Privacy Policy — Hangry Fellas app
Last updated: 13 November 2026
This policy explains what personal data the Hangry Fellas app collects, why, who we share it with, how long we keep it, and your rights. It also covers our web pages at legal.hangryfellas.com.cy.
1. Who we are
The Hangry Fellas app and loyalty programme are operated by HN HANGRY FOODS CYPRUS LTD, a company registered in Cyprus (registration no. HE464608), with its registered office at Kanari 47-49, Shop 1027, Limassol, Cyprus ("we", "us").
We are the data controller for your personal data.
Contact for anything in this policy: Hangry.foodltd@gmail.com
2. The short version
- We collect what we need to run your loyalty account: your name, email, sign-in details, and the points you earn and spend at the restaurant.
- You sign in with Google, Apple, or a code we email you. If you like, you can also add a password.
- We send app notifications only if you allow them on your phone, and you can switch each kind off.
- You can choose to add your member card to Apple Wallet or Google Wallet.
- We don't collect your location, contacts or photos. If you choose, you can give your date of birth for a welcome quest. We use it to check you're 14 or older and, only if you've agreed to marketing, for offers suited to your age.
- We ask for your phone number when you join, so we can reach you about your account. We text you offers only if you separately switch on "Offers by SMS".
- We don't sell your data, show you ads, or track you across other apps or websites.
- We only send you marketing if you switch it on, and you can switch it off at any time.
- You can delete your account from inside the app at any time.
3. What we collect and where it comes from
3.1 Your account
| Data | Where it comes from |
|---|---|
| Your name | From Google or Apple when you sign in with them, or typed by you. If Apple doesn't share your name, we ask you for it. |
| Your email address | From Google or Apple, or typed by you. If you use Apple's "Hide My Email", we receive a relay address, not your real one. To change it, contact us (§15): we change it for you in our admin system, then we send a notice to the old address. Your points, tier and Google or Apple sign-in stay with your account. |
| Your phone number | Required. You give it when you join, on the step where you confirm you're 14 or older. If you joined before we asked for it, the app asks for it the next time you open it, before you can use your account. You can change it in Edit profile, but not remove it; it is deleted when you delete your account (§10). We store it in international format; if you don't type a country code, we take it to be a Cyprus number. A number can be on only one account. We don't check it by text message. We use it to contact you about your account: our staff can find your account by it in our admin system, for example when you contact us, and, once the app takes orders and deliveries, about those. Only if you switch on "Offers by SMS" do we text you offers (§6). |
| Whether your email is confirmed | Confirmed when you sign in with a code we email you, or by Google or Apple |
| A sign-in identifier from Google or Apple | From the provider when you sign in. It lets us recognise your account; we don't get your Google or Apple password. |
| Email sign-in codes | If you sign in with your email, we send you a 6-digit code. We store it only in scrambled (hashed) form, with your email address and a count of wrong tries. A code works for 10 minutes and stops working after 5 wrong tries. It is deleted once used, and expired codes are deleted within a day. The same applies to the codes we send to set a new password. |
| A password, only if you add one | Optional. Signing in by code, Google or Apple always works without one. If you add a password, we store it only as a one-way hash: it can't be read back, by us or anyone. You can change it, or reset it with a code sent to your email. |
| A record of wrong passwords | If someone enters a wrong password for your account, we note the time. After 5 wrong passwords in 15 minutes, signing in with the password is paused for a while; signing in with an email code still works. The record holds only your account and the time, and is cleared when the right password or a new one is used. |
| Your date of birth, only if you give it | Optional, including the year. You can give it in Edit profile, through the "add your birthday" quest, which pays points once (§3.2); we don't ask for it when you join. Once the quest has paid, the date is locked: to change it, contact us (§15) and we'll correct it. We use it to check that you're 14 or older, and, only if you've agreed to marketing, to choose offers suited to your age (§6). Members of earlier versions of the app may have given a day and month only; we keep that as it was. |
| Confirmation that you are 14 or older, and when you confirmed it | You tick a box when you join. If you join with Google or Apple, we ask you on your first sign-in, and you can't use the programme until you've confirmed. We keep a record that you confirmed it, with the date and time. |
| If we already knew you as a customer: your phone number, before you joined | Our staff may add the phone numbers of customers we already know, from our own records at the restaurant, to a list in our admin system. Staff at the counter can also check a number on that list and add one (managers only). If you join with a number on that list, your welcome meal is unlocked at once (you are not offered the first-order quest), and the number is then linked to your account. Each number works once. A number nobody joins with is deleted after a set time (§9). |
| If the date of birth you give shows you're under 14 | We don't store the date. We record that it contradicted your confirmation, with the date and time, and the account can then only be viewed or deleted (§12). |
3.2 Your loyalty activity
Each time you use the programme, we record:
- the visit and its date and time
- the order total entered by our staff
- the points you earned or spent
- any reward you redeemed
- your welcome meal: which item, when it was given, when your first qualifying order unlocked it, when it expires and when it was used
- your welcome spin and starter quests: which you completed, when, and the points each paid. An earlier quest for adding your phone number no longer appears or pays; if you completed it, you keep its points, and it counts as the password quest completed for you.
- your tier, and when it changed
- which till device recorded the transaction
We also keep:
- your member number and member QR code
- your referral code
- the referral code you entered when you joined, if any, and who referred you or who you referred
- on Android, which of our download links you installed the app from, if any (§3.4)
- any corrections our staff make to your points, with the reason
This record is how we calculate your points balance and tier. It is also how we resolve any disagreement about your points.
3.3 Your preferences
On our servers:
- Whether you have agreed to receive marketing, and when you agreed or withdrew.
- Whether you have agreed to receive offers by SMS, and when you agreed or withdrew (§6).
- Your notification switches: one each for tier warnings, the welcome meal reminder, points earned, and offers (§6).
On your phone only, never sent to us:
- your celebration style (Party or Calm) and whether celebration sounds are on
- whether the app has shown you the welcome celebration
- whether we've already asked you about notifications, so we don't ask again
- a friend's referral code that came with the app (from an invite link, or from Google Play when you installed), until you join; it's then sent with your sign-up only if you leave it in the referral field
- on Android, which of our download links you installed the app from, if Google Play passed it, until you join; it's then sent with your sign-up (§3.4)
3.4 Technical data
| Data | Why |
|---|---|
| Sign-in session details, including IP address and device/browser type | To keep you signed in securely and detect misuse |
| Server logs, including IP address | To run and secure our systems |
| A device check when you join (see §4): on iPhone/iPad, a one-time token from Apple's DeviceCheck service, which we pass to Apple and don't keep; on Android, a verdict from Google Play Integrity and a one-way fingerprint of the app's Android device ID | To give the welcome meal only once per phone |
| Crash reports: device model, operating system version, app version, and what the app was doing when it failed | To find and fix bugs. Crash reports don't include your name or email. |
| A push notification token, only if you allow notifications: an address that Apple or Google issue for this app on your phone, through Expo, and which type of phone it is (iPhone or Android) | To send you the notifications you've chosen (§6). It isn't used for anything else. |
| On Android, if you installed the app from the Google Play button on an invite page, or through one of our download links, the install referrer Google Play passes to the app | Read once, on the app's first launch. From an invite page, it fills in the friend's referral code for you, and stays on your phone (§3.3). From one of our download links, it says which one, for example "bag" or "counter": we note that on your account when you join, so we know which of our places bring new members. Installs on iPhone don't pass this, and we don't ask. |
| Your clipboard, only when you tap "Paste" | To paste a referral code you copied from an invite page. The app reads the clipboard at that tap, never otherwise. |
| A record of each notification we send you: which kind, when, and whether it was delivered to our push provider. For points earned, it holds the points figure; for an offer, the announcement's title and text. | To send each notification only once, to retry one that failed, and to stop sending to a phone that no longer accepts them. It doesn't contain your token, email address or name. |
Scanning our download QR codes. Our printed and online QR codes (on the bag, at the counter, on Instagram and so on) each open a link of their own at go.hangryfellas.com.cy/app, which sends you to the App Store or Google Play. We count the scans anonymously: for each day, which QR code was scanned and on what type of phone (iPhone, Android or other), and how many times. We keep nothing that identifies you or your phone: no IP address, no browser details, no time of day, no location, and no record of your scan on its own.
3.5 Wallet pass (only if you add one)
You can add your member card to Apple Wallet or Google Wallet from your profile in the app. It's optional.
What's on the pass: your name, your member QR code, and your member code, which staff can type in if the QR code won't scan. It doesn't show your points or tier, and it has nothing to do with payments.
- Apple Wallet: we create the pass and send it straight to your phone. We send nothing to Apple. If your phone syncs Wallet through iCloud, that happens under your own Apple account.
- Google Wallet: when you save the pass, Google stores it (your name, member QR code and member code) so it can show it to you in Google Wallet (see §7).
The pass doesn't change after you add it. We don't update it, and we don't learn when you open or use it.
3.6 What we do not collect
We don't collect:
- your location
- your contacts, photos or files
- payment card details (the app has no payments)
The app includes a camera feature used only by our staff to scan member QR codes. Images from it are never stored or sent anywhere. Customers are not asked to use the camera.
4. Why we use your data, and our legal basis
| What we do | Legal basis |
|---|---|
| Create and run your account; record points; process rewards; calculate your tier; show you your account information in the app; email you the sign-in and password codes you ask for; let you add, change and reset a password; change your email address when you ask us to, and tell your old address | Performance of our contract with you — the loyalty programme terms (GDPR Art. 6(1)(b)) |
| Pause password sign-in after repeated wrong passwords, and keep the short record of them | Our legitimate interests in protecting your account and the programme (Art. 6(1)(f)) |
| Keep your date of birth, if you give it, and use it to check you're 14 or older | Your consent (Art. 6(1)(a)), given by entering it |
| Choose offers suited to your age, if you've agreed to marketing | Your consent (Art. 6(1)(a)), with marketing |
| Keep a record that a date of birth showed someone under 14, and block that account | Our legitimate interests (Art. 6(1)(f)) in keeping the service to people 14 and over, and our legal obligations (Art. 6(1)(c)) |
| Keep your phone number, let our staff find your account by it in our admin system, and contact you about your account | Performance of our contract with you (Art. 6(1)(b)) or our legitimate interests (Art. 6(1)(f)) |
| Text you offers, if you've switched on "Offers by SMS"; give our admins the list of members who have | Your consent (Art. 6(1)(a)), separate from marketing consent, which you give by switching "Offers by SMS" on, and can withdraw at any time |
| Run the welcome spin and starter quests and pay their points; show an invite page for your referral code when you share it | Performance of our contract with you — features of the programme (Art. 6(1)(b)) |
| Create your Wallet pass when you ask for one, and switch it off when you delete your account (§3.5, §10) | Performance of our contract with you — a feature of the programme that you ask for (Art. 6(1)(b)) |
| On Android, note which of our download links you installed the app from, and count sign-ups by link (§3.4) | Our legitimate interests (Art. 6(1)(f)) in knowing which of our places bring new members |
| Recognise customers we already knew when they join, from a list of their phone numbers, and unlock their welcome meal (§3.1) | Our legitimate interests (Art. 6(1)(f)) in recognising existing customers |
| Send you one welcome email when you join, explaining the programme (§6) | Performance of our contract with you (Art. 6(1)(b)) — a service message about your new account |
| Send you an email when you reach a higher tier, explaining what it gives and what keeps it (§6) | Performance of our contract with you (Art. 6(1)(b)) — a service message about your account |
| Record which till device recorded each transaction; detect fraud and misuse; resolve disputes about points | Our legitimate interests in protecting the programme, our customers and our business (Art. 6(1)(f)) |
| Keep de-identified transaction records after you delete your account (§10) | Legitimate interests — fraud prevention and keeping accurate business records (Art. 6(1)(f)) |
| Keep an email fingerprint after deletion to stop the welcome meal being claimed twice (§10) | Legitimate interests — preventing abuse of the programme (Art. 6(1)(f)) |
| Check your phone when you join, and keep a record that it has claimed a welcome meal (§3.4, §10) | Legitimate interests — preventing the welcome meal being claimed more than once (Art. 6(1)(f)) |
| Crash reports and server logs | Legitimate interests — keeping the app working and secure (Art. 6(1)(f)) |
| Send you app notifications about your account: points earned, a warning that your tier needs points, and a reminder that your welcome meal is about to expire (§6) | Performance of our contract with you (Art. 6(1)(b)) or our legitimate interests (Art. 6(1)(f)). Each kind can be switched off in the app. |
| Send you offers and news, including offer notifications in the app | Your consent (Art. 6(1)(a)), which you give by switching marketing on in the app, and can withdraw at any time |
| Comply with legal obligations, such as keeping accounting records or responding to lawful requests | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have balanced them against your rights. You can object (§11).
Automated decisions. Your points and tier are calculated automatically from your transaction record, under the programme terms. These calculations do not produce legal effects or similarly significant effects on you. If you think one is wrong, contact us and a person will review it.
5. Signing in with Google or Apple
If you sign in with Google or Apple, that company shares your name, email address and an account identifier with us. It doesn't share your password. Google and Apple handle your data under their own privacy policies.
If you use Sign in with Apple and delete your Hangry Fellas account, we also ask Apple to cancel our app's link to your Apple ID. If that request can't be completed, your account is still deleted — we don't hold up a deletion because of it. You can also remove the app yourself in your Apple ID settings.
6. Notifications, emails and marketing
Account information, such as points you've earned, rewards, or an upcoming tier review, is always shown inside the app.
Emails. We email you only about your account: one welcome email within a minute of joining, explaining how the programme works, with your member ID and your welcome meal if you have one; an email when you reach a higher tier, saying what it gives you and what keeps it (once per tier in each cycle, never when you drop); the 6-digit sign-in code you asked for; a code to set a new password, if you ask for one; and, if we change your email address at your request, a notice to the old address. None of them contains offers. These emails load only our own pictures and fonts, the same files for everyone, so opening one tells us nothing, and their links are not tracked.
App notifications. We only send app notifications if you allow them on your phone. We don't ask the first time you open the app. We explain first, and ask after you've joined or earned your first points. If you say no, we won't ask again. There are four kinds:
| Notification | When | Tapping it opens |
|---|---|---|
| Points earned | Right after points are added at the counter | Your home screen |
| Keep your tier | Before your cycle ends, if you haven't yet earned enough to keep your tier: first when the warning period shown in the app begins, then closer to the end | Your home screen |
| Welcome meal reminder | A short time before your welcome meal expires, if you haven't used it | Your welcome meal |
| Offers | When we announce an offer | That offer |
- You choose. Switch any kind off in Profile → Notification preferences, or switch all notifications off in your phone's settings.
- Quiet hours. We send notifications only during the day, currently 10:00 to 20:00 Cyprus time. Anything due outside those hours waits until the morning. "Points earned" is sent at any time, because it answers your visit.
- Offers are marketing. They're sent only if you've switched marketing on (below) and the offers switch is on. Turning the offers switch on doesn't turn marketing on.
- We send each notification only once, and currently no more than one offer a day.
Marketing means offers, promotions and news. We only send it if you switch it on. It's off unless you choose it, and nothing is ever ticked for you.
- When you join, you can switch it on.
- After your first points, the app asks you once, "Want to hear about offers?". "Yes" switches marketing and offer notifications on. "Not now" leaves them off, and we don't ask again.
- Any time, you can switch it on or off in Profile ("Offers and news").
- Offers suited to your age. If you've given your date of birth and agreed to marketing, we may choose which offers to send you by age. You can object to this at any time by switching marketing off, or by contacting us.
Offers by SMS are a separate choice. We only text you offers if you switch on "Offers by SMS" in Edit profile.
- The switch appears only once you've saved a phone number. It's off unless you choose it, and nothing is ever ticked for you.
- You don't need it for your account or for any points, and it earns none.
- It's separate from "Offers and news": switching one on or off doesn't change the other.
- Any time, you can switch it off in Edit profile.
- If you change your number, your choice stays as it was, for the new number. If you delete your account, it switches off with it.
We keep a record of when you gave and withdrew each consent, and where.
7. Who we share your data with
We don't sell your personal data, and we don't share it with advertisers.
Our staff see your name, member number, tier and balance when they serve you, on a shared till device at the counter. Authorised managers can see your account history in our admin system, to resolve disputes and detect fraud. They can see your phone number there too, and find your account by it.
The SMS list. Only an admin can download the list of members who have switched on "Offers by SMS". It holds each member's phone number and name, and nothing else. We record every download: who, when and how many members it held.
Your invite link. If you share your invite link, the public page it opens shows your first name ("Elena invited you.") and your referral code to whoever opens it, and a chat's preview of the link shows your first name too. Your surname is not shown. You choose whether, and with whom, to share the link.
Our service providers process data on our behalf, under contract, and only on our instructions:
| Provider | What they do | Data involved | Location |
|---|---|---|---|
| Neon | Stores the app's data and backups | All account and loyalty data | Germany (Frankfurt) |
| Railway | Runs the app's servers, including the invite pages and download links at go.hangryfellas.com.cy | Data in transit, server logs (including the invite page address, which contains a referral code) | EU West (Amsterdam, Netherlands) |
| Railway | Runs our staff admin system | Account and loyalty data in transit | EU West (Amsterdam, Netherlands) |
| Resend | Sends account emails: sign-in and password codes, and the notice that your email was changed | Your email address and the code; for the notice, your old and new addresses | Sent from its EU (Ireland) region; Resend is a US company |
| Sentry (Functional Software, Inc.) | Crash reporting | Crash reports (§3.4) | EU |
| Expo (650 Industries, Inc.) | Delivers app notifications to Apple and Google | Your push notification token, and each notification's title, text and the screen it opens | USA |
| Apple | Sign in with Apple; DeviceCheck (welcome-meal device check on iPhone and iPad); Apple Push Notification service (delivering notifications to iPhone and iPad) | As described in §5; a one-time device token; each notification | USA |
| Google sign-in; Play Integrity (welcome-meal device check on Android); Firebase Cloud Messaging (delivering notifications to Android) | As described in §5; an app and device integrity check; each notification | USA | |
| Cloudflare | Runs our domain's DNS (hangryfellas.com.cy), including the records that protect our email from forgery. Hosts our legal web pages (legal.hangryfellas.com.cy), and stores and serves our menu photos (media.hangryfellas.com.cy). The photos contain no personal data. | For DNS, only what looking up a web address normally involves, such as the IP address of the server asking. Website and image access logs, including IP address. | Photos stored in R2's EU jurisdiction; DNS and pages served from a global edge network |
| Our app developer | Builds, maintains and supports the app, under a data processing agreement with us | Access as needed to operate and fix the system | Lebanon / EU |
Google Wallet, only if you save a pass there. When you save your member card to Google Wallet, Google stores the pass (your name, member QR code and member code) in your Google account to show it to you in Google Wallet. Google does this under its own privacy policy, as a company responsible for its own processing, not on our instructions. For users in the European Economic Area, that is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may process the pass in the United States. For that, Google LLC is certified under the EU–U.S. Data Privacy Framework, and Google relies on the European Commission's Standard Contractual Clauses where required. When you delete your account, we switch the pass off and remove your details from it (§10).
Others, only when necessary: professional advisers (lawyers, accountants); authorities, where the law requires it; or a buyer of our business, in which case this policy would continue to protect your data.
8. Transfers outside the EU
Your account and loyalty data are stored in the EU. Some providers above are based in, or may access data from, countries outside the European Economic Area, including the United States. Where that happens, we rely on the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses to protect your data. Contact us for more information.
9. How long we keep your data
| Data | How long |
|---|---|
| Your account and loyalty history | For as long as your account is open. Points don't expire, so we keep an inactive account unless you delete it. |
| Records kept after you delete your account | See §10 |
| Sign-in sessions | Until they expire or you sign out |
| Email sign-in and password codes | Until used, or 10 minutes. Expired codes are deleted within a day. |
| Your password, if you added one | Until you change it or delete your account. Deleted with your account. |
| Record of wrong passwords | Until the right password or a new one is used; deleted with your account. Only the last 15 minutes count towards a pause. |
| Your date of birth, if you gave it | Until you delete your account. Before the quest has paid you can remove it in the app; after, contact us. |
| The record that a date of birth showed someone under 14 | With the consent records, below. |
| Your phone number | Until you delete your account. You can change it in the app, but not remove it. |
| A phone number on our regulars list that nobody has joined with | Deleted automatically once it is older than the period we set (currently 6 months), checked every night. |
| A regulars-list number you joined with | Linked to your account until you delete it. Then the number is deleted, and a scrambled fingerprint of it is kept, with no end date, so it can't be used again (§10). |
| Push notification token | Until you sign out, the phone stops accepting notifications (for example, you uninstall the app), or you delete your account. A signed-out or rejected token is switched off at once and never used again; it is deleted with your account. |
| Notification switches | For as long as your account exists; deleted with it |
| Record of notifications we sent you | For as long as your account exists, and afterwards with the de-identified records in §10 |
| Crash reports | 30 days |
| Server logs | 7 days |
| An unfinished sign-up (joined with Google or Apple but never confirmed being 14 or older) | Deleted automatically once it is more than 7 days old and no longer signed in. No email fingerprint (§10) is kept for it unless a welcome meal or welcome points were given. |
| A Google Wallet pass you saved | Until you delete your account. Then we deactivate it and remove your name, QR code and member code from it. |
| An Apple Wallet pass you added | On your phone until you remove it. We can't reach it (§10). |
| Record that a phone has claimed a welcome meal | Kept after you delete your account, with no end date (§10). On iPhone and iPad this flag is held by Apple, not by us. |
| Database backups | Up to 7 days, our database provider's restore window. Deleted data may remain in a backup until it is overwritten. |
| Marketing and SMS consent records | For as long as your account exists, and afterwards for as long as we may need to show we had your consent |
10. Deleting your account
How: in the app, go to Profile → Delete account. If you can't use the app, follow the steps at legal.hangryfellas.com.cy/delete-account, or email Hangry.foodltd@gmail.com from the email address on your account.
What happens:
- Deleted straight away: your name, email address, sign-in details (including your password, if you added one, and any record of wrong passwords), your date of birth (and any earlier birthday), your phone number, marketing preferences (offers by SMS included), push notification tokens and notification switches. No more notifications are sent to you. Your member number, QR code and referral code stop working.
- Your consents are withdrawn. If you had agreed to marketing or to offers by SMS, we record that you withdrew it when you deleted your account. The record of your consents is kept as §9 says.
- Unspent points are lost. The app shows your balance before you confirm. Deleted accounts can't be restored.
- Kept in de-identified form: the record of your past transactions, points and tier changes, the record of notifications we sent you (which kind, when, the outcome, and the points figure or offer text it carried), and, on Android, which of our download links you installed the app from. It is kept without your name, contact details or notification token, for fraud prevention and to keep our business records accurate. It can't be linked back to you through the app.
- Kept as a fingerprint: a scrambled, one-way fingerprint of your email address. It can't be turned back into your email. We use it only to recognise a returning email at sign-up, so the welcome meal can't be claimed twice. You can still create a new account; it just won't receive the welcome meal again.
- Kept as a number fingerprint: if you joined with a number on our regulars list (§3.1), the number is deleted, and a scrambled, one-way fingerprint of it is kept so it can't be used for the same benefit again. It can't be turned back into your number.
- Kept as a device record: if you received a welcome meal, the record that your phone has claimed one (on Android, a one-way fingerprint of the app's device ID; on iPhone and iPad, a flag held by Apple). It is used only to stop the welcome meal being claimed again on that phone.
- A pending referral reward is cancelled, whether you were the one referring or the one referred.
- Your Wallet pass stops working. A Google Wallet pass is deactivated, and your name, QR code and member code are removed from it, usually within minutes. An Apple Wallet pass can't be reached by us once it's on your phone. It stays there until you remove it, but it no longer works: at the counter it shows as a deactivated account.
Requests made from the app take effect immediately. Requests by email are completed within one month, and we may ask you to confirm the request comes from you.
11. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy
- correct data that's wrong
- delete your data (§10)
- restrict how we use your data in certain cases
- data portability — receive the data you gave us in a commonly used format
- object to processing based on our legitimate interests
- withdraw consent to marketing, and to offers by SMS, at any time. This doesn't affect anything we did before you withdrew.
To use any of these rights, email Hangry.foodltd@gmail.com. We'll reply within one month. We may need to confirm your identity first. There's no charge.
You can also complain to the Cyprus data protection authority:
Commissioner for Personal Data Protection 15 Kypranoros Street, 1061 Nicosia, Cyprus www.dataprotection.gov.cy
We'd appreciate the chance to fix things first, so please contact us.
12. Children
You must be 14 or older to join. We don't knowingly collect data from anyone under 14. If the date of birth you give shows you're under 14, we don't keep the date, the account can no longer be used except to view or delete it, and we'll delete it. If we learn in any other way that someone under 14 has created an account, we'll delete it too.
13. Security
We protect your data with these measures:
- all connections to our systems are encrypted
- email codes are stored hashed, expire after 10 minutes and stop working after 5 wrong tries
- passwords are optional; if you add one it is stored only as a one-way hash, must be at least 8 characters and not a commonly used password, and password sign-in pauses after 5 wrong passwords in 15 minutes
- sign-in tokens are kept in your phone's secure storage
- your data is stored in the EU
- staff access is limited by role, and each till device is enrolled individually, must have a passcode on the phone itself, and can be switched off remotely
- every change to points is recorded and can't be silently edited
- only an admin can change your email address, at your request; the change is recorded, and we tell your old address
- only an admin can download the SMS list (§7), and every download is recorded
No system is perfectly secure. If a breach affects your data in a way that puts you at risk, we'll tell you and the authorities as the law requires.
14. Changes to this policy
If we change this policy, we'll post the new version here and update the "Last updated" date. If the change is significant, we'll also tell you in the app before it takes effect.
15. Contact
HN HANGRY FOODS CYPRUS LTD Kanari 47-49, Shop 1027, Limassol, Cyprus Hangry.foodltd@gmail.com