Privacy policy
Last updated 21 October 2026
NCMS runs meal feedback at the sites it serves, through the NCMS app, the table-card page a diner opens by scanning the code on a table, and the NCMS console. This page says what we collect, why, who sees it, and how to delete your account.
What we collect
- The ratings and comments you give about a meal, with the site, the meal and the time.
- If you sign up in the app as an employee of one of our clients: your full name, your company, your staff number, your email and, if you give it, your phone number. We email you a one-time code to confirm the email.
- A password you choose, so you do not have to type the whole form each time you sign in. It is stored only as a one-way hash: nobody at NCMS or at your company can see it or recover it, and it is never in a log or an email. The app on your phone remembers your company and the email or staff number you last used, never the password.
- If NCMS gives you a camp boss or console account: your name, your email or username, and the second sign-in step you set up.
- On the table-card page: a random device identifier in a cookie, so a phone answers a meal once. It holds nothing about you.
- For security, such as stopping repeated wrong sign-ins: a one-way key made from your network address. The address itself is not stored.
We do not collect your location, contacts, photos or advertising identifiers. There are no ads and no tracking.
Why we use it
- To run the surveys and show NCMS and its client companies how each meal is rated.
- To follow up a poor rating: NCMS staff can see the name of the employee who gave a rating and, for a negative rating, the comment, email and phone, so they can reach out.
- To keep accounts and the service secure.
Who sees it
- NCMS staff, each according to their role.
- Your company's managers see results and comments, without your name, email or phone.
- We do not sell personal data or share it for advertising.
- The data is stored on Google Cloud servers run for NCMS. An email delivery service sends the one-time codes.
How long we keep it
Ratings and comments are kept for reporting while NCMS serves the site. Account details are kept while the account exists.
Delete your account
In the NCMS app, sign in, open your account, choose Delete my account and confirm. Your name, email, phone, staff number and password are erased at once and you are signed out. Your past ratings stay, without your name. You can sign up again later as a new account.
You can also ask us to delete it by writing to hossamheiba@yellostack.com from the email on your account. Camp boss and console accounts are closed by NCMS: write to the same address.
Security
Everything travels over HTTPS. Inside the system, access is limited by role and by company.
Children
The service is for staff and diners at the sites NCMS serves. It is not directed at children.
Changes and contact
We update this page when any of this changes, with the date at the top. Questions: hossamheiba@yellostack.com.