Privacy Policy

Who we are

This policy explains how the service collects and uses data. It covers cafés and other businesses that use the service ("businesses") and their customers who follow an order ("customers").

What customers give us

Nothing about who you are. You do not need an account, name, phone number or email. When you follow an order we keep a random link to that one order in your browser and, only if you switch alerts on, the address your phone gives us for notifications. A business may choose to type a first name on an order; it is shown only to that business and to you.

What businesses give us

Name, work email, phone, city, branch details, staff names and emails, invoices and payment records, and the staff activity needed to run the service and keep it secure.

People who request a demo

If you fill in the "Request a demo" form on our website, we receive your name, email and, if you give them, your business name, phone number and message. We use them only to reply to you and arrange the demo (legitimate interest, and steps before a possible contract). They are deleted automatically 12 months after you sent the form, or earlier if you ask.

Why we use it and our legal basis

To run the service you or your business asked for (contract), to keep it secure and prevent abuse (legitimate interest), to meet tax and accounting rules (legal obligation), and for alerts you switch on (consent, which you can withdraw by turning alerts off).

How long we keep it

Following an order: the link in your browser stops working after 12 hours, or at once if you tap "Change number" or "Delete my data" (which also deletes your alert subscription immediately). A timer that runs every minute deletes alert subscriptions, phone links and receipt checks automatically about one hour after the order is collected, cancelled or expires — always within 24 hours. The record of the order itself (its number, status, times and any first name or items the café typed) is deleted automatically after 30 days, or after the period the café chose (7 days to 1 year); only a daily summary per branch with counts and average times, which contains no personal data, is kept. Business and invoice records are kept as long as the account is active and as long as tax and accounting law requires. Our hosting providers keep technical logs for a limited time; we do not put tracking links, codes or alert addresses in them.

No tracking

There are no advertising tools, cross-site trackers or third-party analytics on customer pages. We use only storage that is strictly necessary for the service to work.

Who else handles data

Service providers listed on our sub-processors page act only on our instructions.

Transfers outside your country

Our servers are in the European Union (Frankfurt). Some providers may process data elsewhere under standard contractual protections.

Your rights

You can ask to see, correct, delete or receive a copy of your data, or object to how it is used. Use the privacy request page, or email us. We answer within 30 days. You can also complain to your data protection authority.

Children

Customers do not have to give any personal data, so we do not knowingly collect data from children.

Changes

We will publish changes here with a new version and date, and ask businesses to accept important changes again.

Change history: 25 October 2026 — automatic deletion of old orders (30 days by default) and of phone links within 24 hours of an order closing. 24 October 2026 — first version.