Legal

Privacy policy

Last updated: 17 September 2026. Order Flow (Jathol) is an offline-first point-of-sale system. This page is the public policy for this website and the Order Flow app. It is written to be read — if anything here conflicts with marketing copy, this page wins.

Rangkaian pendek (Bahasa Melayu)

Laman web ini tidak mengumpul data anda secara automatik dan tiada penjejakan iklan. Borang percubaan hanya membuka draf e-mel yang anda sendiri hantar; maklumat itu tidak disimpan di pelayan kami. Dalam aplikasi Order Flow, jualan, menu dan pelanggan anda tinggal pada peranti kedai. Kami hanya melihat kunci lesen dan ID peranti rawak untuk pengaktifan. Untuk soalan atau pembetulan data, e-mel [email protected] (WhatsApp @Jathol_Jutt untuk kecemasan). Butiran penuh di bawah.

Who we are

The app and this website are operated by Jathol, a Malaysia-based developer. For the purposes of the Personal Data Protection Act 2010 (PDPA), Jathol is the data controller for the small amount of data described below. Support and licensing run through [email protected] — we answer every message within 24 hours — with WhatsApp @Jathol_Jutt kept for urgent, shop-stopped cases. Company registration and address details are provided on your license receipt and on request.

What this website collects

• Nothing in a database. The site is static. There are no accounts, no sign-in, no server-side profiles.
• Trial & plan forms. They open a pre-filled draft in your own email app; the form never sends itself and this website stores nothing. Jathol only receives the email you decide to send. Email on the form is optional — a phone number is enough to issue a key.
• Download. The APK is served by our own worker; Cloudflare (hosting) may see standard request metadata such as IP address and user agent for security and abuse prevention. We do not add our own logging.
• Currency preview. If you accept our cookie/storage choice, the site may read your country (from the Cloudflare edge, not a third-party geo service), fetch exchange rates from open.er-api.com and remember your pick in local storage. This is display-only; billing is always in RM. Decline, and none of it happens.

Third-party services loaded by this site

• Google Fonts (fonts.googleapis.com / fonts.gstatic.com) — web fonts. Your IP is visible to Google when the style loads. No cookies are set by the font CDN for a plain CSS request.
• jsDelivr CDN (cdn.jsdelivr.net) — the Three.js library, used only for the decorative hero animation. It loads before any consent because it sets nothing and stores nothing; your IP is visible to the CDN.
• WhatsApp (Meta) — opens only when you tap an explicit WhatsApp link (trial & plan requests go to email).
• open.er-api.com — exchange rates, only after you accept our storage choice.
• Cloudflare — hosting, the small /geo helper and basic bot protection (__cf_bm cookie). See the cookies policy.

We removed an IP-geolocation lookup to a third-party service (ipapi.co) in September 2026 — the site now derives country only from the Cloudflare edge, and only after consent.

What the app does with shop data

Menu, photos, prices, stock, tickets, customers, staff, printers and settings are stored on the Main device (and mirrored only to the devices in your shop). Stations talk to Main over the shop Wi-Fi. On the cloud-networking option for custom plans, traffic between your devices passes through an encrypted Jathol relay; it is a corridor, not storage — shop records are not kept there for the till to work, and are not read for any purpose other than keeping your room in sync or responding to you.

What the app sends online

• License activation and the periodic online check: your 16-character license key and a random device ID go to the Jathol license service. This is what binds one key to one Main device and lets us reset a binding when you ask. It has no access to sales data.
• APK update checks read the release info served by this site's worker.
• No advertising IDs, no analytics SDKs, no crash reporters, and no sale or sharing of shop data. Ever.

Device permissions (all optional to use)

• Camera — barcode scanning, menu photos and station join-QR.
• Bluetooth & nearby devices — pairing and printing to ESC/POS devices.
• Wi-Fi state (Android may present this as location) — needed to read the shop network so stations can find Main. We never map or track you.
• Notifications & foreground service — keep Main's shop server alive during trading.
• Photos/files — attaching images to menu items.

Your data is also in your hands

Because the till lives on your devices, you are the controller of your customers' and staff's data inside the app (names, phone numbers, orders, loyalty points). Use it only for running your shop; keep the Main device locked and updated; delete customer records when you no longer need them. If a shop using Order Flow receives a customer data request, that request is handled by the shop, not by Jathol.

Retention & deletion

• License service: key status, bound device ID and last-seen timestamps persist while your subscription is active and for a short period after it ends, for billing and dispute handling. Resetting a binding erases the old device ID.
• Emails — and any WhatsApp chats you start: we keep the thread only as long as needed to serve the request and to honour the receipt/refund record described in the refund policy.
• Shop data: uninstalling the app removes it from that device. There is no cloud copy to delete for standard plans.

Your rights (PDPA 2010, as amended)

You may ask us to access and correct the limited personal data we hold about you (license records and our chats), withdraw consent for optional processing (currency preview — just decline it, or clear site storage), and ask how your data is used. To exercise a right, WhatsApp @Jathol_Jutt — we answer data requests first. You may also complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi) if you feel we failed you. Where the amended PDPA grants portability or notifies you of a breach, we will act within the timeframes the law requires.

Children

Order Flow is a business tool and the website is not directed at children. We do not knowingly collect data from anyone under 18.

Transfers outside Malaysia

Cloudflare hosting, the CDNs above, and WhatsApp operate on global infrastructure, so the narrow data paths described here may cross borders. Shop sales data on standard plans does not leave your devices at all.

Security

HTTPS everywhere on our side, encrypted cloud rooms when you opt into them, license keys never stored in plaintext on your phone, and the station protocol is closed to your own room. No system is unbreakable — we fix reported issues as they land.

Changes

If this policy changes in a material way, this page gets a new date and the app's guide banner mentions it. Continued use after a change means you accept it — asking first is always fine.

Questions: [email protected] (within 24 h) · urgent: WhatsApp @Jathol_Jutt · See also Terms · Refunds · Cookies