Sensei

Privacy Policy

Last updated 8 October 2026

Sensei is an operations and finance application that Moola Inc. ("Moola", "we", "us") builds and runs for Hello Nori Inc. and its restaurants ("Hello Nori"), at asksensei.app. It is not offered to the public: Hello Nori head office creates every account, for its own staff. This policy explains what information Sensei holds, why, and what you can do about it.

The restaurants' sales, staff and accounting information belongs to Hello Nori. Moola handles it only on Hello Nori's behalf, to provide Sensei.

1. Information Sensei holds

  • Your account. Your work email address, your role, the restaurants you may see, and when you signed in. Your password is passed to our sign-in provider, Supabase, which stores it only in hashed form. Sensei never stores it.
  • Restaurant sales. From Hello Nori's point-of-sale system, Auphan: sales by category, order type and time of day, bills and guests, discounts, taxes, tips, and how bills were paid. Sensei never requests customers' names, contact details or addresses.
  • Card payments. From Clover: each card payment's amount, tip, card type and time. Cardholder names and card numbers are discarded before anything is stored.
  • Staff labour. From Hello Nori's scheduling and payroll system, PUSH Operations: employees' names and employee numbers, positions and departments, hours worked, clock-in and clock-out times, and labour cost. Sensei never collects Social Insurance Numbers, birth dates, home addresses or personal phone numbers.
  • QuickBooks Online. When head office connects a restaurant's QuickBooks Online company: that company's id and name, and access tokens, encrypted. See section 3.
  • Documents. PDF templates head office adds to Sensei's document library.
  • Cookies and browser storage. These are:
    • a sign-in session cookie;
    • a cookie holding your browser's time zone, so dates follow your calendar;
    • a short-lived cookie while a QuickBooks connection is being made;
    • your light or dark theme choice, in your browser's own storage.
    Sensei uses no advertising or analytics cookies, and doesn't track you on other sites.

2. How it is used

  • To show Hello Nori's managers how each restaurant is doing: sales, labour against sales, targets and weekly briefs.
  • To close each restaurant's day: check the point-of-sale figures against card payments and, when a head-office user asks, post the day's sales to that restaurant's QuickBooks Online company.
  • To keep accounts secure, and to record who reviewed or posted what.

We don't sell information, use it for advertising, or use it to make automated decisions about anyone. Weekly briefs count staff; they never name them.

3. QuickBooks Online

  • Sensei asks Intuit for access to accounting data only (the com.intuit.quickbooks.accounting scope), never for payments or payroll.
  • It creates one invoice per restaurant per business day: the day's sales, discounts, gift cards, tips and sales tax, marked paid. It does so only when a head-office user presses Post, and never more than once for the same day.
  • To build that invoice correctly, it reads the company's products and services, tax codes, tax rates and the restaurant's point-of-sale customer, and checks the invoice isn't already there. It uses what it reads for that post and doesn't keep it. It keeps a record of each invoice it posts: its number, total, tax, and who posted it and when.
  • QuickBooks data is used only to keep that restaurant's own books. It is never shared with anyone else or used for anything else.
  • Access tokens are encrypted with AES-256 before they are stored, with a key kept apart from the database, and they never reach a browser.
  • When a QuickBooks request fails, Sensei logs what failed, for which restaurant, and Intuit's reference for the request, in its hosting provider's logs, so a problem can be traced with Intuit's support. Tokens are never logged, and the logs are kept only for a limited time.
  • You can disconnect at any time, either on Sensei's Finance page, under QuickBooks, or in QuickBooks Online under connected apps. Disconnecting in Sensei deletes the tokens and revokes them at Intuit. Disconnecting in QuickBooks stops them working at once, and head office then removes the connection in Sensei.

4. Who it is shared with

Only with the service providers that run Sensei, each under its own security and privacy commitments:

  • Cloudflare, which hosts the application and serves its pages, and runs Turnstile, the check at sign-in and at a password change that you're a person and not an automated attack. It uses signals from your browser for that check alone.
  • Supabase, which hosts the database and handles sign-in.
  • Intuit, which receives the invoices Sensei posts, once a restaurant's QuickBooks Online company is connected.

Sensei receives data from Auphan, Clover and PUSH Operations, and sends them nothing but its requests for that data. We disclose information otherwise only where the law requires it.

5. Where it is stored

Sensei's database is in Canada, in the Amazon Web Services Canada (Central) region, run by Supabase. Pages are served through Cloudflare's global network, so a request can pass through a Cloudflare location outside Canada.

6. How long it is kept

  • Accounts: while you work with Hello Nori. When an account is deactivated, its record is kept so that past reviews and posts stay attributed.
  • Sales, payment and labour records: as long as Hello Nori needs them to run its business and meet its record-keeping obligations.
  • QuickBooks tokens: only while a restaurant is connected.
  • Records of posted invoices: kept as the record of what Sensei sent to QuickBooks.

7. Security

Sensei is served over HTTPS only. QuickBooks tokens are encrypted at rest. Every request is checked on the server against the user's role, and a user sees only the restaurants their role includes. Accounts are created by Hello Nori head office, never by sign-up, with a starting password that must be changed at first sign-in.

8. Your rights

Under Canadian privacy law, you can ask what personal information Sensei holds about you and ask for it to be corrected. Write to support@moola.com. We work with Hello Nori, which is responsible for its staff's information, and will answer within 30 days. If you're not satisfied with the answer, you can contact the Office of the Privacy Commissioner of Canada, or your province's privacy commissioner.

9. Changes

Any change is posted here, with a new date at the top.

10. Contact

Moola Inc., support@moola.com