Privacy Policy

Data we collect and how it's used

• Table and order data — the tables and areas you set up, the items you order, quantities, and any notes you add, entered by you and stored on your device to run the app.
• Payment and shift data — payment methods, amounts, and shift start/end times you record, used to calculate totals and build your own shift reports.

All of this is processed and stored locally on your device. OrderPad has no server and requires no account — none of this data is ever transmitted to Stefan Oberwalder or any third party.

Optional cloud backup

If you choose to enable backup, OrderPad can save a copy of your data to your own iCloud (iOS) or Google Drive (Android) account. This is entirely optional, off by default, and handled directly between your device and Apple's or Google's own service — Stefan Oberwalder has no access to, and never sees, anything you back up this way.

Exporting and sharing your data

OrderPad lets you export a shift report as a PDF or CSV file. Exporting is an action you take yourself, using your device's share sheet to choose the destination — for example email, Files, or a cloud storage app. Stefan Oberwalder has no visibility into, and no control over, what you choose to do with an exported file.

Data storage and retention

Tables, orders, payments, and reports are stored in the app's own data on your device for as long as you keep them there. Deleting an item in the app, or deleting the app itself, removes that data from your device. If you've enabled iCloud or Google Drive backup, that copy remains there under Apple's or Google's own retention rules until you delete it yourself.

Third-party services and diagnostics

OrderPad does not include any analytics, crash-reporting, or advertising SDK. If you have opted in to diagnostic sharing in your device's system settings, Apple or Google may share anonymized crash and usage diagnostics with Stefan Oberwalder for the sole purpose of improving app stability. That sharing is controlled entirely by your own device settings — OrderPad itself does not request, read, or otherwise access this data.

Stations and printers on your local network

OrderPad can send each order's tickets (table name, item names, quantities, notes) to a tablet station running OrderPad. A station can show tickets on its screen, print them on a network receipt printer, or both; waiter devices only talk to the station, and the printer is attached to the station. This traffic goes only between your own devices on your local network — never through the internet and never to Stefan Oberwalder. A station is protected by a random shared secret created when you pair a waiter device, but traffic on the local network is not encrypted in transit, so use a network you trust rather than public Wi-Fi. A station keeps received tickets in its own local database for up to a day after they are done; tickets are never part of a backup or export. A station also announces itself on the local network so nearby devices can find it.

Camera and vibration

On iOS, OrderPad asks for camera access only on the Pair Station screen, to read the QR code shown on a station; nothing the camera sees is stored or uploaded. On Android, scanning uses Google's code scanner from Google Play services, which needs no camera permission from the app, and the vibration permission is used only for a short tap when a ready alert arrives.

Bluetooth printers and network search

If you choose a Bluetooth printer, OrderPad asks for Bluetooth access (on Android 11 and older the system ties searching for Bluetooth devices to the location permission, which OrderPad uses for nothing else). It connects only to the printer you pick and sends it ticket data; nothing about nearby Bluetooth devices is stored or sent to anyone. “Find Printers” searches your own local network for printers by trying the standard printer port (9100) on its addresses and by listening for printers that announce themselves; the results stay on the device.

Station purchase

Hosting a station is unlocked by a one-time in-app purchase. The purchase is made and processed entirely by Apple (App Store) or Google (Google Play) under their own terms and privacy policies. Stefan Oberwalder receives no payment details, name, or contact data, and there is no account or server. The app only asks the store on your device whether the purchase exists. Before you buy, a station accepts a small number of tickets as a trial; the count is stored on the station device itself and is not sent anywhere.

Not a cash register system

OrderPad is not a point-of-sale system and does not replace a registered cash register. It records payments for your own overview only and does not meet the legal requirements placed on cash registers in most jurisdictions, such as anti-tampering rules or per-transaction recording obligations. Anyone selling commercially and subject to those requirements still needs an approved cash register system.

Your choices

You can turn iCloud or Google Drive backup on or off at any time in OrderPad's own settings. Turning it off simply means your data stays only on the device you're using — the rest of the app keeps working normally.

Children's privacy

OrderPad is not directed at children. Because the app collects no data on a server — everything stays on the device you're using, with backup entirely optional — there is no personal data of any user, including a child, for Stefan Oberwalder to hold or process.

Changes to this policy

If this policy ever changes, the update will be posted on this page with a revised "Last updated" date above.

Contact

Questions about this policy or OrderPad can be sent to info@oberwalder.net. For troubleshooting and FAQs, see the support page.