The short version
We collect what is needed to take your order and hand it to you at a counter — your name, your email, your order history — and nothing else.
Your location never leaves your phone. The camera is used only to read a QR code and keeps no image. There is no advertising, no analytics and no tracking in this app.
You can delete your account from inside the app at any time, or ask us to delete it without installing anything.
Who we are
The Off9 Backend mobile application (“the app”) is operated by OFF9 Kopi Sdn Bhd.
Questions about this policy, or about your data: [email protected].
What we collect
When you create an account
- Your name
- Your email address
- Your phone number, if you choose to give one
- A password, stored only as a cryptographic hash — it cannot be read by us or recovered by anyone
When you place an order
- The items you ordered, the options you chose and any note you added
- The kiosk you selected and the time you ordered
- The amount, the payment method you chose, and whether payment succeeded
- The collection code issued for that order
Automatically
- Basic technical information needed to serve a request — such as your IP address — held transiently in server logs
What we do not collect
Your location never leaves your device.If you allow location access, the app uses it on your phone to sort kiosks by distance. Your coordinates are not sent to us and are not stored anywhere.
We keep no camera images.Camera access is used solely to read a QR code printed on a kiosk counter. Nothing is photographed, stored or transmitted.
We do not track you.The app contains no advertising, analytics or third-party tracking software. We do not build advertising profiles and we do not sell personal data.
Why we use it
| What | Why |
|---|---|
| Name | So counter staff can identify your order |
| To sign you in, and to send order and account emails | |
| Phone number | So a kiosk can reach you about an order |
| Order details | To prepare your order, show its progress, and give you a receipt and order history |
| Payment record | To confirm your order is paid and to reconcile the day’s takings |
How long we keep it
- Account data — until you delete your account
- Order records — up to seven years after the order, as required for tax and accounting. After you delete your account these records are kept without your name, email or phone number attached to them.
- Server logs — a short operational period, then discarded
Your choices and rights
Delete your account.In the app, open Me → Delete my account. It takes effect immediately. You can also request deletion without installing the app at localhost:3000/legal/delete-account, or by emailing [email protected] — requests made that way are actioned within 30 days.
Access and correction.You can view and edit your name, email and phone in Me → Edit profile, and see every order you have placed under Orders. For a copy of your data, email us.
Permissions.Location and camera are optional and are asked for only at the moment they are used. You can refuse or revoke either in your device settings and the app stays fully usable — you simply choose your kiosk from a list rather than by distance, and type a code rather than scanning one.
Marketing.We do not currently send marketing email. If that changes it will be opt-in, and every message will carry an unsubscribe link.
Children
The app is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
Security
Data is encrypted in transit using TLS. Passwords are stored as bcrypt hashes. Access to production data is limited to the staff who need it. No system is perfectly secure, but we take measures appropriate to the sensitivity of the data — which, for a coffee order, we have deliberately kept minimal.
Changes to this policy
We will update this page and change the date above whenever this policy changes. Material changes will also be announced in the app.
Contact
OFF9 Kopi Sdn Bhd
[email protected]