Privacy Policy
This Privacy Policy explains how NY Caffeine ("we", "us", "our") collects, uses, and protects your information when you use the NY Caffeine mobile app and related customer services. It applies to customers of NY Caffeine. By creating an account or placing an order, you agree to the practices described below.
1 Information We Collect
We only collect the information needed to run your account, complete your orders, and improve your experience.
Account information
- Your name, email address, and phone number — used for sign-in, OTP verification, and order updates
- Password, stored only as a one-way hash (we never see or store your plain-text password)
- Profile picture, if you choose to upload one
Order & activity information
- Items you order, cart contents, and order history
- Favourites and loyalty / reward activity
- Order notes, pickup or delivery preferences, and selected branch
Payment information
- Card details are entered directly into our payment partner Stripe's secure interface. NY Caffeine does not see or store your full card number, CVV, or expiry.
- After a successful payment, we store only the card brand (e.g. Visa) and the last 4 digits, plus a Stripe charge reference, so you can identify the order on a receipt or for a refund.
- If you pay with Apple Pay or Google Pay, the transaction is handled by Apple / Google and Stripe — we receive the same limited summary above.
Location information
- With your permission, we use your device location to show nearby branches, estimate delivery, and pre-fill addresses.
- You can revoke location access at any time from your device settings. The app will continue to work — you will just need to choose a branch manually.
Device & diagnostic information
- Device model, operating system, and app version
- Push notification token, used to deliver order and promotional notifications
- Basic diagnostic data to monitor performance and fix bugs
2 How We Use Your Information
- To create and secure your account, including sending OTP codes and password-reset emails
- To accept, prepare, and deliver your orders
- To process payments and issue refunds where applicable
- To send order updates (preparing, ready, out for delivery, delivered) by push notification and email
- To operate our loyalty and rewards program and personalize your favourites
- To improve the menu, the app, and the overall service based on aggregate usage patterns
- To prevent fraud, abuse, and to comply with our legal obligations
3 Service Providers We Share Data With
We do not sell, rent, or trade your personal data. We share only what is necessary with trusted providers that help us operate the app:
| Provider | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing & fraud prevention | Order amount, card details you enter, billing info |
| Apple Pay / Google Pay | Wallet-based payments | Handled directly by Apple / Google |
| Google Maps | Maps, geocoding, and place lookup | Approximate device location and search queries |
| Firebase Cloud Messaging | Sending push notifications | Device push token |
| Cloudflare R2 | Storing profile images and menu media | Images you upload |
| Pusher | Realtime order status updates | Order ID and status events (no personal details) |
| Email (SMTP) | Account verification and password reset | Email address and verification code |
We may also disclose information when required by law, in response to a valid legal request, or to protect the rights and safety of NY Caffeine, our customers, and the public.
4 Data Retention
- Account and order history are kept for as long as your account is active, and afterwards as required for tax, accounting, and dispute-resolution purposes.
- Payment metadata (card brand and last 4 digits) is retained with the order record for receipts and refunds.
- Diagnostic data is retained only as long as needed to troubleshoot the app.
5 Security
We apply industry-standard safeguards to protect your data, including encrypted transport (HTTPS / TLS), hashed passwords, scoped API access, and payment handling by PCI-DSS certified processors. No system is 100% secure — we encourage you to use a strong password and to keep your device protected.
6 Your Rights & Choices
- Access & update — view and edit your profile from inside the app at any time.
- Delete — request deletion of your account and associated personal data by emailing us. Certain records (e.g. paid orders) may be retained where required by law.
- Notifications — turn push and promotional notifications on or off from your device settings or in-app preferences.
- Location — grant or revoke location permission from your device settings.
- Marketing — opt out of promotional emails using the unsubscribe link in any such message.
7 Children's Privacy
NY Caffeine is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
8 International Users
The app and its services may be operated from, and your data processed in, jurisdictions other than your own. By using NY Caffeine you consent to the transfer and processing of your information in those locations, subject to this Privacy Policy.
9 Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" above and, where appropriate, notify you in the app or by email. Continued use of NY Caffeine after an update means you accept the revised policy.
10 Contact Us
For questions, concerns, or data requests, reach us at:
- Email: support@nycaffeine.com