Guest POS apps privacy
Last updated: 21 October 2026. This notice covers the apps Guest POS (point of sale) and Guest POS Productie (kitchen, bar and expo screen) for Android, iPhone, iPad and Windows.
Who we are
The apps are published by HorecaGPT B.V., Molenveldlaan 146, 6523 RN Nijmegen, the Netherlands, Chamber of Commerce 97500275, hello@horecagpt.com. The restaurant that uses Guest POS is the controller of the data of its staff and guests; we process it on its behalf under a data processing agreement. Our general privacy statement is at horecagpt.com/privacy.
What the apps do
The apps open the restaurant’s Guest POS till or production screen and add what a browser cannot: the screen stays on, card payments go to the payment app, tickets go to the printer, and staff can sign in with their fingerprint or Face ID. The apps only work on a device the restaurant has paired in its Backoffice.
Which data
Orders, receipts, payments and the name of the staff member who enters them; the e-mail address of a guest who wants the receipt by e-mail; a random device code to recognise the paired device; technical logs (time, app version, errors). We do not collect location, contacts, photos or advertising IDs, do not track you across other apps and show no ads. We do not sell data.
Camera
Only to scan QR codes and barcodes, such as gift cards and pairing codes. The image is read on the device and is neither stored nor sent; only the scanned code goes to the till.
Fingerprint and Face ID
If you choose so, the app keeps your PIN encrypted on the device (Android Keystore or iOS Keychain), behind the device’s fingerprint or Face ID. The operating system performs the check; the app and Guest POS never see your fingerprint or face. It is removed when the enrolled fingerprints or faces change, or when the app is removed.
Card payments
Card payments run through the payment provider’s app (EMS/Fiserv, Rubean Terminal App). Guest POS only sends the amount and receives the outcome (approved or not, with a reference), never the full card number. When the payment app returns without an outcome, the app sends a diagnosis without card data to Guest POS, so the restaurant can check it.
Local network and notifications
The POS app can send tickets straight to printers in the restaurant’s network and then shows a notification that the reserve printer bridge is running. Nothing leaves the network except its status to Guest POS.
Retention and deletion
We keep POS data while the restaurant is a customer, and receipts and payments for seven years because of the Dutch tax retention duty. Staff accounts are created and removed by the restaurant in its Backoffice; you can also ask hello@horecagpt.com for access, correction or deletion. You may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).