Privacy policy
BAR HQ is an operations-control app for bar owners and managers. This policy explains what data we process, why, and with what safeguards. It is written in plain language because we want it to be understood.
Who is responsible
Barilico – Restauração, Unipessoal Lda
Tax ID (NIPC) 506621405 · Rua do Grémio Lusitano n.º 6, 1200-212 Lisbon, Portugal
Privacy contact: hola@barhq.io
What data we process
- Account data: name, email address and password (encrypted). Accounts are created by BAR HQ for each client company; there is no public sign-up.
- Business operating data, entered by owners and managers: daily closes (sales, card and cash takings, expenses), staff payouts (employee name and amount), product catalog, stock levels, supplier invoices and fixed expenses.
- Photos and documents: photos of empty bottles and photos or PDFs of invoices that the user chooses to upload.
- Access requests sent from the website or the app: name, bar name, city, number of venues, phone or email and message.
- Technical data: a log of relevant actions (for example, who approved a close and when) and the device type, for security and support.
The app does not access your location, contacts or photos without your action: the camera and photo library are used only when you choose to take a photo or pick a file.
Why we use it
- To provide the service: showing each company its closes, costs, margins and purchasing.
- To recognise, using artificial intelligence, the bottles in a photo and the products, prices and VAT on an invoice, in order to calculate real costs.
- To generate reports and exports (for example, the Master Excel) at the user's request.
- To handle access and support requests.
- To keep the service secure, prevent unauthorised access and meet legal obligations.
Legal basis: performance of the service contract with the client company, our legitimate interest in the security and improvement of the service, and your consent when you send an access request.
Who processes data on our behalf
- Supabase (database, authentication and file storage), hosted in the European Union (Ireland).
- Netlify (hosting of the web application).
- Anthropic (the artificial-intelligence model that analyses bottle photos and invoices). Images are sent only to obtain the analysis result; the provider does not use them to train its models.
- Apple (distribution of the app on the App Store).
We do not sell data or share it with third parties for advertising. There is no advertising and no tracking in BAR HQ.
How long we keep it
Business operating data is kept for as long as the client company keeps its account, because it is their management history. Access requests are kept for up to 12 months. Technical security logs, for up to 24 months.
Your rights
You can access your data, correct it, request its deletion or restriction, object to its processing and request portability by writing to hola@barhq.io. You can also lodge a complaint with your country's data-protection authority; in Portugal, the CNPD.
Deleting your account
In the app, under Más → Eliminar mi cuenta, you can delete your account at any time. Your email, your name and your access are removed. Business records (closes, invoices) belong to the client company and are kept without your name. If you are the owner and want the whole company removed, write to us and we will do it.
Security
Data travels encrypted (HTTPS) and is stored with per-company access control: each user only sees their own company's data and, for managers, only their own venue. Files are kept in private storage accessed through temporary links.
Children
BAR HQ is a professional tool for hospitality businesses and is not directed at anyone under 18.
Changes
If we change this policy, we will publish the new version on this page with its date. If the change matters, we will let you know in the app.