Your data stays yours.

One database per restaurant

Each restaurant runs on its own server and its own database, at its own web address. One restaurant's sales, customers and recipes can never mix with another's.

Encrypted in transit and at rest

Your data is encrypted both in transit and at rest. Card payments are processed by our payment gateway, so full card details never touch Bhookly's systems.

Passwords and logins

Passwords are stored hashed, never as text, and repeated login attempts are rate limited. Every person has their own login, and changing someone's password or role logs them out on every device at once.

Eight roles, enforced on the server

Administrator, manager, cashier, waiter, kitchen, kitchen manager, inventory manager and accountant. Each role sees only its own screens, and the server refuses anything outside the role, not only the screen. A waiter cannot open cash reports and a cashier cannot change prices.

Manager PIN on sensitive actions

Voids, full comps, refunds, reopening a closed day, stock write-offs and waste need a manager's PIN, which records who approved. No two managers can share a PIN.

Logs that cannot be edited or deleted

The void log, the day-close log and the tax log cannot be changed or removed. A sale is never deleted: a refund is a credit note with a reason. Closed days are final, and reopening the most recent one needs a PIN and is logged.

Read-only login for your accountant

The accountant role can read reports, expenses and profit and cannot change anything, so you can share the books without sharing the till.

Reliable backups

Your menu, sales and customer data are backed up continuously, so nothing is ever lost.

Offline resilience

In the Windows and Android apps, order taking, kitchen tickets and payment keep working through outages and load-shedding. Orders sync when the connection returns, and anything that cannot sync goes to a manager queue.

Our promise: we never sell your data, and unlike delivery platforms, the customers who order with you stay your customers. You can export your data at any time.