Privacy Policy

English

Privacy Policy

How Denu Coffee collects, uses, shares, and protects customer data.

Denu Coffee collects information needed to operate the app and provide its ordering, pickup, dine-in, delivery, membership, wallet, coupon, support, and rider services. Depending on the features used, this may include name, phone number, delivery or contact address, internal customer and account identifiers, birthday and gender when provided, precise foreground location coordinates for nearby-store, delivery-distance, and saved-address features, order and purchase history, selected store, items, service type, delivery records, payment method and status, provider transaction references, refunds, wallet balance and activity, coupons and referrals, support messages, notes and delivery instructions, profile or rider application photos and identity document images, rider application details including a rider identification number, and push tokens or device or installation identifiers together with platform, app version, and locale for push delivery and related configuration. Denu Coffee uses this information for OTP login, account management, order preparation and fulfillment, pickup and delivery coordination, payment confirmation and reconciliation, refunds, wallet and membership benefits, customer support, rider review and delivery operations, security and fraud prevention, accounting, audit records, and app functionality. The current Denu app records payment method, status, amount, and provider references rather than full card or bank credentials; an enabled payment provider may process its own required information under its privacy terms. Denu Coffee does not sell customer personal data and does not use it to track customers across other companies' apps or websites for advertising. We share only the information needed with the selected store, assigned rider, payment, SMS, maps, push notification, hosting, storage, or support providers when those services are active, and with authorities when required by law. Location, notification, and photo access is requested only when the related feature is used; customers can continue with manual store selection when location access is denied. For an approved rider's active delivery, the app collects precise foreground location only while the Rider Center Active page is open. Only the latest point is stored and shared with that order's customer and authorized store staff; no route history is kept. Leaving the page stops updates, the latest point may remain briefly, and it is marked delayed after two minutes without an update. Completing or cancelling the delivery clears and hides the point. Customers can correct supported profile or address information and can request account deletion or privacy support from Account settings or customer support. Some order, payment, wallet, refund, rider, accounting, tax, security, audit, dispute, or legally required records may be retained after an account deletion request, while personal profile data is removed or anonymized where operationally possible. Denu Coffee protects access with role controls and operational safeguards and updates this policy when app data practices materially change. Push delivery may require push tokens, device or installation identifiers, platform, app version and locale. On Android, Firebase Cloud Messaging and Firebase Installations may generate and process installation identifiers and related configuration when their default initialization is enabled, even if notification display permission is denied. Turning off notification display does not by itself disable that initialization.

The Android app uses Google Maps SDK. Google may receive SDK/device identifiers, diagnostic and crash information and, depending on map use, map interaction information to operate and improve its mapping services under Google's applicable privacy terms. The iOS app uses Apple MapKit. Address lookup and geocoding may also involve a mapping provider when those functions are used. Denu Coffee separately processes coordinates submitted for saved addresses and active delivery functions as described in this policy; map-provider processing and Denu account-linked location processing are distinct.