Privacy Policy

Effective September 29, 2026. This policy covers the Mizzz family of apps: Mizzz (restaurant management), Timz (staff scheduling and attendance), and Orderz (front-of-house ordering). All three use a shared cloud account and backend. It's published by Nefrin, the developer of these apps.

Information we collect

Account information. Email address, and if you sign in with Google, your name and profile photo as provided by Google.

Restaurant and business data. What a restaurant enters to run its operations: menu items and prices, inventory levels, reservations, shift schedules, attendance records, tasks, and similar operational records.

Employee records, when an employer adds them. A restaurant owner or manager may enter HR and payroll information for their staff into Mizzz, including name, date of birth, address, contact details, tax identification, bank account details for wage payment, employment terms, and — where relevant to statutory sick pay or workplace accommodation — health insurance details and disability status. This is entered by the employer, not collected by us directly, and is visible only to that restaurant's own managers and owners.

Usage data. Basic technical information needed to operate the service and diagnose problems: device type, app version, and timestamps of actions you take in the app. We do not use third-party analytics or advertising SDKs, and none of these apps show ads.

Camera. Timz can scan a QR code to clock in. Scanning is handled on-device by Google Play Services' code-scanner component; we never receive or store the camera image, and none of our apps declare a standing camera permission for this.

We do not collect location data, and we do not access your contacts.

Who is responsible for what

For your own account (the email you sign in with, and how you use the apps), Nefrin is the data controller. For employee records a restaurant enters about its staff, that restaurant is the data controller and Nefrin acts only as a data processor operating the infrastructure on their behalf — if you're a staff member with a question about your own HR data, your employer is who to ask first; we can help them fulfil it.

How we use it

To provide the core features of each app: running schedules, recording attendance, managing reservations and inventory, processing sign-in, and sending the notifications you'd expect (a shift starting, a task assigned, an answer needed). We do not sell personal data, and we do not use it for advertising.

Who we share it with

We use a small number of infrastructure providers to run the service, each acting as a processor under contract, never as an independent user of your data: Supabase (database, authentication, and file storage) and Google (sign-in, and the on-device QR scanner mentioned above). Employee HR data is visible only within the restaurant that entered it — never to other restaurants, and never to us for any purpose beyond operating the service and responding to a legal obligation.

How long we keep it

For as long as your account or your employer's restaurant account is active, plus a limited period afterward where we're required to keep records (for example, payroll-relevant data your employer must retain under local law). You can ask for your account data to be deleted; see below.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us using the details below — for employee HR data, we'll typically direct the request to your employer, who holds the primary obligation to respond. If you're in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.

Children

These apps are business tools for restaurant staff and owners and are not directed at children. We don't knowingly collect data from anyone under 16.

Security

Data is transmitted over encrypted connections and stored with access controls that scope each restaurant's data to its own staff. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.

Changes to this policy

If we make a material change, we'll update the effective date above and, where required, notify affected users through the app.

Contact

Questions, or a request about your data: privacy@mizzz.net.