Privacy Policy

The short version

• A shop sees your first name and last initial (John D.) and the last 4 digits of your number (•••• 4567) — never the full number.
• Your number is never stored in readable form, not even by us.
• A shop only ever sees its own orders. No shop sees what you do at another.
• We never sell your data. The services that run Kapelogue process it for us only to run it.

Who holds what

Each coffee shop controls its own orders and customer records. Kapelogue operates the software and the database those records sit in, and decides how they are protected. When you order, you are giving your details to that shop; we keep them on the shop's behalf.

If you order from a shop

When you place an order we store:

• The name you type for the order, so the shop can call it. Staff see a short form of it: “John Doe” shows as “John D.”, and anything that looks like a phone number is never shown.
• Your mobile number, if you give one — it is optional. It keeps your orders and loyalty stamps together, whichever phone you order from. We store a locked fingerprint of it (a keyed hash, made with a secret key kept outside the database) plus its last 4 digits. The number itself is never written down, so it can’t leak and can’t be used to contact you.
• A device cookie: a random id in your browser, so this phone can show your recent orders and offer “Continue as John D.” next time. We store only a scrambled form of it.
• Your orders: what you ordered, the total, any voucher, the table or label you scanned, how you chose to pay, and when. The shop needs these to make your order and keep its books.
• Payment details you choose to add: a reference number, and a screenshot of your receipt. Both are optional — tapping “I’ve paid” is enough. A receipt usually shows your e-wallet name and part of your number, so it is kept private (see below) and deleted after 30 days.

What each shop sees

• your name as an alias, such as “John D.”;
• the last 4 digits of your number (•••• 4567), if you gave one;
• your orders and loyalty stamps at that shop — and only that shop;
• how many devices you have ordered from, never which ones;
• the receipt screenshot, if you upload one. This is the one exception to the alias, because staff need it to confirm your payment. Only the shop’s owner can open it, and only from that order.

A shop never sees your full number, your full name as typed, or anything you did at another shop. The public page for an order shows the alias too.

If you sign in with your number

Signing in is optional. It lets you see all your orders and stamps across every Kapelogue shop. We send a 6-digit code by SMS to the number you type; the code is stored scrambled and expires after 5 minutes. Your account keeps the same locked fingerprint of your number, its last 4 digits, and the display name you choose. The cross-shop view is yours alone.

If you run a shop

We store the account details you give us:

• your name and email address;
• a scrambled form of your password — never the password itself;
• your shop's name, address, logo, look, and the payment details you choose to publish;
• everything you put on your menu, your vouchers and your QR labels.

We use them to sign you in and to run your shop. We do not email you marketing you did not ask for.

Cookies and what stays on your device

• the device cookie described above (one year);
• a sign-in cookie if you sign in with your number (90 days), or as a shop owner;
• a kiosk cookie on a shop’s own ordering tablet, which turns history off there.

Your basket, the table you scanned and the payment method you used last are kept in your own browser’s storage, separately for each shop. None of that leaves your device until you place an order.

There are no advertising cookies and no third-party trackers.

How long it is kept

What	Kept for
Receipt screenshots	30 days after the order is settled
Device links	removed after 12 months unused
Sign-in codes	expire after 5 minutes
Customer records	until you delete them, or ask us to
Orders	kept for the shop’s accounting; if you delete your record, your orders stay in the shop’s books with your name and link removed
Shop accounts	until the owner deletes the shop

Who else touches the data

We use service providers to run the software:

• a hosting provider, which serves the site;
• a managed Postgres provider, which holds the database;
• file storage, for menu photos, logos, payment QR codes and receipt screenshots;
• PayMongo, only when a shop takes payment through PayMongo’s checkout;
• an SMS provider, only to send sign-in codes.

They process data for us, on our instructions, only to run Kapelogue. We never sell your data, and we never share it for advertising.

Your rights

Under the Philippine Data Privacy Act of 2012, you can ask what we hold about you, get a copy, have it corrected, and have it deleted.

• Signed in: do it yourself at My privacy — see what each shop sees, download your data, or delete your account.
• Not signed in: write to hello@kapelogue.app with the mobile number you used, and we will retrieve or delete what is held against it. You can also ask the shop you ordered from.
• Running a shop: to have the whole account gone, write from the email address you signed up with.

If a breach ever puts your data at risk, we will tell you and the National Privacy Commission, as the law requires. You can also complain to the Commission directly.

Children

Kapelogue is for shops and their customers, and is not aimed at children.

Changes

If this policy changes in a way that matters, the date at the top changes with it. Questions go to hello@kapelogue.app.