Privacy Policy

When you use the Gibbs's Café & Resto app, we collect the following information:

• Account details: your name, email address, phone number, birthday, and delivery address (including any landmark or notes you add for the rider).

• Order information: the items you order, order type (dine-in, take-out, delivery, pickup), payment method, and delivery location.

• In-store credit information: your credit account ID, wallet balance, loyalty points, membership tier, and top-up or purchase history.

• Device information: a secure device token stored on your device so you stay signed in, plus basic device details used to recognize your session.

• Communications: messages you send through our in-app chat support.

If you choose to sign in with Google, we receive only the basic information Google shares with us when you authorize the app: your name, email address, and Google account profile picture (if available).

We use this information solely to create and sign you into your Gibbs's Café account. We never request, view, or store your Google password, and we do not access your other Google services (such as Gmail contents, Drive files, or contacts).

You can review or revoke the app's access at any time from your Google Account security settings.

We use your information only to operate and improve our service:

• To process your orders, deliveries, payments, refunds, and in-store credit transactions.

• To send you order confirmations, receipts, and important account notices (such as security codes and account changes).

• To run our membership, rewards, and referral programs, including tracking your tier progress and perks.

• To provide customer support through in-app chat and email.

• To keep our app secure, prevent fraud and abuse, and comply with legal obligations.

We never sell your personal information, and we do not use it for advertising without your consent.

Your information is stored on secure, access-controlled cloud infrastructure provided by our app platform. Access to personal data is restricted: only you and authorized Gibbs's Café staff (for example, to assist with your order or account) can view it.

Sensitive credentials are protected as follows:

• Passwords are stored only as salted hashes — never in plain text.

• One-time verification codes (OTP) are stored as cryptographic hashes and expire within minutes.

• Your device sign-in token is unique to your device and can be revoked at any time by signing out.

All connections to our app are encrypted in transit using industry-standard HTTPS/TLS.

Our app uses minimal local storage on your device to keep you signed in (your device trust token and app preferences such as your cart). We do not use advertising cookies or third-party tracking cookies.

You can clear this data at any time by signing out of the app or clearing your browser/website data, though this will sign you out and empty your cart.

We rely on a small number of trusted service providers to run the app:

• Google — for Google Sign-In and sending transactional emails through Gmail.

• Our payment partners — to securely process payments. Your full payment card or e-wallet details are handled by the payment provider and are never stored on our systems.

• Our hosting and database platform (Base44) — for secure app hosting and data storage.

Each provider is bound by its own privacy policy and processes data only as needed to deliver its service to us.

You have the following rights over your personal information:

• Access — you can view your account details, order history, credit balance, and transaction history in the app at any time.

• Correction — you can update your name, phone number, address, and birthday from your account settings; changes to sensitive details are confirmed with a one-time email code for your security.

• Deletion — you can permanently delete your customer account from the app's account settings. This removes your account and personal information, subject to records we must keep for legal or accounting purposes (such as completed sales records).

• Withdraw consent — you may stop using the app or revoke Google Sign-In access at any time.

To exercise any of these rights, use the app's account settings or contact us using the details below.

We keep your personal information only as long as needed:

• Account and credit data is kept while your account is active and deleted shortly after you delete your account.

• Order and payment records are retained for the period required by tax and accounting regulations.

• Verification codes and one-time tokens expire automatically within minutes of being issued.

• Chat support conversations are retained to provide continuity of service and then removed when no longer needed.

Our app is intended for customers aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will remove it.

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. When we do, we will update the date at the top of this page. Continued use of the app after an update means you accept the revised policy.

If you have any questions about this Privacy Policy or how we handle your information, you can reach us:

• Through the in-app Chat support (Chat tab).

• By email at the address printed on your order confirmation emails and receipts.

• In person at any Gibbs's Café & Resto branch.