Privacy Policy

    Summary: R2R is a B2B hotel management tool. We collect only the minimum personal data needed to run the app. We do not sell your data, show ads, or share data with unauthorized third parties.
  

1Who We Are

R2R ("we", "our", "us") is a hotel management application that enables hotel businesses to manage rooms, reservations, and staff operations. The app is operated for and by hotel businesses (our customers), and their employees use the app under accounts created and managed by the hotel's administrator.

For questions about this policy, contact us at: balcem.16@gmail.com

2What Data We Collect

We collect only data that is necessary to provide the app's functionality.

Data Type	Examples	Purpose
Account data	Name, email address, role (admin, worker, receptionist, hotel owner)	Authentication and access control
Hotel & room data	Hotel name, room numbers, room status (clean/reserved), check-in/out times	Core app functionality
Reservation data	Guest name, guest contact, stay dates, reservation status	Reservation management
Usage data	Actions performed in-app (marking room clean, creating reservation), timestamps	Audit trail and operational reporting
Device data	Device type, OS version (collected automatically by Firebase)	Crash reporting and app stability

We do not collect: location data, photos from your device, contacts, financial information, advertising identifiers, or any sensitive personal categories.

Hotel images uploaded by administrators are stored as encoded data inside our database — not as files on a third-party storage service.

3How We Use Your Data

To authenticate you and provide you access to features based on your role
To display rooms, reservations, and hotel information relevant to your assigned hotel(s)
To record actions you take (room cleaning, reservations) as part of the operational log
To allow hotel administrators to manage staff assignments and roles
To improve app stability and fix bugs (via anonymized crash/performance data)

We do not use your data for advertising, profiling, or any purpose unrelated to providing hotel management services.

4Data Storage & Security

All application data is stored in Google Firebase Firestore, a cloud database service operated by Google LLC. Authentication is handled by Firebase Authentication.

Data is stored in Google Cloud data centers with encryption at rest and in transit (TLS)
Access to data is protected by Firestore Security Rules — users can only access data for hotels they are assigned to
Passwords are never stored by us — Firebase Authentication handles credentials securely
Only hotel administrators can create, modify, or delete user accounts

Firebase's privacy practices are governed by Google's Firebase Privacy and Security documentation.

5Data Sharing

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

Google Firebase: Our infrastructure provider — data is processed according to Google's Data Processing Terms
Your hotel employer: Hotel administrators and authorized staff can see operational data (room status, reservations, staff assignments) as part of the app's intended function
Legal requirements: We may disclose data if required to do so by law or in response to a valid legal request

6Data Retention

We retain your data for as long as your account is active or as needed to provide the service.

Active accounts and associated data are retained while the account exists
When an account is deleted by an administrator (or upon deletion request), personal data is removed within 30 days
Historical operational records (reservation logs, room event history) may be retained in anonymized or aggregated form for up to 12 months for reporting purposes

To request deletion of your data, see our Data Deletion page.

7Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Ask us to correct inaccurate data
Deletion: Request deletion of your account and associated data
Portability: Receive your data in a machine-readable format
Objection: Object to certain types of data processing

To exercise any of these rights, email us at balcem.16@gmail.com or use our Data Deletion page. We will respond within 30 days.

Note: Because user accounts in R2R are created and managed by your hotel's administrator, some requests (such as account deletion) may need to be directed to your employer's designated administrator first.

8Children's Privacy

R2R is a professional B2B application intended for use by hotel employees who are at least 16 years of age. We do not knowingly collect data from persons under 16. If you believe a minor has used the app, please contact us at balcem.16@gmail.com and we will promptly delete the data.

9Third-Party Services

The app uses the following third-party services, each governed by their own privacy policies:

Google Firebase Authentication — user sign-in and credential management
Google Firebase Firestore — cloud database storage
Google Play Services — app distribution and device services

We do not integrate advertising SDKs, analytics SDKs beyond Firebase's default crash reporting, or social login providers.

10Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify users through the app or by email.

Continued use of the app after the effective date of a revised policy constitutes your acceptance of the changes.

11Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy, please contact us:

Email: balcem.16@gmail.com
App: R2R
Response time: We aim to respond within 5 business days

For data deletion requests, please visit our dedicated Data Deletion page.