Privacy Policy

Glitch Cafe ("we", "our", "us") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile app, website (glitchcafe.net), and services.

1. Information We Collect

1.1 Information you provide directly

• Phone number — used for account creation and order pickup notifications via SMS or WhatsApp OTP.
• Name — displayed on your orders so our staff can greet you.
• Car license plate — used for drive-thru pickup identification.
• Order details — items, modifiers, branch, payment method.

1.2 Information collected automatically

• Location (GPS) — only when you grant permission, to show the nearest branch. We do not store your continuous location.
• Device & browser info — for security, fraud prevention, and app analytics.
• Loyalty stamps & spending — to calculate your tier and rewards.

1.3 Information we do NOT collect

• We do not store your credit card number — it is sent directly to Stripe.
• We do not sell your data to third parties.
• We do not use cross-site tracking.

2. How We Use Your Information

• Process and deliver your coffee orders
• Send order status notifications (Order Placed → Preparing → Ready)
• Track loyalty stamps and tier rewards (Bronze → Platinum)
• Provide gift card balance and history
• Improve our menu, branches, and service
• Prevent fraud and ensure security
• Comply with UAE law and accounting requirements (VAT)

3. Third-Party Services

We use trusted services to operate our app:

• Stripe Secure payment processing (PCI-DSS Level 1 certified)
• Twilio OTP verification via SMS / WhatsApp
• Firebase (Google) Authentication, database, hosting, push notifications
• Cloudflare CDN, backend hosting, security

Each of these services has its own privacy policy. We share only the minimum data needed for them to perform their function.

4. Data Storage & Security

• Data stored on Google Firebase (encrypted in transit and at rest)
• Payment data handled exclusively by Stripe (we never see your card number)
• Phone numbers and OTP managed by Twilio with industry-standard encryption
• SSL/TLS encryption on all our domains

5. Data Retention

• Account data — kept until you request deletion
• Orders — kept for 5 years (UAE VAT compliance)
• Inactive accounts — anonymized after 24 months of inactivity

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and personal data
• Withdraw consent for marketing communications
• Export your data in machine-readable format

To exercise any of these rights, contact us at info@glitchcafe.ae.

7. Children's Privacy

Glitch Cafe is not intended for children under 13. We do not knowingly collect data from minors. If you believe we have collected data from a child, please contact us immediately.

8. Changes to This Policy

We may update this policy occasionally. The "Last updated" date at the top will reflect any changes. Significant changes will be communicated via the app.

9. Governing Law

This Privacy Policy is governed by the laws of the United Arab Emirates. Any disputes shall be resolved in the courts of Abu Dhabi.

10. Contact Us

• 📧 Email: info@glitchcafe.ae
• 📷 Instagram: @glitch.specialty
• 🌐 Website: glitchcafe.net