TenthCup Privacy Policy

1. Introduction

ClearStack Apps ("we", "us", "our") operates the TenthCup mobile application and the customer stamp card pages it serves at tenthcup.web.app. TenthCup is used by cafes and other small shops to run a stamp card. A shop's customers reach their card through a QR code at the counter and do not install anything. The shop decides its own card, rewards and terms, and we hold its records for the shop.

2. What TenthCup Stores for the Shop

• The shop's account: an anonymous account is created when the app first opens. If the owner or a staff member adds an email and password, we store that email address to sign them in.
• The shop's profile: its name, the name a seat holder gives, the logo if one is added, and its country.
• Card designs: each card's name, reward, number of stamps, colour and terms.
• The counter secret: a random key the app uses to make the code shown at the counter. It is readable only by the shop's own seats.
• Purchase check: if the shop buys a plan from Google Play, the purchase token, used only to confirm the plan with Google.
• An activity log: each card started, stamp, reward given, stamp added or removed by staff with the reason typed, and account events such as a seat joining. The stats are worked out from it.

3. What a Customer's Card Holds

• A card number, which design it belongs to, its stamps, the total stamps and rewards it has had, and when it was started and last stamped.
• An email address or phone number, only if the customer types one into their card page to help the shop find a lost card. It is optional. We use it for nothing else and send nothing to it.
• On the customer's own phone, the card page keeps the card's link in the browser's storage so the counter code finds the card on the next visit. We do not set advertising or tracking cookies.
• To stop abuse, the card counts wrong codes for the day, and the shop's counter counts new cards per code.

A card does not hold the customer's name unless they type it as their contact. TenthCup takes no payments and holds no card or bank details.

4. Card Pages

A card page is opened by a link containing a long random code. It does not ask for a sign-in, so anyone who has the link can use the card. It shows the shop's name and logo, the card's design, its stamps and number, and the contact the customer added, so the customer can check it. The address names nobody, search engines are told not to index the page, and it is not cached. The shop can delete a card at any time and its page stops at once. Customers should treat the link like a private message.

5. Crash Reports and Analytics

• Firebase Crashlytics (Google LLC): crash reports, device model, operating system and app version, so we can fix faults.
• Firebase Analytics (Google LLC): basic usage events such as app opens and screen views from the shop staff using the app, tied to an app-instance identifier.

These never include customers' cards or contacts. Card pages carry no analytics. TenthCup shows no third-party ads. The free tier shows our own offer for websites for the business using the app, chosen from a file on our website; opening it takes you to clearstackapps.com.

6. Where It Is Stored

On Google Cloud (Firebase) in the United States, encrypted in transit and at rest. The app keeps a copy on the phone so the counter keeps working when the signal drops. That copy can remain on a phone after a staff member leaves a shop or signs out, until the app is removed or its data is cleared.

7. Who Can See It

• Every working seat of the shop (the owner and, on Pro, up to three staff) sees all of the shop's cards, including any contact a customer added.
• Anyone with a card's link sees that one card.
• We do not read shops' records except when a shop asks for support or to keep the service running. Google acts as our processor.
• We do not sell any of this information.

8. How Long It Is Kept, and Deleting It

• Records stay until the shop deletes them. Deleting a card removes it and turns off its link.
• Settings, Delete account removes the account. For an owner this deletes the whole shop: its designs, cards, logo, counter secret and activity log, and every card link stops working. A staff member's account is removed and the shop's records stay with the owner.
• You can also ask for deletion by emailing support@clearstackapps.com. A customer who wants their card or contact removed should ask the shop first, because the shop controls it; if that does not work, write to us with the shop's name and the card's link.
• Purchase records may be kept as long as the law requires for accounting.

9. Your Rights

Depending on where you live you may have rights to see, correct, move or delete your information, or to object to how it is used. Email support@clearstackapps.com. If you are in the UK or EU you may also complain to your data protection authority.

10. Changes

We will post changes on this page and update the date at the top.

11. Contact

ClearStack Apps, 124 City Road, London, United Kingdom, EC1V 2NX. Email: support@clearstackapps.com.