Privacy Policy

Cafe Hop is built and run from Kathmandu, Nepal. We decide what happens to the data described here, except for café business data, where the café decides and we only process it for them (see Café and till data). Questions, requests and complaints all go to admin@cafehop.app.

Grouped by why it exists, not by how our database happens to be laid out.

Your account

• Your first and last name, phone number, email address, username and profile photo. Phone and email are how you log in and how we reach you about your account.
• Your taste preferences, the cuisines, dietary needs and the things you want in a café, if you fill them in. These shape your feed and nothing else.

Location

• In the hopper app, your device location when you allow it, so we can sort cafés by how far away they are and show you what’s nearby. Deny the permission and the app still works, you just sort and search by hand instead.
• In Cafe Hop Scout, a GPS reading when a scout pins a café’s location during enrolment. That pin is about the café, not the scout, and it ends up on the café’s public profile.
• We never track your location in the background, and none of the apps ask for background location permission.

Camera and photos

• Photos and video you attach to a spill, a café photo a scout captures during enrolment, and menu or venue images a café team uploads.
• The camera is also used to scan a QR code at the till or on a table. Scanned codes are read on the spot, we do not keep camera frames.

What you do in the app

• Your spills, yaps, ratings, hypes and the places you stash to go to later.
• Check-ins at a café, discounts you claim at the till, reservations, event RSVPs and event check-ins.
• Your Beans, XP, badges, streaks, missions and anything you’ve bought with Beans in the store.

Your device, and keeping the account safe

• A push notification token for each device you turn notifications on for, so we can send the notification. Turn notifications off and the token is removed.
• Sign-in attempts, including when and from what IP, and a record of actions taken on your account. These exist to spot someone trying to break into it.
• Crash and error diagnostics when something goes wrong, so we can fix it.
• Like any website, our servers keep standard access logs of the requests they receive, which include your IP address, and we hold your IP briefly to rate-limit abuse. That happens for every request to the site and the apps, whether or not you have an account.

If you fill in a form on this website

• The waitlist, the café enquiry form and the scout application all send us what you type: your name, phone number, email address, and where relevant your café’s name, area and roughly how many tables it has, plus any message you add. We use it to get back to you about that enquiry and nothing else.
• These forms don’t need an account, and we don’t store your IP address or browser on the enquiry itself, only the access logs and rate limiting described above. An enquiry sits in our inbox until someone has dealt with it; ask us and we’ll delete it.

Cafe Hop Manager runs a café’s own operation: orders, tables, bills, VAT invoices, stock, staff rosters and attendance. For that data the café is in charge and we act on its instructions. If you work at a café and want to know what your employer holds about your shifts or your till activity, ask the café first, we can’t hand over their records to you on our own.

Where you appear in a café’s records as a customer, a table bill, a discount applied at the till, a reservation under your name, that café can see it. They see the name on the booking, the discount and the bill. They do not get your phone number, your email or your location history.

• We don’t sell your data, and we don’t rent it out.
• We don’t run advertising in the apps, and there are no advertising or tracking SDKs in them.
• We don’t build profiles for anyone else, and we don’t share your activity with other cafés to let them target you.

We use a small number of companies to actually run the service. They only get what their job needs.

• Amazon Web Services, hosting and the database.
• Cloudflare R2, storage for photos, video and documents.
• Expo, delivering push notifications to your device.
• Google Maps, drawing the map and turning an address into a point on it.
• Fonepay and eSewa, taking payment when a café charges a bill through Cafe Hop. They handle the payment itself; we never see or store your card or wallet credentials.
• Sentry, crash and error reports.
• An email provider, for the account and receipt emails we send you.

We will also hand over data where Nepali law requires it, for example to the Inland Revenue Department for tax records, or to the police under a lawful order.

• Your account data stays until you delete your account, then it goes as described below.
• Sign-in and security logs are kept on a fixed schedule so we can still investigate a break-in that surfaces late. Deleting your account does not wipe them.
• VAT invoices and the records behind them are kept for as long as Nepali tax law requires, and cannot be altered or deleted once issued, by us or by the café. This is a legal requirement, not a product choice.

• See and fix it. Your profile and preferences are editable in the app under Settings.
• Get a copy. Settings on the web app has Download my data, which gives you a JSON file of everything we hold under your account. Or email us and we’ll send it.
• Delete your account. In the hopper app: Settings → Delete account. On the web: Settings → Your data → Delete my account. It is immediate and it cannot be undone.
• Notifications. Turn push off in Settings → Notifications, or in your phone’s own settings.
• Permissions.Location, camera and photo access can be withdrawn at any time in your phone’s settings. The app handles being told no.

Cafe Hop isn’t built for children. Don’t create an account if you’re under 13. If you believe a child has an account, email admin@cafehop.appand we’ll remove it.

When we change something that matters, we’ll update the date at the top and, if it affects what we do with data you’ve already given us, tell you in the app before it takes effect.

Email admin@cafehop.app. If you’re asking for a copy of your data or for deletion, say which it is and which phone number or email the account uses, and we’ll come back to you within 30 days.