Privacy Policy — Vantho Checklists
Effective date: October 20, 2026
Who we are
Vantho Checklists is published by Tou Ventures INC ("we", "us"). We provide the app to restaurant brands, including Chifa Du Kang, so their employees can complete daily, weekly and monthly work checklists. In this policy, "your employer" means the restaurant company you work for.
This policy explains what information the app collects, why we collect it, who we share it with, and the choices you have. It applies to the Vantho Checklists app on iOS and Android, and to its web version.
Information we collect
The app collects only what it needs to show you the right checklists and record who completed them.
| Information | What it includes | Where it comes from |
|---|---|---|
| Employee profile | Name, employee ID, PIN, position, department, assigned restaurant locations | Your employee record, set up by your employer |
| Schedule | Your shifts for today, including backup shifts at another location | Schedules your managers create in Vantho |
| Phone number | The phone number on your employee profile | Your employee record, set up by your employer |
| Checklist activity | Items you check, text you enter, the restaurant, the checklist, and the date and time | You, while using the app |
| Photos | Photos you take for checklist items | You, with your device camera |
| Device data | Login session on restaurant tablets, the profile saved on your personal phone, and a push notification token | Your device |
We do not collect your GPS location, contacts, photo library, browsing activity or payment information. The app has no advertising and no third-party analytics or tracking.
How we use information
We use your information only to run the checklists for your employer:
- To sign you in with your PIN and confirm who you are. If a PIN matches more than one employee, the app asks for the last 4 digits of your phone number and checks them on our servers.
- To show the checklists for your position at the restaurant where you are working, including backup shifts.
- To record who completed each item and when, so managers can see what was done and what was missed.
- To produce completion reports by restaurant, department and checklist.
- To send push notifications about your checklists.
- To keep the app secure, prevent misuse and fix problems.
We do not sell your information or use it for advertising.
Camera and photos
Some checklist items require a photo, and the app asks for camera permission the first time you take one. Photos are taken live inside the app. The app cannot open or upload photos from your photo library.
Each photo is stamped with the restaurant, date, time, your name and the checklist. We also keep a digital fingerprint of each photo to stop the same photo from being submitted twice. Photos are stored with the checklist record, and your employer's managers can view them.
You can turn off camera access in your device settings at any time. If you do, you will not be able to complete items that require a photo.
Information stored on your device
The app keeps a small amount of information on the device so you don't have to sign in from scratch every time:
- Restaurant tablets: the restaurant's login stays on the tablet until someone uses Device logout. No personal employee profile is saved on tablets.
- Personal phones: after you sign in, the app saves your employee ID, first name and the last shift you picked, so it recognizes you next time. It never saves your PIN. Tap "Not you?" on the PIN screen to remove it, or uninstall the app.
Your employee session ends automatically after 2 minutes of inactivity.
Push notifications
If you allow notifications, your device gives the app a push token from Apple Push Notification service or Google Firebase Cloud Messaging. We use it only to send reminders and updates about your checklists, never marketing. Notifications pass through Apple or Google to reach your device.
You can turn notifications off at any time in your device settings.
Who we share information with
We do not sell your information. We share it only with the service providers that run the app for us, and only for that purpose:
| Provider | What it does for us | Information it handles |
|---|---|---|
| Supabase | Database, photo storage and sign-in | All app data, including photos |
| Vercel | Hosts the web version of the app | Technical request data, such as IP address |
| Apple and Google | App stores and push notifications | Push token and notification content |
Each of these providers is bound by its terms with us to give your information the same or equal protection described in this policy, and to use it only to provide its service to us.
Your employer's managers and supervisors can see checklist records and photos for the restaurants they manage. Each employer sees only its own employees and restaurants, never another brand's data. We may also disclose information if the law requires it, or to protect the safety of our employees and guests.
Where data is stored and how long we keep it
All app data is stored in the United States, on Supabase servers in the AWS Northern California region. Data is encrypted in transit and at rest. Access requires the restaurant's login plus an employee PIN, and each employee only sees checklists for the restaurants and positions they work. Each employer's data is kept separate from every other employer's.
We keep checklist records and photos until your employer deletes them. When you stop working for your employer, your access is turned off, and the records you created stay as your employer's business records until they are deleted. Information saved on your device stays there until you log out, tap "Not you?", or uninstall the app.
No system is completely secure, but we limit access to the people and providers who need it to run the app.
Your choices and requests
You can ask us for a copy of your information or ask us to correct it. Email vantho.app@chifadukang.com, or ask your manager. We answer within 30 days.
On your own device, you can:
- Remove your saved profile with "Not you?" on the PIN screen, or by uninstalling the app.
- Withdraw your consent for the camera or notifications at any time by turning them off in your device settings. This stops new photos and notifications; it does not delete records already saved.
Delete your account and data
To delete your account and the data linked to it, email vantho.app@chifadukang.com with the subject "Delete my account", or ask your manager. Employee accounts are created by your employer, not inside the app, so deletion requests come to us this way. We confirm it's you, delete your account and its data, and reply within 30 days.
Turning off your access is not the same as deleting your data. If your employer must keep some records as business records, or the law requires us to keep them, we will tell you which ones and why.
To remove only what is saved on your phone, tap "Not you?" on the PIN screen or uninstall the app.
Children
The app is only for restaurant employees aged 18 or older. We do not knowingly collect information from anyone under 18.
Changes to this policy
If we change this policy, we will update the effective date at the top. For important changes, such as new sign-in methods or new service providers, we will also tell you in the app before they take effect.
Contact us
Tou Ventures INC
Email: vantho.app@chifadukang.com