Back to site

Privacy Policy

Last updated: August 9, 2026

This Privacy Policy explains how MerchLogs handles personal information on the MerchLogs website and mobile app. MerchLogs is operated by Julien Almacin and Aldrin Almacin (together, "MerchLogs", "we", "us"), based in Edmonton, Alberta, Canada. By using MerchLogs you agree to the handling of information described here.

1. Scope

This policy covers the public MerchLogs website and the MerchLogs application (available on Android, iOS, and the web). It does not cover third-party services we rely on, which have their own privacy policies.

MerchLogs is a tool restaurants use to run their back of house. Much of the information in the app is entered by our business customers about their own operations and staff. Where a restaurant uses MerchLogs to manage information about its employees, that restaurant decides what to collect and why; we process that information on the restaurant's behalf (see "Information about restaurant staff" below).

2. Information we collect

We collect the following categories of information:

  • Account and sign-in information. Name, email address, and password used to create and access an account. Passwords are handled by our authentication provider and are not stored by us in readable form.
  • Business data you enter. Restaurants, locations, item catalogs, inventory counts and orders, delivery notes and comments, and the PDF exports generated from them.
  • Information about restaurant staff. When a customer uses the Shift Management features, the app stores staff names, punch in and out times, breaks, hours worked, schedules, and stated availability. MerchLogs does not collect or store staff wages or pay rates.
  • Device and technical information. Basic device details, app version, and push-notification tokens used to deliver alerts, plus data stored locally on your device so the app works offline.
  • Usage and analytics. Aggregated information about how the website and app are used, collected through analytics tools to help us understand and improve the product.

3. How we use information

  • To provide, operate, and maintain the MerchLogs website and app.
  • To authenticate users and keep accounts secure.
  • To deliver notifications and alerts you or your restaurant enable.
  • To respond to enquiries and provide customer support.
  • To understand usage, fix problems, and improve the product.
  • To meet legal, tax, and record-keeping obligations.

4. Consent and legal basis

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA). We collect, use, and disclose personal information with consent, or as otherwise permitted or required by law. You may withdraw consent as described in "Your privacy rights", though doing so may limit your ability to use MerchLogs.

5. Service providers we work with

We share information with service providers who process it on our behalf, only as needed to run MerchLogs:

  • Supabase — database, authentication, and backend hosting.
  • Expo / EAS — mobile app delivery, updates, and app performance insights.
  • Google and Apple — delivery of push notifications to devices.
  • Google Analytics — website usage analytics.

We do not sell personal information. We do not share it with third parties for their own marketing.

6. Where your information is stored

Our service providers may store and process information on servers located outside Canada, including in the United States. When information is handled in another country, it is subject to the laws of that country, which may differ from those in Alberta. We take reasonable steps to ensure our providers protect it appropriately.

7. How long we keep information

We keep personal information only as long as needed for the purposes above, to provide the service to your restaurant, and to meet legal and record-keeping requirements. Business and staff records, such as time-clock history, may be retained for the period our customers need them for payroll and compliance. When information is no longer needed, we take reasonable steps to delete or de-identify it.

8. How we protect information

We use reasonable administrative, technical, and physical safeguards to protect personal information, including access controls and encryption in transit. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

9. Your privacy rights

Subject to applicable law, you may ask to access the personal information we hold about you, request a correction, or withdraw your consent. You may also contact us with any privacy question or concern. To make a request, email contact@merchlogs.com.

If we manage information about you on behalf of your employer, we may direct your request to that restaurant, which controls the information. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.

10. Information about restaurant staff

When a restaurant uses MerchLogs to manage its staff, the restaurant is responsible for collecting that information lawfully, for telling its staff how their information is used, and for obtaining any consent required. In that relationship the restaurant is the organization responsible for the information and MerchLogs acts as its service provider. Requests from staff about their information are generally handled by their employer.

11. Children

MerchLogs is a business tool and is not directed to children. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the website or app where appropriate.

13. Contact us

For any question about this policy or your personal information, contact us at contact@merchlogs.com.