Privacy Policy

We collect only what we need to run the loyalty Service:

• Café owners, managers and staff: name, email address, a hashed password, account role, branch assignments, invite status, email verification and login security status, and activity recorded through the Service.
• Café and branch information: café name, branch names, branch addresses, branding (logo, colours and stamp icon), reward rules, poster reward text and, only if the café chooses to add it, map coordinates used to surface the loyalty pass near a branch.
• Customers (loyalty members): first name, mobile phone number, wallet pass identifiers, brand-wide points/stamp balance, transaction and reward history, branch/staff attribution for scans and redemptions, and, only if you choose to provide it, the day and month of your birthday (never the year).
• Billing: plan, local payment status, promo-code activation, renewal or expiry dates, receipts or account notes needed to manage billing. If we offer an online payment method, the payment provider handles the payment details; we do not store full card numbers or mobile-wallet credentials.
• Support and contact: your name, email address, subject, message and related account context when you contact us through the support or contact forms. If you message us on WhatsApp, we may receive your WhatsApp profile name, phone number, message text and any café details you choose to send.
• Technical: basic security and operational logs, device/browser data and essential cookies used to keep you signed in and protect the Service.
• Marketing funnel: campaign source, promo code, page path, referrer, browser visitor identifier and button-click events so we can understand whether public campaigns lead to setup, WhatsApp enquiries or signup.

We share personal information only with the service providers that help us run the Service, and only as needed:

• Your café: the café whose program you joined can see your membership, brand-wide balance and visit history. Owners can see the full café account; branch managers and team members receive access based on the roles assigned by the owner or a permitted manager. A branch scanner can record which branch and team member handled a scan or redemption. Each café can only see its own members.
• Hosting and infrastructure providers: to run the application and to host our database, authentication and file storage.
• Apple Wallet & Google Wallet: to create and update your pass.
• Payment and billing providers: to handle café billing where applicable, such as online payments, receipts or local payment coordination.
• An email delivery provider: to send transactional emails such as confirmations and password resets.
• WhatsApp and Meta:if you choose to contact us through WhatsApp, WhatsApp and Meta process your account information and messages under WhatsApp's own terms and privacy policy. Your messages may also be visible to the people who help manage Retriever support.
• A mapping/geocoding provider: if a café enters its address, we send that address to a geocoding service to convert it into map coordinates for the wallet pass.

Some of these providers may process data outside Nepal. We take reasonable steps to ensure they protect your information consistently with this policy. We may also disclose information where required by law.

You can ask us to:

• access the personal information we hold about you;
• correct information that is inaccurate or out of date;
• delete your account and personal information; and
• stop receiving café announcements by removing the pass from your wallet or asking the café to remove your membership.
• stop WhatsApp setup messages by replying in WhatsApp or using WhatsApp's block controls.

To make a request, email us at support@retrieverlabs.net or contact us through our contact page. You can also ask the café you joined to update or remove your membership.