Terms of service

stya terms of service

Version 2026-10-28

The Indonesian text of these terms prevails for parties in Indonesia (section 27).

These terms are the agreement between you, the venue, and stya for the use of the stya app. stya is one app for restaurant and café staff. It covers the till, the waiter pad, shifts and the venue's admin on iOS, Android and in Chrome. The privacy notice says what data stya handles and is part of what you accept here.

1. Who is who

• stya is published by Kenneth Johannes Fang, an individual developer in Jakarta, Indonesia. Contact for anything in these terms, support included: privacy@stya.app.
• The venue (also "you") is the restaurant, café or other business that registers with stya. Where a person registers a business, "you" means that business.
• Active describes a venue's account while it is on a paid plan or in its 30-day trial, including the 7 working days of grace and any read-only freeze (section 8). The service ends when the venue cancels, or when stya ends it after the freeze (section 25).
• Your staff are the people the venue lets sign in.
• The service is the stya app, its web build, its servers and anything stya adds to them, including add-ons and the in-app assistant, Tya.

2. Accepting these terms

You accept these terms when you register a venue or when anyone signs in to a registered venue for the first time. The person who registers or accepts for a business confirms that they are at least 18 years old and have the authority to bind that business. If they do not, they bind themselves.

Accepting in the app or on the web, by ticking a box, pressing a button or signing in, is a valid signature for these terms and binds the business. stya records the acceptance with its date and time, the account and the version of the terms. That record is evidence of the acceptance.

stya is for businesses. These terms assume you use the service for your trade and not as a private consumer.

3. Accounts and security

The venue's owner decides who gets an account and what each person can do. Staff sign in with a PIN, a password or both.

• Keep PINs and passwords secret. Do not share a login between people.
• The venue answers for everything done under its accounts, including by staff, until it removes the account or tells stya the login is compromised.
• Remove people who leave. stya cannot know that a person has left.
• Tell privacy@stya.app at once if you think a login or a paired till is in the wrong hands. stya can lock it.

4. Acceptable use

Do not use the service to break the law, to harm others or to harm the service. In particular, do not:

• try to read another venue's data or get round the access rules;
• reverse engineer the app, copy it, or build a competing product from it;
• overload or probe the servers, or run automated scripts against them without stya's written agreement;
• put in data you have no right to hold, or malware;
• resell or sub-license access to the service without stya's written agreement;
• use the scoring add-on (the leaderboard, automatic scoring and the two mahjong switches) for gambling or betting. The venue's owner ticks this declaration in the app, at sign-up or before the venue first switches one of those features on: "I declare that this place is not used for gambling or betting." The switches stay off until it is ticked. stya records who ticked it, when, and from which address and browser. The declaration is part of these terms.

stya may remove content or suspend access that breaks this section. It tells the venue why unless the law forbids it.

5. The service and offline mode

stya runs the till, the waiter pad, shifts and the venue's admin. It tries to keep the service running and gives no guarantee of uptime. stya may change, add or remove features. Where a change removes a feature you pay for, section 10 applies.

A device keeps working without a connection. While it is offline, what staff enter lives on that device only and reaches the server when the connection returns. If the device is lost, wiped, damaged or has the app removed before then, stya cannot recover those entries. The venue is responsible for connecting each device regularly and for not clearing the app while entries wait to sync. The app shows when entries are waiting.

6. Third-party services

The service works with services that stya does not run, among them the payment providers Midtrans and DOKU, banks, the app stores and the hosting and infrastructure providers listed in section 21. Their own terms apply to what they provide. stya is not a payment provider, does not hold your money and is not responsible for what they do or fail to do.

QRIS payments go from the customer to your account with the provider. The merchant discount rate (MDR) on a QRIS payment is the merchant's cost. Bank Indonesia's rules do not allow the merchant to pass it on to the payer, so the venue must not add it to a customer's bill.

7. What stays with the venue

The venue is the business that sells to its customers. It alone answers for:

• its prices, menu, discounts and promotions;
• its taxes and its tax settings in the app, including any tax it must charge its customers. stya's receipts and reports are tools, and the venue checks that they match its tax duties;
• its receipts and invoices to its customers;
• refunds, voids and complaints from its customers, and the accuracy of what staff enter;
• the licences and permits its business needs.

8. Fees, renewal, price changes and non-payment

• The price of each plan and add-on is shown in the Chrome build when you buy. Prices are in Indonesian rupiah. stya is not registered as a Taxable Entrepreneur (PKP) and does not charge or collect PPN; the price shown is the full amount payable and no Faktur Pajak is issued. If stya becomes a PKP, PPN applies to invoices from the tax period the registration takes effect, and stya tells the venue in writing 30 days before the first invoice that carries PPN. Venues outside Indonesia: stya charges no UK VAT; a UK business venue accounts for any VAT under the reverse charge.
• You pay in the Chrome build by virtual account, QRIS or bank transfer with a payment slip, whichever stya offers there. The iOS and Android apps show the plan and invoices but do not sell.
• stya's free trial is the one the app shows for a new venue, with its end date in the plan screen. The trial lasts 30 days. No other trial or free period exists unless a plan or an order names it in writing. When a trial ends, the service stops being free: the venue picks a plan or the account is frozen as described below.
• A plan renews every month and keeps renewing until the venue cancels. Cancelling takes effect at the end of the paid month.
• stya gives 30 days' notice of a price change, by email and in the app. If you do not accept the new price, cancel before it starts. The old price applies until then.
• If an invoice is not paid by its due date, stya waits 7 working days. After that stya may freeze the account. A frozen account is read-only: staff cannot take new sales, but the venue can still read and export its data. Paying the invoice lifts the freeze. A freeze that lasts 30 days ends the service under section 25.
• Storage above a plan's allowance is charged as section 9 says.
• The venue's own taxes and charges on its sales are the venue's (section 7).

9. Fair use and limits

Each plan is priced for the size of the operation it serves. The limits below keep the service steady for every venue. They apply on top of the fees in section 8.

9.1 What each plan includes

Each plan sets how many tills can sell at the same time and how much storage the venue has for photos, files and its records.

Plan	Tills selling at once	Storage
Basic	1	3 GB
Plus	3	15 GB
Pro	fair use	40 GB

Rental plans without food and beverage have no Basic plan. Their Plus plan includes 10 GB and their Pro plan 30 GB. The price list on the stya pricing page shows the same figures.

Staff accounts on every plan, the tills on Pro and the screens (kitchen boards, customer displays and TV boards) are under fair use. Fair use means a number that makes sense for one venue of that size. A venue adds the staff accounts its operation needs. Kitchen boards, customer displays and TV boards only show information, so they never count as a till. Waiter pads and the phones of the owner and managers in Kelola do not count either. If a number is far out of proportion to the venue, stya first contacts the owner as section 9.4 describes and takes no other step before that.

9.2 A second till

When every till in the plan is in use, the next device that opens the till asks to take over, and the device it replaces locks. The owner or a manager can free a till from Kelola. A sale rung while a device was offline is saved when that device reconnects.

9.3 Storage

The allowance counts the venue's files and its share of the database together, and the owner sees one figure in Kelola. stya tells the owner by email and in Kelola when the venue reaches 80% of the allowance and again at 100%.

Storage above the allowance costs Rp5.000 per GB per month, counted in whole GB. The first charge comes on the bill after one full period over the allowance. After 30 days over the allowance, stya may refuse new photo uploads until the owner frees space or pays for the extra. Sales, payments and records are never blocked or deleted because of storage.

9.4 Daily usage budget

Each venue has a daily usage budget of 50,000 API requests and 6,000 live updates. stya reviews these figures every quarter against measured use.

If a venue goes over its budget for several days, stya first checks whether a fault on its own side caused it. It then contacts the owner, shows the numbers and asks the venue to use less. After giving at least 7 days' notice, stya may slow the screens that do not take money, such as the TV board, report refresh and background photo sync. The till, payments and receipts are never slowed or stopped. A venue that still needs more after that conversation is offered a custom contract with its own budget.

9.5 Your own domain

On the plans that include it (Pro), stya connects the venue's own domain to its pages. The venue buys the domain from any registrar, renews it there and holds it in its own name. stya sells no domains. If the venue lets the domain lapse or moves it, the connection stops working until the venue fixes it.

9.6 How stya charges

stya takes no percentage of a venue's sales on any payment path. The price of a plan does not depend on the number of devices.

9.7 Abuse

Automated scraping, reselling access, load tests and attacks fall outside fair use, and stya may stop them at once. Section 4 applies as well.

9.8 Changing these limits

stya announces a change to these limits 30 days ahead, by email and in the app. A period already paid for keeps its limits until it ends.

10. Refunds

Fees for a paid period are not refunded, except when stya decides to refund them at its own discretion, or when stya ends the service without cause under section 25 and refunds the unused part of the paid period in proportion to the days left. Cancelling by the venue does not give a refund of the current period.

11. Hardware

stya does not sell hardware today. This section applies only if and when stya does.

• Unused hardware can be returned within 30 days of delivery for a refund of its price.
• Hardware has a 12-month warranty from delivery against defects in materials and workmanship. stya repairs or replaces a defective unit. The warranty does not cover damage from misuse, liquids, drops or repair by anyone else.
• Terms for a particular order, shown at the time of the order, add to this section.

12. Preview and beta features

stya may label a feature "preview" or "beta". Such a feature may be incomplete, may change or disappear without notice and has no support commitment. Use it at your own risk, and do not rely on it for the venue's records.

13. The in-app assistant

The assistant answers questions and prepares suggestions. It sends the question and the context it needs to an AI provider (see section 21). Its answers can be wrong or out of date. The person who asks must check an answer before acting on it, and a person confirms every action. Do not put in data you may not share with the provider. The assistant does not decide anything about a person.

14. Intellectual property and licence

stya and its content, design, code and marks belong to stya's publisher or its licensors. While these terms run, stya gives the venue a limited, non-exclusive licence that cannot be transferred, to use the service for its own business. Nothing else passes to you.

The venue keeps all rights in its own data, menu, logos and content (section 15). It gives stya the right to host, copy and process them only as far as needed to run the service for the venue.

Feedback and suggestions sent to stya may be used by stya without payment or credit.

15. Venue data and the data processing agreement

The venue is the controller of the personal data of its customers and staff that stya keeps for it. stya is the processor. This section is the data processing agreement between them.

Subject, duration and kind. stya keeps and processes the venue's data to run the service for as long as the service runs, plus the wind-down in section 25. The data are the staff, customer, booking, member, sales and device data described in the privacy notice. The data subjects are the venue's staff, members, booking guests, board players and customers.

Instructions. stya processes the venue's personal data only on the venue's documented instructions, which are these terms and what the venue does in the app. That includes transfers of the data to another country. If the law requires stya to process the data otherwise, stya tells the venue before it does so, unless that law forbids it. stya also tells the venue at once if it thinks an instruction breaks the law. The venue answers for processing done on its instructions. stya answers for any processing it does outside the venue's instructions and purposes.

Confidentiality. Everyone at stya who can reach the data is bound to keep it confidential.

Security. stya keeps the measures the privacy notice describes (encrypted connections, hashed PINs, access rules that separate venues) and keeps them at a level that suits the risk, as Article 32 of the UK GDPR requires.

Sub-processors. By accepting these terms the venue agrees in writing to the processors in section 21. Before stya adds or replaces one, it asks the venue for written consent, by email and in the app, at least 14 days ahead. The venue gives consent by saying yes, or by not objecting in writing within those 14 days. If the parties cannot settle the objection, the venue may end the service under section 25. stya binds each sub-processor to terms that protect the data to the same standard and stays responsible to the venue for them.

Help with rights. If a person asks stya for access, correction, deletion or another right over data stya holds for a venue, stya passes the request to the venue. stya helps the venue answer, within the limits of what the app can do. stya also helps the venue meet its duties on security, on telling the authority and people about a breach, on impact assessments and on consulting the authority, as far as the nature of the processing and the information stya holds allow.

Breaches. stya tells the venue within 3 x 24 hours of learning of a breach that puts the venue's personal data at risk, and says what is known: what data, when, how and what is being done. The venue is responsible for telling the authority and the people affected.

Deletion or return. When the service ends, the venue chooses whether stya returns its data or deletes it, and stya deletes the copies that remain. Section 25 says how the venue exports its data and when stya deletes it. stya keeps a copy longer only where the law requires.

Audit. stya gives the venue all the information it needs to show that this section is followed, and allows and helps with audits, inspections included, by the venue or an auditor it appoints, on 30 days' written notice, no more than once a year unless a breach has happened. The venue pays for its own audit.

Transfers. Section 21 and the privacy notice say where processors work and what safeguards apply.

The venue's duties. The venue has a lawful basis for the data it enters, tells its customers and staff what it does with their data, collects the consent it needs (for example for photos of mahjong hands) and gives stya lawful instructions.

16. Warranties disclaimer

The service is provided as it is and as available. To the extent the law allows, stya gives no warranty that the service contains no errors, always available, suits a particular purpose, or that its calculations, receipts and reports meet the venue's tax or legal duties. The warranty on hardware in section 11 is the only warranty stya gives.

17. Limit of liability

To the extent the law allows:

• stya is not liable for indirect or consequential loss, lost profit, lost revenue, lost sales, or loss or corruption of data, however caused; and
• stya's total liability to the venue for everything arising from these terms and the service is limited to the fees the venue paid stya in the 12 months before the claim arose.

Nothing in these terms limits or excludes stya's liability for death or personal injury caused by its negligence, for fraud or deceit, for loss it causes on purpose or in bad faith, or for any other liability that the law does not allow to be limited or excluded. Indonesian law requires every contract to be performed in good faith (Civil Code, Pasal 1338(3)), and takes deceit outside the limit on foreseeable loss (Pasal 1247). The limit is flat and does not reset per claim.

18. Indemnity by the venue

The venue pays stya for loss, claims and costs (reasonable legal fees included) that a third party brings against stya because of the venue's breach of these terms, the data or content it put into the service, its tax and receipt duties, or its dealings with its customers and staff. stya tells the venue promptly of the claim and lets it take part in the defence.

19. Force majeure

Neither side is liable for failing to perform because of an event outside its reasonable control: natural disaster, fire, war, riot, strike, power or internet failure, a failure of the hosting or payment providers, or an order of the authorities. A payment already due stays due. If the event lasts more than 30 days, either side may end the service by notice.

20. Privacy

The privacy notice says how stya handles personal data in its own right as controller. Section 15 covers the venue's data.

21. Processors and sub-processors

stya uses these processors for the venue's data.

Provider	For	Where it processes
Supabase	database, sign-in, file storage	Singapore
Cloudflare	web hosting, archive storage	global network
Expo	app updates, push notifications to phones	United States
Midtrans, DOKU, bank SNAP services	QRIS payments	Indonesia (Midtrans may also process outside Indonesia)
Resend	email	United States
Discord and GitHub	internal alerts about crashes	United States
Anthropic, Google, Groq	the in-app assistant	see the privacy notice

The privacy notice carries the detail and the transfer safeguards.

22. Notices

stya sends notices to the email address of the venue's owner account and may also show them in the app. The venue sends notices to privacy@stya.app. A notice counts as given when it is sent. The venue keeps its contact email current.

23. Assignment

The venue may not transfer its rights or duties under these terms without stya's written agreement. stya may transfer them to a company that takes over the service, on 30 days' notice to the venue.

24. Changes to these terms

stya gives 14 days' notice of a change to these terms, by email and in the app, and the date at the top changes with it. If you do not accept the change, cancel before it takes effect. Using the service after that date means you accept the new terms. A change does not alter a price before the 30 days' notice in section 8 has run.

25. Term, ending the service and your data

These terms run from registration until the service ends.

• The venue may cancel at any time (section 8).
• stya may end the service for a serious or uncured breach by notice, after a freeze of 30 days (section 8), and at once for illegal use or a threat to the service or to other venues. stya may also end the service without cause on 30 days' notice, in which case section 10 gives a pro-rata refund.
• Section 19 lets either side end the service, and section 15 lets the venue end it over a sub-processor.

Your data after the service ends. From the end date the venue's data is read-only for 30 days, and the venue exports it in that time through the app's export tools. After the 30 days stya deletes the venue's data, including its change-history archive, except where the law requires stya itself to keep something or a legal claim is open. Nightly backups made before then are gone within 14 days after that.

Sections that by their nature outlast the end (fees owed, 10, 14 to 18, 25, 27 and 28) stay in force.

26. Whole agreement, precedence and general terms

These terms, the data processing agreement in section 15, the privacy notice and any order stya accepts from the venue are the whole agreement and replace everything said or written before about the service. If they conflict, the order of precedence is: the data processing agreement for personal data, then an order stya has accepted in writing, then these terms, then the privacy notice.

If one part is found invalid, the rest stays in force. A side that does not enforce a right at once has not given it up, and a waiver counts only if it is written. These terms make no partnership, joint venture, employment or agency between stya and the venue, and neither side can bind the other.

27. Language

These terms exist in Indonesian and in English. Where they differ, the Indonesian text prevails for parties in Indonesia and the English text for any other party.

28. Governing law and disputes

Indonesian law governs these terms. A dispute starts with written notice to the other side and 30 days of good-faith talks. If the talks do not settle it, either side may bring it to the Badan Arbitrase Nasional Indonesia (BANI) in Jakarta. One arbitrator hears it under BANI's rules, in Jakarta, in Indonesian, or in English where the venue is not an Indonesian party. The award binds both sides. Either side may ask a court for urgent protection that cannot wait for the arbitrator.