Privacy policy.

We process account details such as your sign-in identifier, email address or telephone number, display name, and membership tier. We also process your selected store, items, modifiers, prices, discounts, payment status, pickup estimate, fulfilment status, and order history.

Payment-card details are entered into Square’s payment interface and tokenized by Square. M Plus Matcha receives payment identifiers, status, amount, and limited card information such as the last four digits when supplied. We do not store complete card numbers or card security codes.

We may process rewards activity, Apple Push Notification service tokens, device model, app version, notification preferences, feedback, support messages, and technical or security information such as request timestamps, IP addresses, error logs, authentication events, and fraud signals.

The current app does not request or process device location. If nearby-store suggestions are added later, iOS permission will be requested and this policy and the App Privacy declarations will be updated first.

We use information to create and secure accounts; show menus, stores, prices, and rewards; quote, charge, prepare, and support pickup orders; send requested notifications; prevent duplicate or fraudulent payments; answer feedback; maintain required financial records; diagnose failures; and comply with legal obligations.

Supabase provides authentication and database services. Square provides payment tokenization, processing, order and fulfilment services, fraud controls, and transaction records. Apple provides Sign in with Apple, push notifications, the App Store, and device platform services. Google may provide sign-in when that option is enabled. Our hosting and monitoring providers process server requests and operational logs.

These providers process information under their own terms and privacy notices and may process it outside your country. We do not sell personal information or share it for cross-context behavioural advertising.

Account and membership information is kept while your account exists. Device tokens are removed when an account is deleted and may be removed sooner if they become invalid. Feedback is kept only as long as needed to respond and improve the service, then deleted or anonymized.

Payment and order records may be retained after account deletion in anonymized form when needed for accounting, tax, fraud prevention, chargebacks, refunds, or legal compliance. Operational logs are retained for a limited period appropriate to security and reliability.

You can start permanent account deletion in the app at Account → Settings → Delete my account. Apple accounts are asked to continue with Apple again so access can be revoked before deletion. Deletion removes the authentication account, membership profile, and registered notification devices; feedback is anonymized and legally required transaction records are detached from the account.

You can change notification permission in iOS Settings, disable marketing notifications in the app, and sign out at any time. For access, correction, deletion, or privacy requests, use the in-app Feedback screen or contact us through the support page.

We use encrypted network connections, restricted service credentials, server-side price validation, signed webhook verification, idempotency controls, and access controls. No system is completely secure.

The app is a general-audience food and beverage service and is not directed to children below the age at which they may independently consent to online services in their location.