Employee app privacy

Scope and provider

This notice covers the IQ Order employee app for Apple Watch and Wear OS and its pairing/reviewer portal. The app displays service requests, ready orders and powerbank delivery tasks and lets authorized staff claim them. It is not a payment app or an employee file system.

Provider: IQON GROUP ADVISORY LIMITED, Lordou Vyronos 61–63, 6th Floor, Office 602, 6023 Larnaca, Cyprus. Privacy and support: info@iqon-group-advisory.com.

IQON operates technical access for the IQON pilot and store-review accounts. In restaurant use, the restaurant determines employee assignments, permitted areas and operational records; IQON processes these data within the agreed software service. Contact your employer for employment-specific purposes and legal bases.

Data and purpose

We process employee/display names, internal user IDs, assigned areas, random pairing/device identifiers, device names/platforms, access proofs and expiry times. Push uses APNs tokens on Apple Watch or FCM tokens and Firebase installation IDs on Wear OS; Firebase also handles technical application/SDK/device information to operate its services. We process request IDs, table labels, displayed dishes/items, service status and named claims/timestamps. Use neutral table and task labels because custom text can contain personal data. Hosting/push providers receive network information such as IP addresses to transmit requests and protect service availability.

These data support authorization, pairing, service notifications and team coordination. They are not used by IQON for advertising, sale to data brokers or cross-company tracking. The app has no advertising or IQON usage-analytics SDK, location access, contact-book access, microphone or camera access. It does not collect health, payment-card or HR-file data. Providers may process technical operational information under their own service terms.

Processing depends on the relationship: performance of the service relationship, legitimate interests in secure operation and, where applicable, an optional permission. Employment-specific bases are determined by the restaurant. Notification permission is optional: foreground/manual refresh and claiming remain available without push permission. The app has no public self-service account creation. Operators authorize employees; store reviewers have separate limited accounts and fictional tasks.

Recipients and service providers

Authorized staff and the restaurant's management can view the relevant operational tasks and claims. Push is delivered through Apple Push Notification service or Google/Firebase Cloud Messaging and Firebase Installations. The website/API use the existing Sites/Cloudflare service; separate pilots may use the existing DomainFactory hosting. We do not guarantee EU-only processing. Applicable provider terms and transfer mechanisms govern international processing. No app data is sold or provided to advertising networks or data brokers.

Push messages contain short service hints and identifiers; payment, delivery-address and employee-file fields are not sent for this purpose. See Firebase, Apple, Cloudflare and OpenAI privacy information.

Retention, device removal and requests

Pairing codes last five minutes. Watch authorization lasts at most twelve hours and is invalidated when its parent employee access ends or is revoked. Access expiry does not itself erase all operational history.

“Gerätezugang entfernen” removes the authenticated watch's server device record, associated push token, pairing record and delivery queue, then clears local pairing/task data. If the server cannot be reached, the app reports this and final server removal must be retried or requested from the operator. Existing business order/claim records are separate and retained according to the documented business purpose and any applicable legal duties. Provider retention also depends on the service concerned. Uninstalling or device settings can remove local app data.

For access, correction, restriction, objection, consent withdrawal or erasure requests, use our data-request instructions or contact your employer. Do not send passwords, pairing secrets or identity documents. Where applicable you can request portability or complain to your supervisory authority, including the Cyprus data-protection authority.