Privacy policy · Cuplio

1Who we are

Cuplio is a digital loyalty card app for independent cafés, operated by [COMPANY NAME] (ABN [ABN]) (“we”, “us”, “our”). This policy explains how we handle your personal information when you use the Cuplio app and this website.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2What we collect

We only collect what we need to run your loyalty cards and the services you use:

Your first name (and last name, if you add it)
Your email address, which you sign in with using a one-time code
Your birthday (day and month), if you choose to add it
Your mobile number, only if you choose to share it with cafés for orders and table bookings
Your visits, stamps, rewards, gifts, orders, table bookings, reviews and messages with cafés
If you allow notifications: a push token for your phone and its time zone, so we can send them at sensible hours

Your location is used on your phone, only while you use the app, to list nearby cafés first. It is not sent to us or to cafés.

Card payments for orders and table deposits are handled by Stripe. We never see or store your card number. [CONFIRM ANY OTHER DATA COLLECTED]

3How we use it

To create your account and sign you in
To record stamps, rewards and gifts on your café cards
To send your orders and table requests to the café, and take payment through Stripe
To send the notifications you have switched on, such as an order being ready or a reward waiting
To show your reviews (with your first name) on the café’s page
To keep Cuplio secure and to fix problems

We don’t use advertising or sell your personal information.

4What cafés see

When you collect stamps at a café, that café can see the name you choose for cafés (your first name, unless you pick your full name or a name you prefer), your member number, your birthday (day and month only, if you add one) and your visits, stamps and rewards at their café.

If you choose to share your phone number for orders and bookings (Settings › Contact for orders & bookings), the café you order from or book with sees it on that order or booking, so they can call or text you about it. Choose “Messages in Cuplio only” and cafés cannot see your number.

Cafés cannot see your email, your full date of birth, your location or your activity at other cafés.

We use service providers to run Cuplio. They may only use your information to provide their service to us:

Supabase, which hosts our database (stored in Sydney, Australia)
Stripe, which processes card payments for orders and table deposits on behalf of the café
Google Firebase Cloud Messaging and Apple Push Notification service, which deliver notifications to your phone
Our email provider, which sends your sign-in codes [NAME THE PROVIDER]

6Overseas disclosure

Some of these providers may process information outside Australia, including in [COUNTRIES, e.g. the United States]. Where this happens we take reasonable steps to make sure your information is handled in line with the APPs.

7Storage and security

Your information is encrypted in transit and protected with access controls. No system is completely secure, but we work to protect your information from misuse, loss and unauthorised access.

We keep your information while your account is open and as required by law, then delete or de-identify it. [RETENTION PERIOD]

8Your choices, access and correction

Update your details any time in Profile › Edit profile.
Switch notifications, café messages, location and quiet hours on or off in Settings.
Ask for a copy of your information (Settings › Privacy › Download my data) or a correction. We usually respond within 30 days.
Delete your account any time in Settings › Delete account. Your cards, stamps and rewards are removed for good.

9Children

Cuplio is not intended for children under [MINIMUM AGE]. We do not knowingly collect personal information from children under that age. If you believe a child has given us their information, contact us and we will delete it.

10Contact and complaints

Questions or a complaint about your privacy? Email quokkasupport@gmail.com, call 0414 093 339, or write to [POSTAL ADDRESS]. We aim to resolve complaints within [X] days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

11Changes to this policy

We may update this policy from time to time. If we make a significant change we will let you know in the app. The date at the top shows when it last changed.