Privacy Policy
6Seveen
Last updated: October 23, 2026
1. What We Actually Store
6Seveen stores what's needed to run your cafe or restaurant's checkout and kitchen: - Business registration: owner name, phone number, email, password (stored as a hash, never in plain form), business name & type - Operational data: orders, prices, payment method (cash/QRIS/debit/transfer, never card details), cashier shifts, stock, recipes - Staff data: name, employment relationship, outlet assignment, role & access permissions - Customer data that you record yourself in the app (for example a name, phone number or note). A customer who orders through the table QR leaves only a table number and their order; we do not ask for a name or phone number, but free-text notes they type are stored Payroll isn't built yet in this version, so we don't collect employee bank account data. The app does not track location in the background and does not read your phone contacts. Credit/debit card numbers are never requested. Most data lives on your outlet's devices (the Hub phone). A copy on our servers exists for account data, configuration and, if your plan includes cloud sync, transaction data.
2. Location at Clock-in (Optional)
Staff Attendance can verify location. This is off by default. Only if the outlet Owner turns it on does the app ask for location permission while the app is in use and take one approximate location point each time an employee clocks in or out. That point (latitude, longitude, accuracy) is stored with the attendance record in your outlet's database and is visible only to your tenant. It is not shared with third parties, not used for advertising, and never tracked in the background. Declining the permission does not affect sales; only outlets that require location will refuse a clock-in without it.
3. Device Permissions
- Camera: scanning QR codes and taking product photos - Bluetooth and local network (Wi-Fi): connecting the Hub phone with the other devices in the outlet and with receipt printers. On Android 11 and below, Android requires the location permission to scan for Bluetooth devices; the app does not use it to learn where you are - Notifications: the Hub-active indicator and kitchen/stock alerts - Fingerprint/biometrics: only to unlock the app with Android's built-in feature. Android manages fingerprint data; the app and our servers never receive it - Storage: picking images and exporting documents on older Android - Location: only for Attendance, see the section above
4. What This Data Is Used For
Data is used to run your business operations: recording transactions, managing shifts and staff, and syncing data across devices within the same outlet. We also receive limited technical logs (not business logs) to diagnose connection issues. They are kept for about 14 days and then deleted, and are not used for any business decision.
5. The Third Parties Involved
No third-party analytics, advertising or payment-gateway service receives your business data. The only exception is your own choice: if you connect Google Drive, an encrypted backup copy is stored in your own Google Drive (see the Google Drive Backup section). Infrastructure we use: a cloud server (Oracle Cloud) operated by 21Kent and served through api.6seveen.com (the current app version also uses the older alias api.21kent.com, same service), Cloudflare for DNS and support email forwarding, and Google Play to distribute the app. The QR scanner uses the Google ML Kit component, which runs on the device; it may send technical data to Google under Google's own policy, outside our control.
6. Google Drive Backup (Optional)
Google Drive Backup is an optional feature and is off by default. The app works fully without it, and it is available on the Free plan too. It is separate from the paid cloud sync. Only a phone that is the Main Device (the Hub phone) uploads backups. - What we ask Google for: the Drive "app configuration data" permission (drive.appdata), your Google account email address, and basic identity (openid). The Drive permission only opens a hidden folder that belongs to 6Seveen in your Drive. 6Seveen cannot see, read or change your other Drive files. - How we use it: the Drive permission is used only to store, check, download and delete 6Seveen's own backup files in that hidden folder. Your email address and a Google account identifier (a unique ID number, not a password) are kept on the Main Device phone only, to show which account is connected and to notice when you switch accounts. We do not use them for advertising, analytics or any other purpose. - What is stored in your Drive: the same file as Save Backup File, that is, the Main Device records (transactions, menu and menu photos, tables, shifts, stock, staff, customers you recorded, settings and printer settings) together with protected PIN verifiers (not the real PIN). The file is encrypted on your phone with AES-256-GCM before it is sent; the key is derived from your Recovery Code. Google and 21Kent do not hold the key, so they cannot open it; a Google login alone is not enough to restore it. - Unencrypted labels: next to the file, Drive keeps technical labels: business and outlet IDs, time, size, number of records and photos, app version, a short device tag, and a digest (hash) of the file. The labels contain no names, money amounts, PINs or keys. - Recovery Code: it is created on your phone and shown once for you to write down. 21Kent does not store it and cannot recover it. If the Recovery Code is lost and the Main Device is broken, the backup cannot be opened and we cannot help recover it. - Not through our servers: the backup goes straight from your phone to your Google Drive. 6Seveen/21Kent servers do not receive your Google email, tokens or backup contents. The refresh token is kept in SecureStore (Android Keystore) on your phone. - How long: the app keeps up to the 7 most recent versions per outlet and deletes older ones after a newer one has been checked; leftovers of an unfinished upload are deleted after about 6 hours. If nothing changed, no new file is made. Backups use your Google Drive storage quota. - Disconnecting: Settings > Data & Backup > Disconnect Google Drive removes the token from the phone, asks Google to revoke access, removes the email and account identifier from the phone, and stops automatic backup. Backups already in your Drive are not deleted by the app and remain yours. To delete them, open Google Drive on the web > Settings > Manage apps, pick 6Seveen, then Options > Delete hidden app data; after that the backups in Drive can no longer be used for a restore. Revoking access in your Google Account alone does not delete those files; if you revoke access, automatic backup stops until you reconnect. - Switching Google accounts: older backups stay in the previous account's Drive; the new account gets a new full backup. 6Seveen's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
7. How Your Data Is Protected
- Account passwords are hashed with scrypt and a unique salt per account; they are not stored in their original form. - The app talks to our server over HTTPS. Phones within the outlet talk to each other over TLS with a pinned certificate. Session tokens live in SecureStore (Android Keystore). - PINs are checked by the Hub phone. The server does not store a PIN in plain form; when needed it keeps only a hash or a salted verifier. - Android's automatic (Google) backup is turned off for this app. - Backup files, whether you save them yourself or send them to Google Drive, are encrypted on the phone with AES-256-GCM before they leave it. The key is derived from the Recovery Code that only you hold. Honest limits: the local database on the phone is not encrypted by the app itself (it relies on Android's protection and your screen lock; the connected Google email is stored there too), old backup files made by app versions before encryption are not encrypted, so store them safely and replace them with a new backup, and the connection to Bluetooth/network receipt printers is not encrypted.
8. You're in Control
- View & manage business/staff data: Settings menu in the app - Disconnect a paired device: Settings > Connected Devices > Disconnect - Disconnect Google Drive: Settings > Data & Backup > Disconnect Google Drive (to delete backups already in Drive, see the Google Drive Backup section) - Delete your business account and server data: email support@21kent.com from the Owner's email address with the subject "Delete 6Seveen account" and your business name. We confirm the request within 7 days and complete it within 30 days. We verify that you are the Owner, then delete your account and business data on the server (account and password, menu, photos, orders, transactions, settings, devices, sessions and sync queue) in one recorded procedure; a login account that another business also uses is not deleted. Data on your phone, backup files you saved, and backups in your own Google Drive are not under our control and you need to delete them yourself - What we keep: subscription billing records (invoices and payments) remain, with the business name and access key cleared, because we may have a duty to keep transaction records. What remains temporarily: our server database is backed up daily and the latest 21 copies are kept, so deleted data may still exist in those backup copies until they roll off, about 21 days. Technical logs are deleted about 14 days after they are made, and sign-in sessions last 7 days - Uninstalling the app removes the app's private data on that phone. Other copies are not removed: a backup file or PDF you exported, backups in your Google Drive, and data already on the server or on other devices Questions about your data? Email support@21kent.com.
9. If This Policy Changes
This page always shows the latest version and its update date. Major changes (especially once payroll goes live) will be announced through an app update.
10. Get in Touch
Something unclear about privacy? Email support@21kent.com.