Privacy policy

Coffee Craft, based in Yerevan, Armenia, decides how your data is used. You can reach us through the Contact page of our website.

Depending on how you use the Service, we collect:

• contact details: your phone number or email address, and your name if you give it;
• your order history and saved preferences;
• loyalty data: points, level, cards and rewards;
• device information needed to send notifications, such as a push token and the app version;
• messages you send us;
• technical logs (IP address, time, errors) that keep the Service secure and working.

We use your data to:

• take, prepare and deliver your orders;
• run the loyalty program and cards;
• send order updates, and offers if you agreed to them;
• prevent fraud and misuse;
• improve our menu and the app;
• meet our legal obligations.

Online card and Idram payments are processed by Ameria Bank and Idram. They receive what is needed to take the payment. We receive only the result and a payment reference, never your full card number. Our online payments are handled only by these two partners.

We use a small number of service providers to run the Service: Google Firebase for push notifications, an SMS provider for verification codes, an email provider for receipts and messages, and our hosting provider. They process data only for us and only for these purposes. We do not sell your personal data and we do not share it for advertising.

Our website does not use advertising or analytics cookies.

We keep order and loyalty records while your account is active and as long as the law requires for accounting. When you delete your account, we remove or anonymise your personal data, except what we must keep by law.

You can at any time:

• ask for a copy of your data;
• ask us to correct it;
• delete your account from Account settings in the app, or ask us to do it;
• withdraw your consent to notifications and marketing;
• complain to the personal data protection authority of Armenia.

Data travels encrypted, access is limited to the staff who need it, and passwords are stored hashed. No system is perfectly secure, so tell us at once if you suspect a problem.

The Service is not meant for children under 16, and we do not knowingly collect their data.

We may update this policy. The date at the top shows the latest version. For questions or requests about your data, use the Contact page on our website or the Help section in the app.