Privacy policy
Last updated 15 October 2026 · App version 1.6.0
Sadhai Coffee (“we”, “us”) runs a coffee ordering app and website for stations and partner cafes in Nepal. This policy explains what we collect, why, who sees it, how long we keep it, and the choices you have. The data controller is Sadhai Coffee (operating company to be confirmed), Kathmandu, Nepal. Questions: privacy@sadhaicoffee.com.
What we collect
| Data | Why we need it | Optional? |
|---|---|---|
| Name, mobile number, password (stored as a one-way hash) | Create and secure your account, show your name on your order | Required to order |
| Email address | Receipts and account help | Optional |
| Orders, items, pickup number, ratings and notes | Make and hand over your order, support, refunds, loyalty and our accounts | Required to order |
| Payment method and provider reference (Fonepay, cash, pass) | Confirm payment and reconcile with providers. We never see or store your card, wallet PIN or bank login | Required to pay |
| Approximate or precise location, only while you use “Use my location” | Sort stations by distance. Your coordinates are sent with that one request and are not saved or logged | Optional. You can pick a station by hand |
| Notification token and device type (if you allow notifications) | Send push notifications: your order is ready, your pass is ending, and offers if you have not opted out. Offers are limited to one a day and can be turned off in Profile | Optional |
| Name and mobile number typed at a self-order kiosk | Call your order and, if the number belongs to a Sadhai account, link the order to it. You are asked to agree on the kiosk screen | Required to use the kiosk. You can order at the counter instead |
| Staff only: shifts, check-in and check-out times, hourly rate and payslips | Plan the roster and pay people correctly. Only that person, the managers of their station and the owner can see it | Required to work a shift |
| Passes, coupons, referral code and bean balance | Run the offers you have earned | Part of your account |
We do not use advertising identifiers, we do not track you across other apps or websites, we do not sell personal data, and we do not collect contacts, photos or microphone data.
Who sees it
- The station or partner cafe you order from sees your first name, pickup number and order so they can make it. Partner cafes do not receive your phone number.
- Our staff (managers and owners) see orders and account details to run the service, handle refunds and keep accurate records. Access is by role and every sensitive action is logged.
- Fonepay processes online payments under their own privacy policies.
- Hosting and infrastructure providers store data on our behalf under contract.
- Authorities, where the law requires it.
How long we keep it
Account data is kept while your account is open. If you delete your account we erase your name, phone, email, notification token and messages and expire unused coupons and passes. We keep order and payment records, with your identity removed, for as long as tax and accounting law in Nepal requires. Orders placed at a kiosk without an account keep the name and number typed at the kiosk; email us and we will remove them from those records.
Your choices and rights
- Delete your account inside the app (Account, Profile, Delete my account) or on this page.
- Download your data from Profile, Download my data.
- Correct your details in Profile, or ask us.
- Turn off location or notifications in your phone settings at any time. The app keeps working.
- Contact privacy@sadhaicoffee.com for any other request.
Security
Connections use HTTPS. Passwords are hashed. Sign-in tokens expire and can be revoked. Staff access is limited by role. No system is perfectly secure, so please use a password you do not use elsewhere.
Children
The service is for people aged 16 and over, or younger with a parent’s agreement. We do not knowingly collect data from children under 13.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.
Draft for review: have a Nepali lawyer confirm this text and fill in the company details in web/src/lib/site.ts before you publish to the stores.