Privacy notice

Who is responsible

For shop accounts (owners and staff), Ranna (see the Terms) is the data controller.

For customers’ orders, the shop is the data controller and Ranna processes the data on the shop’s behalf, only to run the service.

What we collect

Customers: the name or nickname you enter, your order, its time and number, the table if you scanned a table code, and, only if you choose to give it, a phone number. If you allow notifications, your browser gives us a push address for that order.

Shop owners and staff: email, password (stored only as a secure hash by our authentication provider), shop details, menu, staff invitations, invoices, payments and uploaded receipts.

We do not collect national ID numbers, payment card numbers (card payments for subscriptions happen on the payment provider’s page), location, or any sensitive data.

Why, and on what basis

To take and show orders and to tell you when your order is ready (necessary to perform the order you place); to run accounts and billing (performance of the subscription contract and legal obligations); to keep the service secure, for example by limiting repeated sign-in or order attempts (legitimate interest).

Your phone number and your notification permission rest on your consent. They are optional, and you can withdraw consent at any time by clearing the phone number from your order next time, blocking notifications in your browser, or contacting the shop or us.

We do not sell data, use it for advertising, or profile customers.

Declaration to the authority

The processing described here is declared to the National Authority for the Protection of Personal Data (ANPDP) under Law 18-07: [ANPDP receipt or authorisation reference]. The authority’s site is anpdp.dz.

Hosting and transfers outside Algeria

The service is hosted with Neon (database, authentication, file storage and live updates) and Vercel (application servers). Their servers are located outside Algeria: United States (Virginia). Payment for subscriptions is handled by Chargily Pay, or by bank or postal transfer with a proof of payment that you upload; email is sent through Resend; if a shop enables SMS or WhatsApp fallback alerts, through [messaging provider]. If you allow notifications, your browser’s push service (Google, Apple or Mozilla, depending on your device) delivers them.

Under Law 18-07, a transfer of personal data abroad requires the authorisation of the ANPDP and an adequate level of protection in the receiving country. [Authorisation reference]. Each provider processes data only to deliver its part of the service and under contractual confidentiality and security commitments.

How long we keep it

Data is kept no longer than needed for its purpose. Customer phone numbers are erased automatically after the period the shop sets (30 days by default, at most one year). Push addresses are deleted a day after the order is closed. Orders are kept for the shop’s history and accounting.

Account data is kept while the account is active. Invoices and accounting records are kept for the period the law requires ([10 years] under the Commercial Code, to be confirmed by your accountant).

Your rights

Under Law 18-07 you have the right to be informed, to access your data, to have it corrected, and to object to its processing for legitimate reasons. Contact the shop you ordered from, or us at [privacy contact email]; we answer within one month.

To delete your data: shop owners can close their account from Settings, which deletes the shop and its data except the invoices the law requires us to keep. Customers can erase their name, phone and notes from a finished order with the “Erase my details” button on the order page.

If you are not satisfied, you may complain to the ANPDP (anpdp.dz).

Security and breaches

Data is encrypted in transit, each shop’s data is isolated from every other shop’s, staff see only orders, order links use long random codes, and sign-in and ordering are rate-limited. No system is perfectly secure: we will notify the authority and the people concerned of a breach within the period the law sets.

Children

The service is not aimed at children. Where a minor orders, the consent of a parent or legal representative is required for the optional data (phone number, notifications).

Cookies and local storage

We use only what the service needs: a sign-in cookie for shop owners and staff, a language preference, and storage on the customer’s own device that remembers their ticket and recent orders. No advertising or tracking cookies, no analytics. The Cookie policy lists each item.