Privacy Policy
Last updated: 26 October 2026
This policy explains what personal data Tuvshintulga, trading as Ger Labs (게르랩스), the maker of Ayaga, based in the Republic of Korea, business registration number (사업자등록번호) 607-24-52469 ("we"), handles for Ayaga and this website, why, and what rights you have. We are the controller of this data. You can reach us at support@ayaga.app.
Restaurant and guest data stays on the restaurant's computer
Menus, orders, bills, staff accounts, the guest Wi-Fi password and the activity log are stored on the restaurant's own computer. So is what guests send from their phones, such as the names they give, their orders, chat messages, song requests and ratings. Guests' phones connect to the restaurant's computer only over its local network; nothing guests send leaves the restaurant, and we don't receive or store any of it.
The restaurant decides how that data is used and is its controller. Guests with questions about their data should ask the restaurant.
Guests of restaurants that use Ayaga
When you use a restaurant's menu page on your phone, what you send (your orders, any name you type, chat messages, ratings and comments) goes only to that restaurant's computer. We never receive or see it, and we don't process it for the restaurant. The restaurant decides how it is used and is responsible for it, so please ask the restaurant about your data. The software deletes private chats when your table closes, messages to everyone after a day, and names, notes and comments 30 days after your visit. The restaurant's backups keep a copy for up to 30 more days that its computer is used. Your phone keeps your language, your name, your cart, recent notifications and a random id in its own browser storage. The menu page shows this under Privacy.
What we receive
- Purchases: when you buy a subscription, our reseller Lemon Squeezy collects your name, email, billing address and payment details. We receive your name, email, the plan and the order details, but not your full card number.
- License checks: the software sends your license key and an identifier for the computer it runs on to Lemon Squeezy, to activate the license and check it about once a day. Like any internet request, this shows Lemon Squeezy the computer's IP address.
- Updates: the software asks this website now and then whether a newer version exists, and downloads it from here when you update. Like any visit to the website, this shows our host the computer's IP address.
- Support: anything you send to support@ayaga.app, such as your email address, your messages and the details you include.
- Website logs: our host, Cloudflare, keeps standard server logs (such as IP address and pages visited) for security. The website remembers your language choice in your own browser.
- Website analytics: this website uses Cloudflare Web Analytics to count visits. It records page views, the visitor's country, the referring site and the type of device and browser, and shows us only totals. It sets no cookies, doesn't follow you from one site to another and doesn't build a profile of you. We use no advertising trackers and no analytics cookies.
- Refund form: when you use the self-service form on the refund page, your license key and your IP address go to our server (a Cloudflare Worker). It asks Lemon Squeezy for the order that belongs to the key and for the email address on it, to check whether you have been refunded before, and then makes the refund. We store none of this: nothing is kept on our side beyond Cloudflare's short-lived server logs, and the refund itself is recorded by Lemon Squeezy.
Why we use it, and the legal basis
- Selling and licensing your subscription (the order details, license checks and updates): to perform our contract with you (GDPR Article 6(1)(b)).
- Answering support messages: to perform our contract with customers, and for people who aren't customers yet, our legitimate interest in answering their questions (Article 6(1)(f)).
- Website and update server logs, and the refund form's abuse limit: our legitimate interest in keeping the website and updates secure, working and free of abuse (Article 6(1)(f)).
- Website analytics: our legitimate interest in knowing how many people visit the website and which pages and languages they use (Article 6(1)(f)). You can block it with a content blocker or your browser's tracking protection.
- Self-service refunds: to perform our contract with you, in line with the refund policy (Article 6(1)(b)).
- Keeping business records that tax and accounting law requires of us: a legal obligation (Article 6(1)(c)).
Under Korea's Personal Information Protection Act (PIPA), we use this data because it is needed to make and carry out our contract with you, to meet our legal obligations, and for our clearly legitimate interests that outweigh your rights (Article 15(1)), so we don't ask for separate consent.
We need the purchase and license data to sell you a subscription and make the software work; without it we can't provide Ayaga. Writing to support is up to you. We don't sell personal data and don't use it for advertising or profiling.
Who receives it
- Lemon Squeezy (United States), our reseller and merchant of record. It runs the checkout, takes payment, handles sales tax and receipts, and runs the license server the software checks. For the purchase it is a separate controller under its own privacy policy.
- Cloudflare (United States), which hosts this website and the update files, runs the website analytics and the server that handles refund requests, and forwards email sent to support@ayaga.app.
- Google (United States), which stores our support mailbox (Gmail).
- Authorities, when the law requires it.
Where it is handled
We work from the Republic of Korea and read your data there. Lemon Squeezy, Cloudflare and Google process it in the United States and other countries. For data from the EU, EEA, UK or Switzerland, these providers rely on safeguards the law recognizes, such as the EU-US Data Privacy Framework or standard contractual clauses, as set out in their own terms.
Transfers out of Korea, as PIPA asks us to list them (Article 28-8): your name, email, order and license details, support messages and the IP addresses above go to Lemon Squeezy (United States), Cloudflare (United States and its data centers worldwide) and Google (United States), over the internet when you buy, use the software, visit the website or write to us, for the purposes and periods in this policy. These transfers are needed to carry out our contract with you. If you don't want your data to leave Korea, please don't buy or write to us; without them we can't provide Ayaga.
How long we keep it
- Customer, order and license data: while your subscription runs, and for 2 years after it ends, for refunds, disputes and support. Records that tax or accounting law requires are kept as long as that law says.
- Support emails: 2 years after the last message in the conversation.
- Website and update logs, and website analytics: as long as Cloudflare keeps them, which is a short time for logs. The analytics keep only totals, not data about you.
When a period ends, we delete the data for good: files and emails are deleted, and records with our providers are erased in their systems.
Your rights
You can ask us for a copy of your personal data, and ask us to correct it, delete it, restrict how we use it, or send it to you or another company in a common format. You can object at any time to our use of your data based on legitimate interests. Some requests are limited by law, for example records we must keep for tax.
To make a request, write to support@ayaga.app. We answer within one month.
You can also complain to a data protection authority: in Korea, the Personal Information Protection Commission (pipc.go.kr) or the privacy call center of the Korea Internet & Security Agency (privacy.kisa.or.kr, phone 118); in the EU or EEA, the one where you live or work; in the UK, the Information Commissioner's Office.
Privacy officer
Our privacy officer, responsible for how we handle personal data and for your requests, is Tuvshintulga, reachable at support@ayaga.app.
Changes
We may update this policy. The date at the top shows when it last changed. If a change is significant, we will tell customers by email or in the software.