viv9 Tablet — Privacy Policy
What viv9 is
viv9 is restaurant point‑of‑sale software that a restaurant installs and runs on a computer inside the restaurant. This app connects a tablet or terminal to that computer over the restaurant's own Wi‑Fi network, so staff can use viv9 from the floor. All order, payment, menu, employee and customer data lives on the restaurant's computer, under the restaurant's control. None of it is stored on this app's servers, because this app has no servers.
What the app stores on the tablet
- The server address you enter on the setup screen (for example
192.168.1.20:3275), so the app can reconnect next time without asking. - A sign‑in cookie issued by the restaurant's viv9 computer, so a staff member stays signed in during a shift. It identifies the session to that computer only.
- Standard web cache kept by the Android system WebView to make screens load faster.
- A diagnostics install ID, a random identifier the app makes up the first time it runs — not taken from your device, your account, or your restaurant's name — plus, if you leave diagnostics on, a short rolling log of up to 25 recent events (things like "opened," "connected," "lost connection"). See "What the app sends to Ivawo" below.
Nothing else. The app does not keep copies of orders, payments, or customer information on the tablet, and Android's automatic backup is turned off for this app (allowBackup=false), so none of the above — including the saved server address and the diagnostics install ID — is ever backed up to a Google account.
What leaves the tablet
Your restaurant's point-of-sale traffic goes to one place: the server address you entered, over your own local network. That traffic contains whatever the staff member is doing in viv9 — ringing in orders, taking payments, viewing reports — exactly as if they were using a browser on the counter PC. None of it is sent to Ivawo Global LLC, because we don't operate that server and never see that traffic.
Separately, the app itself talks to a server Ivawo operates, for two narrow purposes described next: diagnostics, and checking whether a newer version of the app is available.
What the app sends to Ivawo
What. If you leave the "Send anonymous diagnostics to Ivawo" checkbox on (Setup screen → Diagnostics — it's on by default, and always visible before you turn it off), the app periodically sends us a small JSON message: the app's name and version, a random install ID (see below), coarse device info (Android version, that it's a tablet, and the device model, trimmed to 40 characters), and a short log of up to 25 recent events — things like the app opening, connecting, losing or recovering its connection, an error, or an update prompt. Every message text is scrubbed before it's ever written down: email addresses become "[email]", long runs of digits become "[num]", and web addresses become "[url]". The diagnostics code has no access to what is shown in the point-of-sale screens themselves — it cannot read order data, customer data, or your server's address, and it never will.
Why. So we know the app is actually working out in the field, and can catch and fix problems — without ever seeing what your restaurant is ringing up.
Install ID. The first time the app runs, it generates a random ID (not derived from your device, account, or restaurant). Setup screen → Diagnostics shows this ID, and a "Show exactly what would be sent" button that displays the literal message the app would send, so what we receive and what you can see never drift apart.
Opt-out. Uncheck the box on the Diagnostics panel at any time. Once off, nothing further is captured or sent — the app checks this setting before it captures anything and again before it sends anything.
Deletion. Uninstalling the app deletes the install ID and the local event log from the tablet. To ask us to delete a report already sent, email [email protected] quoting the Install ID shown on the Diagnostics panel.
Where it goes. These messages are sent over HTTPS to a Cloudflare Worker Ivawo operates (viv9-diag.0drivebos.workers.dev) — encrypted in transit, and not shared with anyone outside Ivawo.
Update checks
Separately from diagnostics, the app periodically asks our server whether a newer version of viv9 is available (on launch, and roughly every six hours while open). That request carries only the Android platform name and the app's numeric version code — no install ID, no device identifier of any kind, and it isn't tied to anything else the app sends. If a newer version exists, or if we have a short notice to show, you'll see a one-time dialog on screen.
Permissions
The app requests internet/network access (the only device permission), and uses it solely to reach the server address you entered. It does not request the camera, microphone, location, contacts, storage, or any other permission.
Network security
Traffic between the tablet and the restaurant's computer travels over the restaurant's local Wi‑Fi using plain HTTP. This is the standard arrangement for a point‑of‑sale system running inside one building on a private network that the restaurant controls. It is not intended for use across the public internet.
Children
The app is a business tool for restaurant staff and is not directed at children under 13.
Your control
Uninstalling the app removes the saved server address, the sign‑in cookie, the cache, and the diagnostics install ID and event log. Your restaurant's data is unaffected, because it was never on the tablet. You can turn diagnostics off at any time from the Setup screen without uninstalling, and you can ask us to delete a report already sent — see "What the app sends to Ivawo" above.
Changes
If this policy changes, the new version will be published at this address with a new effective date.