Privacy Policy

Cenas Kitchen Employee · Last updated: 2026-07-27

This Privacy Policy describes how Cenas Kitchen, LLC ("we", "our", "Cenas Kitchen") collects, uses, and protects information when you use the Cenas Kitchen Employee application and the related website at app.cenaskitchen.com (collectively, the "Service"). The Service is provided to employees, contractors, and authorized partners of Cenas Kitchen for internal restaurant operations only. It is not intended for the general public.

1. Information we collect

We collect only information needed to run restaurant operations and pay our team. Specifically:

• Account info — your full name, work email, work phone number, address, role, and assigned work location (Tomball or Copperfield). Provided when an authorized manager adds your account.
• Authentication credentials — a 5-digit passcode you create. Stored only as a one-way salted hash; we never see your plaintext passcode. Used to sign in to the Service.
• Shift & payroll data — work hours, breaks, roles, and computed pay totals. Read from our Toast POS integration for shifts you actually worked.
• Employee work location — if you choose to allow location in the Android app, it collects an approximate location about once an hour during your published work shift, including while the app is closed or not in use. Managers may use these check-ins to confirm work-location activity. This hourly feature does not collect location between your published shifts, and declining it does not block the rest of the app.
• Driver delivery GPS location — only if your role is "Corporate Driver". While you have an active delivery shift open, the app captures location every ~5 seconds and uploads it to our servers. Used to provide live delivery tracking to the dispatch manager and to compute mileage-based pay for routes over 20 miles one-way. This higher-frequency delivery tracking is not captured outside an active driver shift.
• Delivery performance data — for drivers, per- delivery records including on-time status, tracked status, five-star reviews, and verified mileage. Used to compute delivery bonuses and the per-mile-over-20 pay tier.
• App diagnostics — basic crash logs, error messages, and request timing. No screen content, no keystrokes, no microphone.
• Sign-in and app activity — we record successful employee sign-in times and the broad platform used. When the native app opens, enters the foreground, or goes to the background, we also record the event time, app version, platform, a random app-install identifier, and a random identifier for that WebView run. Android cannot always report an exact close event if the operating system kills the app, so we do not claim to record every app close. Page navigation is not counted as a new app open.

2. How we use the information

• To sign you in and route you to the right dashboard for your role.
• To compute your paycheck (base per-delivery rate, on-time bonus, mileage tier, five-star bonus per the published ezCater Guidelines).
• To dispatch and monitor in-progress deliveries (live driver location map for active shifts).
• To confirm approximate work-location activity during a published shift when an employee has allowed that feature.
• To audit successful employee sign-ins and understand whether the native app was opened, foregrounded, or backgrounded.
• To audit restaurant operations and labor cost.
• To respond to your questions or service requests.

We do not sell, rent, or trade your personal information. We do not use the data for advertising. We do not share it with third parties except as described in §3.

3. Third-party processors

We use a small number of vendors to run the Service. Each receives only the minimum information necessary:

• Render — application hosting (our servers run on Render's infrastructure).
• Toast, Inc. — point-of-sale data, time entries, and payroll inputs.
• Sling (Toolbox by Toast) — scheduling and roster data.
• ezCater, Inc. — catering order data for deliveries dispatched through their platform.
• Google Maps / OpenStreetMap — distance lookups for route planning and live driver map rendering.
• Google Firebase Cloud Messaging / Google Play services — device push tokens and notification delivery, plus the on-device fused-location lookup used after location permission is granted.
• Anthropic — AI-assisted PDF extraction for catering orders and AI-assisted resolution of ingest warnings.
• SiteGround — email transport for order notifications.

4. How we protect your information

• All connections to the Service use TLS encryption.
• Passcodes are stored as one-way salted hashes (Werkzeug pbkdf2:sha256, the OWASP-recommended pattern).
• Roles are enforced server-side. Only Partner-level accounts can see management labor costs; only your own GMs or Sam can reset your passcode.
• Employee hourly work-location check-ins, successful sign-in events, and native-app activity events are normally kept for 90 days. Records older than 90 days are removed during the next telemetry maintenance run.
• Location consent and revocation records are retained as needed to document employee choices and compliance.
• If a passcode is reset or your account is deactivated, all your sessions on every device are immediately invalidated.

5. Your choices and rights

• Access & correction — ask your manager or email samsahragard@gmail.com to view, correct, or update your profile information.
• Deletion — request that we remove your account and personal records by emailing the same address. We will remove your account within 30 days. Note that some data may be retained as required by tax or payroll law (typically 4 years for payroll records in Texas).
• Location choice — saying no to the location request keeps the rest of the app available and does not sign you out. Use Work location in the app to revisit your choice or turn off future hourly check-ins. You can also revoke Android permission in Settings → Apps → Cenas Kitchen Employee → Permissions → Location. Changing Android Settings alone does not grant Cenas consent again; to re-enable check-ins, start from Work location in the app. Ending an active driver shift also stops higher-frequency delivery tracking.
• Sign-in and app activity — signing out ends session-attributed activity reporting. You may request access to or deletion of retained sign-in and app-activity events using the contact information above.

6. Children

The Service is intended for use by Cenas Kitchen employees and authorized adult partners only. We do not knowingly collect personal information from anyone under 16.

7. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will also be announced via the app's developer chat for authorized staff.

8. Contact

Cenas Kitchen, LLC
27727 Tomball Pkwy, Tomball, TX 77377
Email: samsahragard@gmail.com
Phone: (713) 366-1208