Privacy Policy

Effective date: September 27, 2026 · Dolphin Cafe

This Privacy Policy explains what information the Dolphin Cafe mobile application ("the App," "we," "us") collects, why we collect it, and how it is handled. By using the App, you agree to the practices described here.

1. Information We Collect

When you create an account or use the App, we collect:

Full name — to personalize your account and order experience.
Email address — used to create and secure your account, and for account-related communication.
Password — stored in encrypted/hashed form; we never store or have access to your plain-text password.
Date of birth — used solely to determine eligibility for birthday perks and age-relevant offers.
Phone number — used for account verification and order-related communication.

Planned (not yet active): in a future update, the App will request access to your device's location in order to automatically detect and suggest the nearest Dolphin Cafe location. This feature is not currently active, and location data is not currently collected. When it is introduced, this policy will be updated in advance and you will be asked for explicit permission before any location data is collected.

2. Payment Information

Payments are processed through Stripe, a third-party payment processor. Dolphin Cafe does not collect, view, or store your full card number, CVV, or other sensitive payment credentials — these are handled directly by Stripe in accordance with Stripe's own privacy policy. We may receive limited transaction metadata (such as order total and payment status) to confirm and fulfill your order.

3. How We Use Your Information

To create and maintain your account
To process orders and payments
To apply birthday and loyalty perks
To contact you regarding your account or orders
To improve the App's functionality and user experience

4. Data Sharing

We do not sell your personal information. We share information only with:

Stripe, for payment processing
Service providers who help us operate the App (e.g. hosting, infrastructure), under confidentiality obligations
Law enforcement or regulators, only where required by law

5. Data Retention

We retain your account information for as long as your account remains active. You may request deletion of your account and associated personal data at any time by contacting us (see Section 8).

6. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal information, or to object to certain processing. To exercise these rights, contact us using the details below.

7. Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

8. Contact Us

For any privacy-related questions or requests, contact us at:
yabdyvahytov@stu.bau.edu

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes (such as the addition of location data collection) will be reflected here with an updated effective date before taking effect.