Kalaches Privacy Policy

Effective date: [EFFECTIVE DATE]

This Privacy Policy describes how Kalaches LLC, doing business as Kalaches ("Kalaches," "we," "us," or "our"), collects, uses, and shares information through the Kalaches mobile app (the "App") and the Kalaches Rewards program ("Rewards"), and the choices available to you. By using the App or Rewards, you acknowledge this Policy.

Our online ordering site and in-store payments are operated through Square. Square also collects information when you order or pay, as described in Square’s Privacy Notice.

1. Information we collect

Information you provide. Your mobile phone number when you sign in or join Rewards; the one-time verification code you enter; your choices and settings, such as notification preferences and acceptance of our Terms; and anything you send us when you contact support.

Information from Square. Information about your Rewards membership, such as your member ID, Points balance, available rewards, and Rewards activity, and the identifiers that connect your App account to your Square customer and Rewards records.

Information collected automatically. Device and app information (such as device model, operating-system version, app version, and language); information about how you use the App; crash, performance, and diagnostic information; a notification token if you allow notifications; and security and log information used to operate and protect the App.

Information on your device. The App stores your settings and, while you are signed in, a temporary copy of your Rewards information on your device. When you sign out or delete your account, the App removes your personal information from the device and keeps only non-personal settings.

The App does not currently request access to your precise location, contacts, photos, or microphone, and payment card information is handled by Square, not the App.

2. How we use information

We use information to:

  • provide, operate, maintain, and improve the App and Rewards;

  • verify your phone number, sign you in, and secure your account;

  • find or, at your request, create your Rewards membership, and show your Points, rewards, and activity;

  • administer Rewards, promotions, and bonus offers, including eligibility and limits;

  • send notifications you choose and service messages;

  • respond to your requests and support questions;

  • analyze use of the App and fix problems;

  • detect, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms;

  • comply with legal obligations and enforce our rights; and

  • for other purposes we describe when we collect the information or with your consent.

We may create de-identified or aggregated information that does not identify you and use it for any lawful purpose.

3. How we share information

We share information:

  • With service providers that perform services for us, including Square (point of sale, Rewards, and online ordering), Google Firebase and Google Cloud (sign-in and text-message verification, hosting, databases, analytics, crash reporting, and app integrity), Apple (notifications), and our email provider;

  • For legal reasons, when we believe disclosure is required or appropriate to comply with law or legal process, or to protect the rights, property, or safety of Kalaches, our customers, or others;

  • In a business transaction, such as a merger, acquisition, financing, reorganization, or sale of assets; and

  • With your consent or at your direction.

We do not sell your personal information or share it for cross-context behavioral advertising, and we do not share personal information with third parties for their own direct marketing purposes.

4. Tracking and Do Not Track

The App does not respond to browser "Do Not Track" signals. We do not allow third parties to collect personal information about your activity across other companies' apps or websites over time through the App. Our analytics and crash-reporting providers collect information about your use of the App to provide those services to us.

5. Retention

We keep information for as long as we consider reasonably necessary for the purposes described in this Policy, including to provide the App and Rewards, comply with legal, tax, and accounting obligations, resolve disputes, prevent fraud and abuse, maintain security, and enforce our agreements. Square keeps Rewards and transaction records according to its own policies and our instructions.

6. Your choices

  • Guest use. You can browse parts of the App and order without an account.

  • Notifications. You can change notification choices in the App or in iOS Settings.

  • Sign out. Signing out removes your personal information from the device. It does not delete your account or Rewards membership.

  • Phone number changes. Contact support@kalaches.com to ask us to update the phone number on your membership.

  • Account deletion. You can delete your App account in the App under Me → Delete account. Deleting your App account does not end your Rewards membership. When you delete your account, you can also ask us to remove your Rewards membership and customer data held in Square. We will handle deletion requests as described in the App and as the law requires. We may keep information when it is required or permitted by law, including for transaction, tax, accounting, fraud-prevention, security, dispute, and legal purposes.

You can also contact support@kalaches.com with questions about your information.

7. California residents

We are based in California. If the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the "CCPA"), applies to Kalaches, California residents may have the right to request access to, correction of, or deletion of their personal information, to know how it is collected, used, and shared, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in the CCPA. To make a request, contact support@kalaches.com. We will verify your identity before responding and respond as the law requires.

8. Children

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact support@kalaches.com and we will take appropriate steps to delete it.

9. Security

We use reasonable measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee the security of your information.

10. Changes to this Policy

We may change this Policy at any time by posting the updated Policy at kalaches.com/privacy and updating the effective date. Changes take effect when posted unless we say otherwise. We will provide additional notice where the law requires it.

11. Contact us