Privacy Policy

Last updated: 2 October 2026

Overview

This Privacy Policy explains how MY QR Menu and My QR Menu POS collect, use, store and protect information when restaurants, authorised staff and website visitors use our website, restaurant platform and Android point-of-sale application.

Scope

This policy applies to the MY QR Menu website and restaurant platform, the My QR Menu POS Android application, restaurant ordering and live-order workflows, point-of-sale and printing functions, and related support and service communications.

Information We Process

Depending on the restaurant configuration and features used, we may process:

• Restaurant and access identifiers, such as restaurant ID, staff ID, device ID, shift or access-grant identifiers and device-pairing information.
• POS and order information, such as order IDs, order type, table reference, menu items, variants, extras, quantities, taxes, totals and operational status.
• Payment and register information, such as payment method, payment amount, cash tendered or change, Bank QR confirmation status, register opening cash, expected cash, counted cash and differences.
• Printing information, such as printer configuration, print status and receipt or kitchen-print activity.
• Technical and security information, such as app version, connection status, synchronisation attempts, error states and security or access records required to operate and protect the service.
• Website and support information that you provide directly, such as your name, restaurant name, email address, telephone number and inquiry details, together with ordinary website technical data such as IP address, browser/device information, referring pages and activity timestamps.

The current Bank QR workflow records the cashier’s confirmation and transaction amount. It does not collect a customer’s payment-card number, online-banking password or bank-account login credentials.

Pairing QR and Device Access

My QR Menu POS uses a device-pairing process to authorise an Android device for a restaurant. Pairing credentials, device PIN security material and certain payment-recovery records may be protected using Android security facilities and encrypted local storage. Authentication credentials are used to authenticate authorised POS devices and operate the service.

Google Code Scanner / ML Kit

My QR Menu POS uses Google Code Scanner, provided through Google Play services, to scan restaurant pairing QR codes. Google states that barcode or QR image processing is performed on-device and that the image and scan result are not stored by Google. Google’s ML Kit documentation also states that the SDK may collect device or app information, identifiers, performance metrics, feature events, error codes and related diagnostic or usage information. Where scanner auto-zoom is used, additional scanner-session, zoom-change and predicted bounding-box metrics may also be collected. Google processes this SDK information under its applicable terms and privacy practices.

Network and Printer Connectivity

The app may use internet and network-state access to connect to MY QR Menu services, local-network access for supported network printers, Bluetooth access for supported Bluetooth printers, and USB host functionality for supported USB printer workflows. The current Android POS does not request location, contacts, microphone or SMS permissions for these functions.

How We Use Information

• Pair and authenticate authorised restaurant devices.
• Provide POS, order, payment, register, printing and synchronisation functions.
• Display restaurant menu, catalogue and operational information.
• Maintain transaction integrity and recover interrupted synchronisation.
• Respond to inquiries, requests and support matters.
• Understand service usage, protect accounts and investigate operational or security errors.
• Communicate service-related information where appropriate.
• Meet applicable legal, tax, accounting and operational requirements.

Cookies and Similar Technologies

Our website may use cookies or similar technologies to remember preferences, understand usage and support site functionality. You can control cookies through your browser settings, although some features may not work as intended when cookies are disabled.

Service Providers, Integrations and Third Parties

We may use service providers to support hosting, infrastructure, communications, diagnostics and other operational functions. Where a restaurant enables an optional third-party integration, information necessary to provide that integration may be transferred to the selected provider. The scope of information depends on the feature and the restaurant’s configuration. Third-party services may be governed by their own terms and privacy policies. We do not sell personal and sensitive user data.

Data Retention and Security

We retain information only for as long as reasonably necessary to provide and secure the service, maintain operational and transaction records, resolve disputes and meet applicable legal, tax, accounting or regulatory obligations.

Some POS records may also be stored locally on an authorised Android device to support offline operation, transaction integrity and synchronisation. The Android POS uses secure Android storage mechanisms for sensitive local credentials and certain recovery records. Network communications to MY QR Menu application services use encrypted HTTPS connections. The Android application is configured to restrict normal Android cloud backup and device-transfer backup of its application data.

No method of electronic transmission or storage can be guaranteed to be completely secure.

Access, Correction and Deletion Requests

Subject to applicable law and legitimate retention requirements, you may request access to, correction of or deletion of personal information associated with you. Send privacy or deletion requests to admin@qrmenu.my. We may need to verify the requester’s identity and authority in relation to the relevant restaurant account before processing a request. Certain transaction, accounting, security or legal records may need to be retained where required or permitted by law.

The current My QR Menu POS Android application does not create a new restaurant account. Restaurant accounts are created and managed through the MY QR Menu service.

Children’s Information

MY QR Menu services are intended for restaurant businesses and authorised restaurant staff. My QR Menu POS is not directed to children.

Changes to This Policy

We may update this policy when our products, data practices or legal requirements change. The current version will be published on this page at https://qrmenu.my/privacy-policy/.

Contact

For privacy questions or requests, email admin@qrmenu.my or contact My QR Menu – QR Menu Resources (003877697-T), Semenyih, Selangor, Malaysia.