Cuplio Join free

Privacy policy

Last updated 22 October 2026

DRAFTThis policy is a draft and must be reviewed by a lawyer before launch. Items in [BRACKETS] still need completing.

1Who we are

Cuplio is a digital loyalty card app for independent cafés, operated by [COMPANY NAME] (ABN [ABN]) (“we”, “us”, “our”). This policy explains how we handle your personal information when you use the Cuplio app and website.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2What we collect

We only collect what we need to run your loyalty cards and the services you use:

  • Your first name (and last name, if you add it)
  • Your email address, which you sign in with using a one-time code
  • Your birthday, if you choose to add it (cafés only ever see the day and month)
  • Your mobile number, only if you choose to share it with cafés for orders and table bookings
  • Your visits, stamps, rewards, gifts, orders, table bookings, reviews and messages with cafés
  • If you allow notifications: a push token for your phone and its time zone, so we can send them at sensible hours

Your location is used on your phone, only while you use the app, to list nearby cafés first. It is not sent to us or to cafés.

Card payments for orders and table deposits are handled by Stripe. We never see or store your card number. [CONFIRM ANY OTHER DATA COLLECTED]

3How we use your information

We use your personal information to:

  • Create your account and sign you in
  • Record stamps, rewards and gifts on your café cards
  • Send your orders and table requests to the café, and take payment through Stripe
  • Send the notifications you have switched on, such as an order being ready or a reward waiting
  • Show your reviews (with your first name) on the café’s page
  • Keep Cuplio secure and fix problems

We don’t use advertising or sell your personal information.

4What cafés see

When you collect stamps at a café, that café can see the name you choose for cafés (your first name, unless you pick your full name or a name you prefer), your member number, your birthday (day and month only, if you add one) and your visits, stamps and rewards at their café.

If you choose to share your phone number for orders and table bookings (Settings › Contact for orders & bookings), the café you order from or book with sees it on that order or booking, so they can call or text you about it. Choose “Messages in Cuplio only” and cafés cannot see your number; switching it off also removes it from your open orders and upcoming bookings.

Cafés cannot see your email, your full date of birth, your location or your activity at other cafés.

5Who we share it with

We use service providers to help us run Cuplio. They may only use your information to provide their service to us:

  • Supabase, which hosts our database (stored in Sydney, Australia)
  • Stripe, which processes card payments for orders and table deposits on behalf of the café
  • Google Firebase Cloud Messaging and Apple Push Notification service, which deliver notifications to your phone
  • Resend, which sends our emails, such as your sign-in codes

6Overseas disclosure

Some of these providers may store or process information outside Australia, including in [COUNTRIES, e.g. the United States]. Where this happens we take reasonable steps to make sure your information is handled in line with the APPs.

7Storage and security

We store your information with Supabase in Sydney, Australia, and protect it with measures such as encryption in transit, access controls and monitoring. No system is completely secure, so we cannot guarantee security, but we work to protect your information from misuse, loss and unauthorised access.

We keep your information only for as long as we need it for the purposes in this policy or as required by law, then delete or de-identify it. [RETENTION PERIOD]

8Your choices, access and correction

  • Update your details at any time in Profile › Edit profile.
  • Switch notifications, café messages, location and quiet hours on or off in Settings.
  • Ask for a copy of the personal information we hold about you (Settings › Privacy › Download my data) or ask us to correct it. We will respond within a reasonable time, usually within 30 days.
  • Delete your account at any time in Settings › Delete account. Your cards, stamps and rewards are removed for good.

9Marketing

Cafés can send you news in the app, such as a new menu or a double-stamp day. You can switch café messages off at any time in Settings › Notifications.

10Children

Cuplio is not intended for children under [MINIMUM AGE]. We do not knowingly collect personal information from children under that age. If you believe a child has given us their information, please contact us and we will delete it.

11Contact and complaints

If you have a question or a complaint about how we handle your personal information, contact our Privacy Officer at quokkasupport@gmail.com, call 0414 093 339, or write to [POSTAL ADDRESS]. We will acknowledge your complaint and aim to resolve it within [X] days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

12Changes to this policy

We may update this policy from time to time. If we make significant changes we will let you know in the app. The “Last updated” date at the top shows when it last changed.