your restaurant business and that you may enter its data and invite its staff. That makes your business the controller of the operational data in the account, and makes you responsible for telling the people you invite that their use of FiFO is recorded.

If you later leave that business, the account stays with the business, not with you.

7. Cookies and analytics

The FiFO app uses no advertising cookies or trackers.

On this website we use Google Analytics, and may later use the Meta and TikTok advertising pixels, purely to see which adverts bring restaurants to us. These are loaded only after you agree to the notice shown on your first visit, and you can decline with no loss of function. If you decline, nothing is loaded. We do not track anything you type into the demo form with these tools.

FiFO itself uses a small amount of browser storage to remember your choice about this notice. That is not tracking and cannot identify you.

8. Where it is stored

Our providers may store and process data on servers outside the United Arab Emirates. Where that happens we require contractual protections at least equivalent to those required by UAE law before the transfer takes place.

9. How long we keep it

• Trial accounts that never subscribe are kept for 90 days after the trial ends, so you can come back and pick up where you left off, and are then deleted automatically.
• Operational data is kept for as long as your subscription is active, and for 90 days after it ends so you can export it.
• Account data is deleted within 90 days of your subscription ending.
• Invoices and accounting records are kept for the period UAE law requires, currently five years.
• Assistant questions and answers are kept for 12 months.
• Backups roll off on their own schedule, within 30 days.

10. Security

Data is encrypted in transit. Access is restricted by role and branch, and our own staff access is limited to what is needed to support you. No system is perfectly secure, but if a breach affects your data we will tell you and the relevant authority without undue delay.

11. Your rights

Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data you may ask us to:

• give you a copy of the personal data we hold about you
• correct anything inaccurate
• delete your data, where we are not required to keep it
• restrict or object to a particular use
• transfer your data to another provider

If you use FiFO through your employer, send the request to them first — they control that data, and we will help them answer it. Otherwise email partnerfifo@gmail.com and we will respond within 30 days.

12. Deleting your account

You can delete your account yourself in the app, under Settings → Account → Delete account, or ask us to do it by emailing partnerfifo@gmail.com from your registered address. We will confirm within 30 days. Where your employer holds the subscription, we will tell them before removing an account from their organisation.

Our account deletion page lists exactly what is removed, what we must keep for tax purposes, and how long each step takes.

13. Children

FiFO is a workplace tool and is not directed at anyone under 18. We do not knowingly collect data from children.

14. Changes

If we change this policy we will update the date above and, for anything significant, notify you in the app or by email before it takes effect.

15. Governing law

This policy and any dispute about it are governed by the laws of the United Arab Emirates as applied in the Emirate of Sharjah, and the courts of Sharjah have jurisdiction. This matches the governing law in our terms of service.

16. Contact

Questions, requests or complaints: partnerfifo@gmail.com or +971 52 756 5505. You also have the right to complain to the UAE Data Office.