Privacy Policy

Last updated: October 18, 2026

Who we are

Kontimo is operated by OYA Studio LLC, a Wyoming, USA limited liability company ("we", "us"). This policy covers the websites kontimo.com and thegrabmethod.com (the "Site"), the client account you open on it, the community inside it, and the services and books we sell. Kontimo serves restaurants in every country where Grab runs.

What we collect

We collect the minimum we need to run Kontimo. That means:

• Your account: your email address, your restaurant's name and whether it is on Grab, which the sign-up asks for. Then only what you choose to add: your name and language, your restaurant's details (such as its city and what it sells), a WhatsApp number or a LINE account, and the people you invite to your account (their email address and their role).
• Signing in: the one-time links and six-digit codes we email you, and a session cookie that keeps you signed in. There is no password.
• Data from your Grab account, if you connect it: see the next section.
• What you add yourself: your answers in the account, the figures you enter from Grab's merchant app, and the files and photos you upload (your menu, your logo, your dishes).
• The community: your nickname and photo if you choose them, what you fill in on your member page, your posts, replies, reactions and votes, and the posts you flag.
• Purchases: your email address, the product, the payment reference and the dates, provided to us by Stripe at checkout.
• Support correspondence, the content of messages you send us at [email protected], through the contact form, on WhatsApp or on LINE.
• Server logs, basic technical data (IP address, user agent, requested URL, timestamp) captured by our hosting provider, Cloudflare, for security and debugging. To stop machines from opening accounts in a row, the connection a sign-up comes from is kept as a hash, never as it came, and deleted after a day.
• The app on your phone: if you add Kontimo to your phone's home screen, your account records the date it was first opened that way. Nothing is sent to anyone for it.

We do not run analytics scripts, advertising pixels, or session-replay tools on the Site.

Data from your Grab account

When you connect your Grab Merchant account, you add an address we create for your restaurant alone as an employee with the Manager role, in GrabMerchant. You never give us your Grab password, and you can remove that employee at any time. Through that access we collect what your account holds about your restaurant: your menu, prices, orders, sales, payouts, ratings, reviews, promotions and ads. Each collection is checked by a person on our team before its figures reach your account.

We keep no personal data about your customers. The little a Grab file can carry (today, the first name of a review's author, in the reviews export) is removed when we collect the file, before anything is stored, and is never used. We collect from your Grab account only when you ask for it, never again without your agreement. What we may do with the rest, how long we keep it and how we remove it are set out in the Account Access Agreement.

How we use it

We use your data only for these purposes: run your account and show you your figures with what they mean; deliver the services and books you bought; run the community; send you the emails and messages described below; respond to your support questions; and secure the Site and keep machines and abuse out. We do not sell or rent your data. We do not use your data to train AI models.

Who sees what

• Your figures are seen by you, by the people you invite to your account (an employee only for the restaurants he is given), and by the people and software on our team who run your account. No other member sees them.
• In the community, your restaurant's name is never shown. A post signed with your nickname shows your nickname, your photo if you added one, and leads to your member page with what you chose to fill in. An anonymous post shows where you are and what you sell, never your name or your photo. A post is read by members; a post you make public, and its replies, can be read by anyone, including through search engines.

Emails, LINE and notifications

• Emails your account needs: your sign-in link and code, letters about your orders and your figures, and a few letters about your next step (for example, in your first week, at most three short letters about a step you have not taken yet). The letters about your account also appear in its notifications.
• The community's weekly letter goes to a member who has been away for a week while something new was posted. Every letter carries a link that stops it, and your profile has the same switch.
• The Monday email with your figures is sent only if you ask for it, and you stop it from the same place.
• The newsletter is off until you tick it.
• LINE: messages reach you on LINE only if you link your LINE account to Kontimo, only about the moments you choose, and three a day at most. You can unlink at any time; removing us as a friend on LINE unlinks you too.

Third parties we use

We rely on a small set of vendors to operate:

• Stripe, payment processing. Stripe receives your name, email, payment details, and billing address. See Stripe's privacy policy.
• Cloudflare, hosting (Cloudflare Pages), the database and file storage of your account (Cloudflare D1 and R2), CDN, DNS, and basic security logging. See Cloudflare's privacy policy.
• Our email provider, which sends the emails described above.
• GitHub, where the software that collects your Grab figures runs.
• LINE, only if you link your LINE account: our messages to you pass through LINE's own service.
• No font CDN. Our typefaces are served from this site, so loading a page makes no request to Google Fonts or any other font host.

Cookies

We use only strictly necessary cookies: the session cookie that keeps you signed in to your account (it lasts 30 days and is renewed while you use the account), and, for example, a cookie that keeps a checkout session active. Your browser also remembers a few display choices on your own device (such as a folded menu), which never reach us. We do not set tracking cookies, advertising cookies, or third-party analytics cookies. Because of this, we don't need a cookie consent banner under GDPR and ePrivacy rules. You can block all cookies in your browser and the public pages will still work; signing in to your account needs the session cookie.

Security

Your figures and files are stored encrypted at rest on Cloudflare (D1 and R2) and sent over a secure connection. The address we use on your Grab account belongs to your restaurant alone, and its login is kept confidential, used only by the people and software that run your service. A sign-in link or code works once; a wrong code closes every open link and code for that address.

Your rights (GDPR & CCPA)

Depending on where you live, you have the right to: access the data we hold about you, correct it if it's wrong, delete it, port it to another service, restrict how we use it, and object to certain uses. California residents also have the right to opt out of the "sale" of personal information. We don't sell personal information, so this opt-out applies by default. You can close your client account yourself from its Settings. To exercise any of these rights, email [email protected] or [email protected]. We'll respond within 30 days.

Data retention

We keep your data only as long as we need it:

• Purchase records (including email): 7 years, to comply with US tax and accounting rules.
• Reports, plans and other deliverables we gave you: 7 years after the end of our relationship, as proof of the work done and for accounting and legal rules; a person's name inside one (your manager, your staff) is kept with it for the same time, then deleted.
• Support emails: 24 months from the last reply.
• Server logs: 30 days, then automatically purged by Cloudflare.
• Sign-in links and codes: each works once and expires within minutes.
• The hash of a sign-up's connection: deleted after a day.
• Your customers' personal data: never kept. It is removed when we collect your Grab files, before anything is stored.
• Your client account and your restaurant's data: kept while your client account is open, to analyse your account and deliver your services. When you close it, deleted, except the purchase records above and a version that no longer identifies you or your restaurant, used only for statistics.
• What you posted in the community: stays when you close your account, signed as a former member, with nothing that ties it to you; your photo is deleted.

Children's data

The Site and products are intended for restaurant operators and professionals. They are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us data, email us and we'll delete it.

International transfers

We are based in the United States, and our vendors (Stripe, Cloudflare and the others listed above) operate globally. If you access the Site from outside the US, your data will be transferred to and processed in the US and other countries. We rely on the standard contractual safeguards offered by these vendors for international transfers under GDPR.

Changes

We may update this policy from time to time. The "Last updated" date at the top will always reflect the latest version. Material changes will be flagged on the Site before they take effect.

Contact

For any privacy question, including data access or deletion requests, email [email protected] or [email protected].