Privacy Policy — Kaffee 28

1. Information We Collect

1.1 Public users

• Account information: name, phone number, email, and password supplied at signup.
• QR code scan data: QR codes scanned to save or redeem points.
• Transaction data: point-saving history and redemption history.
• Device & usage data: device type, operating system, basic app usage and analytics.

1.2 Coffee Shop Owners

• Business information: shop name, address, contact details, logo, and profile details.
• QR code activity: QR codes you generate and related usage.
• Customer records: details of customers linked to your shop based on scans.
• Account information: name, phone number, email, and password.
• Device & usage data: device type, operating system, analytics.

2. How We Use Your Information

We use the information we collect to operate, provide, and improve the App and related services. Examples include:

For Public Users

• Create and manage your account.
• Allow scanning of QR codes to save or redeem points.
• Display point balances and histories.
• Improve app performance, security, and user experience.

For Coffee Shop Owners

• Create and manage shop profiles and generate QR codes.
• Track customer usage and linked customer activity.
• Manage point-saving and redemption transactions.
• Provide business tools and analytics to shop owners.

3. Sharing of Information

We do not sell your personal data.

We may share information in the following limited scenarios:

• With Coffee Shop Owners: when you scan a shop’s QR code, the shop may see relevant activity (e.g., that you earned or redeemed points).
• With service providers: third parties that assist with hosting, analytics, customer support, or payment processing under contract and confidentiality obligations.
• For legal reasons: where required by law or to respond to lawful requests from public authorities.

Note: Your data is not shared for advertising purposes.

4. Data Security

We implement reasonable administrative and technical safeguards to protect your information from unauthorized access, disclosure, alteration, and destruction. Examples include access controls, encrypted storage for sensitive fields, and secure communication channels.

However, no internet service can be completely secure. While we work to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain personal information for as long as necessary to provide the App services, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we will remove or anonymize your data according to our retention rules.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and personal data.
• Request a copy of your data in a portable format.

To exercise these rights, contact us using the information in the Contact section below.

7. Use by Minors

Kaffee 28 is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If a parent or guardian believes we have collected such information, please contact us to request deletion.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy in the App and update the “Last updated” date at the top of this document.

9. Contact Us

If you have questions or requests about this Privacy Policy or your data, please contact us: