Privacy Policy

Last updated: November 9, 2026

Privacy Policy

Brew-ha Cafe & Bar collects only what it needs to take your orders, verify payments and run the loyalty program. We do not sell your data. This policy follows the Philippine Data Privacy Act of 2012 (RA 10173).

1. What we collect

Data	When	Why
Email and password	You sign up with email	To sign you in. Passwords are stored encrypted; we cannot see them.
Name, email and profile photo from Google	You sign in with Google	To create and sign in to your account
Name and contact number	Sign-up, checkout, profile edits	To identify your order at pickup and contact you about it
Profile photo	You choose to upload one	Shown on your profile
Order details: items, options, notes, totals, times	Every order, including guest orders	To prepare your order and keep business records
Payment receipt screenshots	You pay by bank or e-wallet transfer	To verify your payment. Receipts may show your name and account details.
Stamps and vouchers	Completed orders	To run the loyalty program
Push notification token	You allow notifications	To send order updates to your phone

We do not collect card numbers, your location, or your contacts. The app uses your camera or photos only when you choose to upload a photo or receipt.

2. Who can see it

You: your own profile, orders, receipts, stamps and vouchers.
Authorized café staff: orders, contact details and payment receipts, to prepare orders and verify payments.
Service providers that run the app for us, only as needed: Supabase (database, sign-in and file storage), Expo (delivery of notifications) and Google (Google sign-in and Android notifications). Their servers may be outside the Philippines.
Authorities, only when the law requires it.

3. How we protect it

Access rules in our database limit each customer to their own data. Payment receipts are kept in private storage and opened by staff only through links that expire within minutes.

4. How long we keep it

Account and profile data: until you delete your account.
Payment receipt screenshots: 1 year after the order.
Order records: as long as needed for business and tax records. After you delete your account, these are kept without your name or contact number.

5. Deleting your account

Go to Profile → Edit Profile → Delete my account in the app, or email info.brewha@gmail.com from the address on your account. Email requests are completed within 7 days.

Deleting your account removes your profile, photo, notification tokens, payment receipts, stamps and unused vouchers. Unused vouchers cannot be restored. Order records stay in our accounts without your personal details.

6. Your rights

Under the Data Privacy Act, you have the right to be informed, to access your data, to correct it, to object to its processing, to have it erased or blocked, to data portability, and to claim damages. Email us to use any of these. If you are not satisfied with our response, you can file a complaint with the National Privacy Commission (privacy.gov.ph).

7. Notifications

We send order updates only if you allow notifications. You can turn them off anytime in your phone's settings.

8. Changes

We will post updates here and change the date at the top. Significant changes will also be announced in the app.

9. Contact

Brew-ha Cafe & Bar, National Highway, Poblacion Norte, Maria, 6229 Siquijor · info.brewha@gmail.com · 0916 266 8181