Privacy Policy

Last updated: March 25, 2026

Encore ("we", "us", "our") is a hotel management platform that connects hotel staff with guests through NFC-powered experiences. This policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

Hotel staff (account holders)

• Email address and authentication credentials
• Property details you create (hotel name, address, menu items, recommendations, info pages, theme preferences)
• Messages you send to guests
• Actions you take on guest requests (approve, deny)

Guests (no account required)

• A randomly generated session identifier when you tap an NFC tag or scan a QR code
• Messages and requests you send to hotel staff (room service orders, late checkout, early check-in, custom requests)
• Tap event data: timestamp and associated hotel

Automatically collected

• NFC tap timestamps and frequency for analytics
• Basic device information required for the app to function

2. How We Use Your Information

• To provide and operate the Encore platform
• To enable real-time messaging between hotel staff and guests
• To process and display guest requests to hotel staff
• To generate analytics for hotel staff (tap counts, daily trends, day-of-week breakdowns)
• To respond to support inquiries

3. Data Sharing

We do not sell your personal data. We share data only with the following service providers that are necessary to operate Encore:

• Supabase — database hosting, authentication, and real-time infrastructure
• Apple / Google — app distribution via App Store and Play Store

Guest messages and requests are visible to the hotel staff who manage the property the guest is interacting with. This is core to how the service works.

4. Guest Privacy

Guests do not need to create an account to use Encore. When a guest taps an NFC tag or scans a QR code, a random session ID is generated. We do not collect guest names, email addresses, or phone numbers unless a guest voluntarily includes personal information in a message.

Guest sessions are tied to a specific hotel property. Hotel staff can see messages and requests from guests at their property but cannot access sessions from other hotels.

5. Data Retention

• Staff accounts: Data is retained for as long as your account exists. You can delete your account and all associated data at any time from the Profile tab in the app.
• Guest data: Messages, requests, and tap events are retained for as long as the associated hotel property exists. When a hotel is deleted, all related guest data is permanently removed.

6. Your Rights

You have the right to:

• Delete your account — Available directly in the app under Profile. This permanently removes your account and all associated properties, messages, requests, menu items, recommendations, and tap events.
• Access your data — Contact us to request a copy of the data we hold about you.
• Correct your data — You can update your property information at any time through the app.

7. Security

• All data is transmitted over HTTPS/TLS encryption
• Authentication is handled by Supabase with industry-standard practices
• Database access is protected by row-level security policies, ensuring staff can only access their own properties and data
• We do not store passwords in plain text

8. Local Storage

The Encore app stores authentication tokens locally on your device to keep you signed in. No other personal data is cached locally beyond what is needed to display the app interface.

9. Children's Privacy

Encore is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this privacy policy or your data, you can reach us through the Contact Support page in the app, or by email:

daniel.chen0113@gmail.com