Restory AI app · revision of 23 September 2026
Restory AI is an operations director powered by AI: the service connects to a company's systems, builds the picture of its business and answers questions about it. The app is used by authorized employees of client companies — owners, executives and managers — in food service chains, retail, services and manufacturing. This document explains what data we process in the mobile app and on our servers, why, and whom we share it with.
| Data | Purpose |
|---|---|
| Email — required | Signing in (a one-time code instead of a password), organization invitations, service emails |
| Name and profile photo — optional | How colleagues in your organization see you |
| Company, its locations (sites, branches, lines of work), employee roles and invitations | Access control: who can see which dashboards and locations |
| Business data from connected sources (POS and accounting systems, spreadsheets, your own databases): sales, receipts, items, shifts, stock | The core purpose of the service: dashboards, reports and AI answers are built on this data |
| Documents, spreadsheets and images uploaded by a user for analysis | Answering that user's request and preparing related reports |
| Voice questions to the AI — only while you hold the record button | Speech recognition, so you can ask a question by voice instead of typing |
| Device push token | Delivery of notifications and daily reports |
| Technical logs: app version, device model, IP address, errors | Troubleshooting and abuse prevention |
| Public dashboard link visits: IP address, country, device type, OS, browser and time | Access audit for authorized organization staff and protection of public links from abuse |
We do not request location, contacts, calendar, health data or advertising identifiers. We do not use your data for advertising and never share it with ad networks or data brokers. No cross-app or cross-site tracking (App Tracking Transparency) takes place.
From the connected systems we pull business performance metrics. The service does not need your customers' or guests' personal data (names, phone numbers, card numbers): we do not request it and do not display it. If a connected system nevertheless returns such fields as part of an export, the client company, as the data owner, is responsible for the lawfulness of that transfer; we process such data solely to perform the contract and delete it together with the source.
Data goes only to the services listed above, and each of them must protect it at least as well as described in this policy. There are no other recipients. We do not sell data and do not disclose it to third parties except where the law directly requires it.
The app's AI features (AI analyst answers, voice input, the AI dashboard editor and AI reports) run on Anthropic and OpenAI as described above. The sign-in screen identifies the services and data and presents a separate “I consent to sharing this data” checkbox. A sign-in code cannot be requested until the user checks it; no data is sent to AI services before sign-in. Consent can be withdrawn by deleting the account in the app or by contacting support.
Organization data is retained for as long as the contract with that organization is in force. One-time sign-in codes live for 10 minutes. Technical logs are kept for up to 30 days. An IP address used to view a public dashboard link is retained for 90 days and then automatically anonymized; normalized device details and visit time remain in that link's audit until deletion. Voice recordings are not stored: after recognition only the text of your question remains in the conversation history.
You can delete your account inside the app: Profile → Team → Delete account. The action is irreversible — the profile, access rights, conversation history and push tokens are deleted, and sessions on all devices end. Business data stays with the organization: its owner deletes it together with the data source or by request to support.
Traffic between the app and the server is protected with TLS. There are no passwords — sign-in uses a one-time code. Credentials for connected POS systems are stored encrypted and are never shown in the interface after they are saved.
Restory AI is a work tool for employees of organizations. The app is not directed at children, and we do not knowingly collect children's data.
You may request a copy of your data, its correction or deletion, and withdraw your consent to processing — write to us and we will respond within 30 days.
For any data-related questions: support@restory-ai.com. Support page: links.stage.restory-ai.com/en/support.
If our processing practices change, we will update this page and the revision date above, and announce material changes in the app.