Privacy Policy

Kokeb Perks (“we”, “us”) runs a digital loyalty platform for cafés, bakeries, restaurants, and shops. This policy explains what personal data we process when you use our website, merchant tools, and customer stars cards.

1. Who is responsible

Kokeb Perks operates the platform at kokebperks.com. Individual shops on the network are separate businesses; they choose how to run their loyalty programme using our tools. Questions about a specific shop’s use of your data can also be directed to that shop.

2. Data we collect

Depending on how you use Kokeb Perks, we may process:

• Identity and contact details — name, email, and phone number when you join a shop’s loyalty programme or sign up as a merchant.
• Account credentials — password (stored securely; we never store plain-text passwords).
• Loyalty activity — star balance, visits, redemptions, referral codes, and event RSVPs linked to your account.
• Merchant business details — shop name, location, branding, billing contacts, and staff login accounts.
• Technical data — browser type, IP address, and security logs needed to operate and protect the service.
• Alternative sign-in identifiers — your Telegram user ID and username if you use “Continue with Telegram”, and an Apple/Google Wallet pass identifier if you add your stars card to a phone wallet. These are used only to sign you in and keep your wallet pass up to date.

3. How we use data

• Provide the loyalty service — registration, sign-in, stars card, till, rewards, and email notifications you request.
• Operate merchant accounts — onboarding, billing, support, and platform administration.
• Prevent abuse — spam protection and fraud prevention (including Cloudflare Turnstile on forms).
• Improve the product — aggregated, non-identifying usage to keep the service reliable.
• Marketing — only where you have agreed via cookie preferences or where we have another lawful basis.

4. Cookies and local storage

We use browser storage to remember your language choice, keep you signed in during a session, store your cookie consent choice, and run essential features. Optional categories (such as embedded maps) are loaded only after you accept them in our cookie banner.

You can clear site data in your browser settings. Essential cookies and storage may be required for sign-in and security.

5. Third-party services

• Cloudflare Turnstile — bot protection on registration and sign-in forms.
• Google Maps — shop location maps when you allow map cookies.
• Resend — transactional email delivery (magic-link sign-in, receipts, campaign emails you're subscribed to).
• Supabase — our database and authentication provider; account records, loyalty activity, and sign-in sessions are stored there.
• SMS gateway (e.g. Twilio) — delivers one-time phone sign-in codes if you use phone-number sign-in.
• Telegram Bot API — delivers your QR code, balance replies, and star-earned notifications if you link a Telegram account.
• Apple Wallet / Google Wallet — if you add your stars card to a phone wallet, Apple or Google store and display that pass on your device.

These providers process data on our instructions and under their own privacy terms where applicable.

6. Legal basis

We process personal data to perform our contract with merchants and customers (running the loyalty service), for legitimate interests (security and product improvement, including fraud prevention on star issuance), and with your consent where required (optional cookies and channel-specific marketing — see §11).

7. Retention

We keep account and loyalty data while your relationship with a shop or with Kokeb Perks continues, and for a reasonable period afterward for legal, billing, and dispute purposes. You may ask us or the shop to delete data where applicable law allows.

Security and fraud-prevention audit logs (e.g. staff star-issuance actions, redemption records) are retained separately from your loyalty activity for up to 24 months to investigate abuse and support merchants in good-faith disputes, then deleted or anonymised. Deleting your account does not remove entries already recorded in another party's (e.g. a shop's) audit trail for events that already occurred.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, and to withdraw consent. To exercise these rights, contact us at [email protected] or contact the shop whose programme you joined.

Self-serve access: while signed in, you can download a copy of everything we hold about you (profile, memberships, star history, and redemption codes) at any time from your account page, and you can close your account and remove your personal data from your profile immediately.

9. Contact

Email: [email protected]

10. Changes

We may update this policy from time to time. We will post the new version on this page and update the date above. Material changes may be highlighted on the site or by email where appropriate.

11. Consent and communication preferences

Joining a shop's loyalty programme does not automatically sign you up for marketing messages. We ask for separate, channel-specific consent — email, SMS, and Telegram — before sending promotional (as opposed to transactional) messages on each channel. Transactional messages you need to use the service (sign-in codes, redemption confirmations, and star-earned notifications) are not marketing and are not covered by this consent — those continue as long as you use the relevant sign-in method. You can change your marketing preferences for each channel at any time from your account page, and you can withdraw consent as easily as you gave it.