Privacy notice

Yoco Kitchen is run by [Registered business name] ("we"). This notice explains what personal information we process and why, as required by the Protection of Personal Information Act (POPIA).

What we collect

• Your account: your name, and your email address if you sign in with Google. We never store passwords.
• Passkeys: only the public part of the key. The private key stays on your device.
• Your store: its name, settings, menu, paired devices and your Yoco API key (encrypted).
• Orders read from your Yoco account or typed into the app: items, notes, totals and any customer name you enter.
• Billing: which plan you paid for and when. Card details are handled by PayFast and never reach us; we keep only PayFast's reference to your saved card, encrypted.
• Technical data: IP address for rate limiting, kept for no more than a day.

Why we use it

• To run the service you signed up for: showing orders to your kitchen and keeping your devices signed in.
• To bill you and to work out your plan from your daily order count.
• To keep the service secure and stop abuse.

We don't sell your information, and we don't use it for advertising.

Your customers' information

For order data about your customers, you are the responsible party and we process it on your behalf. Only put in customer details you need to prepare the order.

Who else handles it

• Cloudflare, which hosts the app and database (servers may be outside South Africa).
• Yoco, which we read your orders and menu from.
• PayFast, which processes subscription payments and stores your card.
• Google, if you choose to sign in with Google.

How long we keep it

Orders are deleted after 90 days. Your account and store data stay until you delete them in Settings. Payment records are kept as long as tax law requires.

Your rights

You can download all your store's data or delete your store and account at any time in Settings. You can also ask us to correct or delete information, or object to how we use it, by contacting [Support email or WhatsApp number]. Our information officer is [Name of your POPIA information officer]. You may complain to the Information Regulator (inforegulator.org.za).