This policy explains what information Boba Street Cafe ("we", "us") collects when you use our website, our mobile app, or our ordering and rewards services, how we use it, and the choices you have.
1. Who we are
Boba Street Cafe
141 NW 20th St Ste B9
Boca Raton, FL 33431-8099
Phone: +1 (561) 334-2277
2. Information we collect
You give us
| What | When |
|---|---|
| Mobile phone number | When you create an account or sign in (we verify it with a one-time code) |
| First name, last name, email address | When you complete your member profile |
| Order details and notes | When you place an order (items, modifiers, pickup time, any note you type, and the name and phone number you give for the order) |
| Marketing preferences | When you check or uncheck the marketing box |
Created when you use the service
- Order and payment records — order number, pickup code, amounts (subtotal, discount, tax, tip, total), payment status, and the Square payment and order identifiers.
- Rewards and coupon records — points balance and adjustments, rewards you redeem, coupon codes issued to you, and when they were used.
- Consent records — the version of the marketing wording you agreed to, a copy of the exact text shown to you, the date and time, the source (web or app), and the IP address and browser user-agent string recorded at that moment. We keep this because we must be able to show what you agreed to.
- Push notification data — if you allow notifications, a device push address and its encryption keys, an app installation identifier, your device user-agent, and delivery results (whether a message was accepted or failed).
- Technical and diagnostic data — server logs needed to run and secure the service, including IP address and request information.
What we do not collect
We do not use third-party advertising or analytics trackers, and we do not sell your personal information.
3. How we use it
- Take, prepare, and hand over your order, and show you its status.
- Create and manage your account, verify your phone number, and sign you in.
- Operate the rewards program: accrue points, issue coupons and rewards, and redeem them.
- Send you order updates and, only if you opted in, marketing messages.
- Handle support requests, refunds, and disputes.
- Keep the service secure, prevent abuse and fraud, and debug problems.
- Meet tax, accounting, and legal record-keeping obligations.
4. Who we share it with
We share information only with service providers that help us run the service, and only as needed. We do not sell your personal information.
| Provider | What it does for us | What it receives |
|---|---|---|
| Square | Payment processing, order management, catalog, and the loyalty points ledger | Order contents and amounts, payment details you enter directly with Square, and a customer/loyalty identifier |
| Supabase | Our database, sign-in, and server functions | The account, profile, order, rewards, and consent records described above |
| Expo | Delivering push notifications to your device | A device push address and the notification content |
| Twilio | Sending the one-time sign-in code by SMS | Your mobile phone number and the message |
| Browser push services (for example Google or Mozilla) | Delivering web push notifications you enabled | A push subscription address and the notification content |
We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganization of the business (in which case we will tell you).
5. Cookies and local storage
We use strictly necessary storage on your device to keep you signed in and to remember your cart and your preferences. We do not use advertising cookies. Clearing your browser or app storage signs you out and empties your cart.
6. How long we keep it
- Order and payment records — kept for as long as we need them for accounting, tax, and dispute purposes.
- Consent records — kept as proof of what you agreed to, including after you opt out.
- Rewards points — points expire 6 months after they are earned, as stated in the rewards program.
- Push notification data — removed or disabled when you turn notifications off or uninstall the app.
- Account details — kept while your account is open; see the deletion section below.
7. Your choices and rights
- Marketing messages — reply
STOPto any marketing text, or use the unsubscribe link in any marketing email. See our Messaging Terms. You will still receive messages that are necessary to complete an order you placed. - Push notifications — turn them off in your device settings at any time.
- Access, correction, or deletion — contact us at +1 (561) 334-2277 or using the details in section 9, and we will act on your request. Deleting your account removes your profile, phone number, email, and push subscriptions. We may need to keep order, payment, and consent records where the law or our accounting requires it, and we will tell you what we kept and why.
8. Security
We use encryption in transit (HTTPS), keep credentials in server-side configuration rather than in the app, and limit access to those who need it. No system is perfectly secure, but we work to protect your information and to notify you if a breach affects you.
9. Contact us
Questions, or a request about your information? Call us at +1 (561) 334-2277, or visit us at 141 NW 20th St Ste B9, Boca Raton, FL 33431.
10. Children
Our service is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.
11. Changes to this policy
If we make a material change, we will update this page and revise the date at the top. Continued use after a change means you accept the updated policy.