Café privacy policy

Last updated 5 October 2026

DRAFTThis policy is a draft and must be reviewed by a lawyer before launch. Items in [BRACKETS] still need completing.

1Who we are

Cuplio for Cafés is operated by [COMPANY NAME] (ABN [ABN]). This policy explains how we handle personal information about café owners and staff who use the app. How we handle customers’ information is in the Cuplio privacy policy.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2What we collect

  • Your name and email address, and your password (stored only as a secure hash). We email one-time codes to confirm your address or reset your password.
  • Your café’s details: name, address and map position, phone, opening hours, social links, logo, photos, menu, stamp cards and campaigns
  • Till activity: stamps, rewards, gifts, undos and corrections made on your café account
  • Orders, table bookings and messages between your café and its customers (Pro)
  • Your Stripe account’s ID and whether it can take payments (Pro). Your bank and identity details stay with Stripe.

Your owner PIN never leaves the device: it is kept there as a secure hash.

3How we use it

  • To run your café account, your loyalty cards, orders and bookings
  • To show your café, its details, menu and messages to customers in the Cuplio app
  • To send you service emails, such as sign-in codes and reminders before your free month ends
  • To keep Cuplio secure and to fix problems

4What customers see

Your café’s name, address, opening hours, phone (if you choose to show it), logo, photos, menu, stamp cards, campaigns, social links and the messages you send are shown to Cuplio members, and may appear on this website.

5Who we share it with

We use service providers to run Cuplio, including Supabase for hosting (data stored in Sydney, Australia), Stripe for card payments, and an email provider for sign-in codes [NAME THE PROVIDER]. When you tap Find to put your café on the map, the address you typed is sent to OpenStreetMap’s search service.

We do not sell personal information.

6Storage and security

Information is encrypted in transit and protected with access controls. We keep it while your account is open and as required by law, then delete or de-identify it. [RETENTION PERIOD]

7Access, correction and deletion

You can update your café details in Settings at any time, and delete your café account in Settings › Account › Delete café account. To ask for a copy of your information or a correction, contact us.

8Contact and complaints

Email quokkasupport@gmail.com or call 0414 093 339. We aim to respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au.