Restaurant Guardian — Privacy Policy

Last updated: September 26, 2026. This policy covers Restaurant Guardian, made by Niagara Indie Apps: the office PC app for Windows and the tablet app for Android, downloaded from niagaraindieapps.com. Restaurant Guardian is software a restaurant runs itself. The restaurant decides what it records about its staff and guests and is responsible for that information. Niagara Indie Apps does not receive it.

Everything the restaurant enters is stored in a database on its own office PC: the floor plan and menu; orders, bills and payments; employee names, roles, PIN hashes, shifts, pay rates, payroll and tip-out records; reservations and the waitlist (a guest name, party size, and optionally a phone number and notes); the device list; and an audit log of staff actions. Backups are saved on that PC too. Tablets and printers talk only to the office PC, over the restaurant's own network, encrypted. Tablets keep only what they need to work: the office PC's address and security certificate, their own device key, and orders waiting to be sent if the Wi-Fi drops. None of this is sent to Niagara Indie Apps.

Restaurant Guardian contains no advertising, no analytics, and no crash-reporting services, and it does not track anyone.

Each office PC and each tablet gets a free 72-hour trial. To run it, the app stores the time it was first opened, plus a random ID it creates when installed, in the device's secure storage (Windows Credential Manager or Android Keystore). That ID is not a hardware, advertising, or Windows product ID. Nothing is sent to us during the trial.

The license is activated on the office PC only. When you activate it, and when the office PC re-checks it (about every 12 hours while online), the office PC sends the following to our license server at niagaraindieapps.com: • your license key • this app's ID • the random device ID described above • the platform (Windows) and the app version Our server stores a one-way hash of that device ID, the platform, the app version, and when the device was activated and last checked. It also records the IP address of each license request in a license activity log. We use this only to verify your license, enforce its limit of 2 office PCs, and prevent license abuse. Tablets never contact our license server: they receive the office PC's signed license over your restaurant network and check its signature themselves.

If the restaurant turns on card payments, they are processed by Stripe using the restaurant's own Stripe account, which the restaurant sets up and controls; Stripe's own privacy policy applies to them. For each card payment, the office PC sends Stripe the amount, the currency, and internal bill references. On the tablet, Stripe's Tap to Pay software reads the card or phone directly and sends the card data to Stripe; it never passes through Restaurant Guardian. Restaurant Guardian keeps only what a card receipt must show — card brand, last 4 digits, account type, application name and ID, and authorization code — never the card number, expiry date, or security code. If a guest asks for an emailed receipt, their email address is sent to Stripe, which sends the receipt. The restaurant's Stripe key is stored in a file on the office PC, not in the restaurant database or its backups.

The tablet app uses network access to reach the office PC. Stripe's Tap to Pay software, which is built into the app, also declares NFC (to read cards), location, phone state and Bluetooth (for Stripe card readers); Stripe uses device information for its security and fraud checks when a payment is taken. The app itself only asks for location permission, the first time a card payment is taken; everything else in the app works without it.

Licenses are bought on niagaraindieapps.com. The information you give at checkout (such as your email address) is covered by the site-wide Privacy Policy at niagaraindieapps.com/privacy. Card payments for licenses are processed by Stripe, and we never receive your full card number.

The restaurant's data lives on its office PC: uninstalling the app and deleting its data folder and backups removes it. Uninstalling the tablet app deletes what the tablet stored. To free an office PC from your license, use Settings → License → Move license off this PC, or niagaraindieapps.com/license/manage. To ask us to delete the license records we hold, contact us as described below.

Restaurant Guardian is business software for restaurants and is not directed at children.

If a future version of Restaurant Guardian changes how it handles data, we will update this page before that version is released.

For privacy questions, use the Contact page at niagaraindieapps.com/contact and select Restaurant Guardian.