Privacy Policy

For the accounts of restaurants and their administrators, and for running and securing the service itself, Magnus Heide AS is the data controller.

For data about a restaurant's employees (schedules, timesheets, messages, forms etc.) and its customers (orders), the restaurant is the data controller and Magnus Heide AS is a data processor acting on the restaurant's behalf. Questions about that data can go to the restaurant, or to us and we'll pass them on.

• Account and sign-in: name, email address, phone number and sign-in method (email link, code by SMS or email, Vipps or password).
• Employees: details the restaurant registers, such as name, contact details, address, date of birth, national ID number, bank account, position, pay, department and line manager, and employment contracts.
• Work: shifts, availability, clocking in and out, breaks, timesheets, absence, requests, forms and answers, cases, warnings and appeals.
• Location: when an employee clocks in or out in the app, the phone's location is used to check they're at the workplace. The position and its accuracy are saved with the clock entry. The app doesn't use location in the background.
• Photos and camera: profile photos and photos taken in forms, with the time each was taken.
• Calls and messages: messages between employees and management, and voice and video calls in the app. Calls are live and not recorded. We store who called whom, when and for how long.
• The AI assistant: the questions an employee or administrator asks, and the answers.
• Devices: which devices and browsers an employee is signed in on (device type, operating system, browser and when it was last used), and a push token for notifications in the app.
• Customers who order: name, phone number, email and delivery address, what was ordered, and payment status. Card numbers are handled by the payment provider, never by us.
• Recruitment: applications, CVs, photos and answers from candidates applying for a job through a restaurant.
• Technical: logs of sign-ins and use of the service, for security and troubleshooting.

• Providing the service: orders, schedules, time tracking, payroll data, messages, notifications and calls.
• Sign-in and security: confirming who you are and detecting misuse.
• Invoicing restaurants for subscriptions and usage.
• Customer support and answering enquiries.
• Improving the service and fixing errors.

The legal bases are the agreement with the restaurant or user (GDPR art. 6(1)(b)), the restaurant's legal obligations as an employer, such as timesheets and payroll (art. 6(1)(c)), and the legitimate interest in a secure, working service (art. 6(1)(f)). We don't sell personal data, and we don't use it for advertising or for tracking across apps and websites.

These providers process data on our behalf, only to deliver their part of the service:

• Google Cloud / Firebase – hosting, database, file storage, sign-in and Android notifications.
• Apple – iPhone notifications.
• Microsoft – sending email.
• 46elks and Africa's Talking – SMS.
• Vipps MobilePay – sign-in and payment.
• Stripe – card payments and invoicing.
• Safaricom (M-Pesa) – payments in Kenya.
• LiveKit – voice and video calls in the app.
• Anthropic – the AI assistant.
• Tripletex – payroll and accounting, when the restaurant has connected it.
• Google Maps and the Norwegian Meteorological Institute – maps and weather (no personal data beyond what the browser sends).

Some providers may process data outside the EU/EEA, for example in the USA. Such transfers rely on a lawful basis, such as the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

Data is kept for as long as the account or employment lasts and the restaurant needs it. Conversations, notifications, form answers with photos, cases, warnings and appeals are deleted automatically after the retention period the restaurant has chosen (24 months by default). Timesheets, payroll and accounting data are kept as long as accounting and other laws require. When a device is signed out, it's removed from the list of devices.

• Location – only when you clock in or out.
• Camera and photos – when you take or choose a photo.
• Microphone and camera – only during a call you start or answer.
• Notifications – for messages, shifts and calls.

The app asks before using any of them, and you can turn them off in your phone's settings.

You have the right to access, correct and delete data about you, to restrict or object to its processing, and to receive it in a portable format. Employees can correct many details themselves in the app under Me.

You can delete your account yourself: in the app under Me › Settings (employees) or More (restaurants), and in the backoffice under Settings. When a restaurant owner deletes their account, the restaurant closes at once and the rest of the data is deleted within 30 days. Some data, such as invoices, timesheets and payroll, must still be kept for as long as the law requires.

If you can't get into the app, you can ask for deletion at orderonline.no/delete-account.

With any other question, email hei@orderonline.no. Where the restaurant is responsible for the data, we help the restaurant answer you.

You can also complain to the Norwegian Data Protection Authority (datatilsynet.no), or the data protection authority where you live.

All traffic is encrypted (HTTPS). Access depends on role, so employees only see their own data and what the restaurant shares with them, and administrators only their own restaurant.

The service isn't made for children under 13. Young workers use it through their employer.

We update this policy when the service changes. The date at the top shows the latest change.