Legal

Privacy policy

Last updated [date]

Who we are

Beer Appear is run by [company legal name], [registered address] ("Beer Appear", "we", "us"). This policy covers the Beer Appear apps for iPhone (including the App Clip) and Android, the web app, and this website.

The bars that use Beer Appear are separate businesses. When you order from a bar, that bar also handles your information: to make and serve your order, to take payment, and for its own records. Their use of it is covered by their own privacy practices.

Questions about this policy: [privacy contact email].

What we collect

Your account

• Email address, used to sign in and to contact you about your account.
• Name, if you give one. Bartenders see it on your orders so they know who to hand them to. You can change it in the app.
• Password, if you sign in with email and password. We store only a one-way hash of it, never the password itself.
• Sign in with Apple or Google: the account identifier, email address and name that Apple or Google shares with us. If you use Apple's "Hide My Email", we get a relay address instead of your real one.

Your orders and tabs

• The bar, the tag you ordered from, the name you ordered under, what you ordered, prices, tax, your tip, any note you added, and when the order was placed, paid, checked in at the bar, made, ready and picked up.
• If you open a tab: its spending limit, the rounds on it, and when and how it was closed.

Payments

Card, Apple Pay and Google Pay payments are processed by Stripe. Your card details go straight to Stripe. We never receive or store full card numbers. We get a reference to each payment and whether it succeeded, was held (for a tab) or refunded.

If you work at a bar

• The bars you're on the staff of, and your role at each.
• Your bar station PIN, stored only as a one-way hash.
• Which orders you started and handed over, used to work out tips.
• When you confirm on a bar station that the door is checking IDs that night, or stop app orders: who did it, on which station and when. We keep it as a record of each night.
• Which version of the staff terms you accepted, and when and where (in the app or on which bar station). If you accept the bar agreement for a bar, the same for that. We keep these records, with your email address, after you leave a bar or delete your account, as evidence of what was agreed. [Retention period.]

From your device

• Beer Appear tags. When you tap or scan a tag, the app reads the link on it, which says which bar, and which part of it, you're at.
• Location, only if you ask for nearby bars. When you open Nearby in the iPhone or Android app, and allow it, the app gets your phone's location once and sends it to us to find bars near you. We use it for that one search and don't store it or track you. Bar owners can also save their bar's location from the app, so it shows up in those searches. The App Clip and the web app never ask for your location.
• An order started ahead is kept on your phone until you pay and send it at the bar.
• Your name from your last order is kept on your phone, so you don't have to type it every round. Signing out removes it.
• Sign-in on your device. The app keeps a sign-in token on your device so you stay signed in. It expires after 30 days. Staff using the online setup guide get a cookie that keeps them signed in to it.
• Server logs. Like most online services, our servers record basic details of each request, such as IP address, time and the page or action requested. We use them to keep the service secure, stop abuse (for example, repeated sign-in attempts) and fix problems.

If you apply to be a campus ambassador

The ambassador application asks for your name, email, school and town, and optionally your phone number, graduation year, where you work, bars you know, why you're applying and a social media handle. If you came through another ambassador's link, we record their referral code.

We don't use advertising, analytics or tracking tools, in the apps or on this website.

How we use it

• To take your order, send it to the bar and show you its progress.
• To take payment, hold and close tabs, and handle refunds.
• To run your account and keep it secure.
• To give bars what they need to serve you and keep their books: order history, sales and tips reports.
• To answer you when you contact us.
• To review ambassador applications, contact applicants, and track and pay ambassadors for the bars they introduce.
• To prevent fraud and misuse, and to meet legal obligations.

[If you serve people in the UK or EU, list the legal basis for each use here, e.g. contract, legitimate interests or legal obligation.]

Who we share it with

• The bar you order from sees your name, where you ordered from, what you ordered, your note and your tip, and your tab if you open one. Bartenders see this on the bar's screens. Owners and managers see order history and reports.
• Stripe processes payments. Payments are made to the bar's own Stripe account, and Beer Appear receives a fee.
• Apple and Google, if you choose to sign in with them.
• Companies that host and run our service: [hosting provider, email provider, …]. They may use your information only to provide their service to us.
• Authorities, when the law requires it, or to protect people's safety or our rights.
• A buyer or successor, if Beer Appear is sold or merged. This policy would continue to apply to your information.

We don't sell your personal information or share it for advertising.

How long we keep it

• Your account is kept until you delete it.
• Sign-ins expire after 30 days, or when you sign out.
• Orders are kept for [period, e.g. 7 years], because bars need them for accounting, tax and tips. If you delete your account, your name is removed from them.
• Ambassador applications are kept for [period, e.g. 12 months] if we don't go ahead, and for as long as you're an ambassador (plus what tax law requires for payments) if we do. Email us to have yours deleted sooner.
• Server logs are kept for [period, e.g. 30 days].

Deleting your account

In the app, go to Account › Delete account. We delete your email address, name, password and Apple/Google sign-in links, and sign you out on every device. Your past orders stay in the bars' records without your name. You'll need to close any open tab first, and wait for any order in progress to be picked up.

If you can't use the app, email [privacy contact email] from the address on your account.

Your rights

Depending on where you live, you may have the right to see the information we hold about you, correct it, delete it, get a copy of it, or object to how we use it. You can change your name and delete your account in the app. For anything else, email [privacy contact email]. We'll reply within [30 days]. You can also complain to your local data protection authority.

[Add region-specific sections if they apply, e.g. California (CCPA/CPRA) or the UK/EU (GDPR), including your representative and the authority to contact.]

Age

Beer Appear is for ordering alcohol and is only for people of legal drinking age where they are. We don't knowingly collect information from anyone younger. If you believe someone under age has an account, contact us and we'll delete it.

Security

Information is encrypted in transit. Passwords and PINs are stored only as one-way hashes. Sign-in tokens expire, and changing your password signs out your other devices. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you, as the law requires.

Where your information is stored

Our servers are in [country or region]. If you use Beer Appear from somewhere else, your information is transferred there, with the safeguards the law requires.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll let you know in the app or by email before it takes effect.

Contact

[company legal name]
[registered address]
[privacy contact email]