Privacy policy

We collect what is needed to take your order and hand it to you at a counter — your name, your email, your order history — and nothing else.

Your location never leaves your phone. The camera is used only to read a QR code and keeps no image. There is no advertising, no analytics and no tracking in this app.

You can delete your account from inside the app at any time, or ask us to delete it without installing anything.

The Off9 Backend mobile application (“the app”) is operated by OFF9 Kopi Sdn Bhd.

Questions about this policy, or about your data: privacy@off9kopi.com.

When you create an account

• Your name
• Your email address
• Your phone number, if you choose to give one
• A password, stored only as a cryptographic hash — it cannot be read by us or recovered by anyone

When you place an order

• The items you ordered, the options you chose and any note you added
• The kiosk you selected and the time you ordered
• The amount, the payment method you chose, and whether payment succeeded
• The collection code issued for that order

Automatically

• Basic technical information needed to serve a request — such as your IP address — held transiently in server logs

Your location never leaves your device.If you allow location access, the app uses it on your phone to sort kiosks by distance. Your coordinates are not sent to us and are not stored anywhere.

We keep no camera images.Camera access is used solely to read a QR code printed on a kiosk counter. Nothing is photographed, stored or transmitted.

We do not track you.The app contains no advertising, analytics or third-party tracking software. We do not build advertising profiles and we do not sell personal data.

We do not sell your personal data.

We share it only with the service providers that operate the app on our behalf, and only as far as they need it:

• Cloud hosting and database — storing the data described above
• Email delivery — to send verification, password reset and order emails
• Payment processing — once connected. Card details are handled by the processor and never reach our systems.

We may also disclose data where the law requires it.

• Account data — until you delete your account
• Order records — up to seven years after the order, as required for tax and accounting. After you delete your account these records are kept without your name, email or phone number attached to them.
• Server logs — a short operational period, then discarded

Delete your account.In the app, open Me → Delete my account. It takes effect immediately. You can also request deletion without installing the app at localhost:3000/legal/delete-account, or by emailing privacy@off9kopi.com — requests made that way are actioned within 30 days.

Access and correction.You can view and edit your name, email and phone in Me → Edit profile, and see every order you have placed under Orders. For a copy of your data, email us.

Permissions.Location and camera are optional and are asked for only at the moment they are used. You can refuse or revoke either in your device settings and the app stays fully usable — you simply choose your kiosk from a list rather than by distance, and type a code rather than scanning one.

Marketing.We do not currently send marketing email. If that changes it will be opt-in, and every message will carry an unsubscribe link.

The app is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

Data is encrypted in transit using TLS. Passwords are stored as bcrypt hashes. Access to production data is limited to the staff who need it. No system is perfectly secure, but we take measures appropriate to the sensitivity of the data — which, for a coffee order, we have deliberately kept minimal.

We will update this page and change the date above whenever this policy changes. Material changes will also be announced in the app.

OFF9 Kopi Sdn Bhd
privacy@off9kopi.com