Privacy Policy

Who we are

MILK Limited (“MILK”, “we”) builds hospitality software for New Zealand cafés. This policy covers the Constant Card loyalty app and the MILK website.

It's worth being clear about two different relationships, because they're genuinely different:

• Constant Card — when you join a café's loyalty programme, you're dealing with both the café and us. The café runs the programme and decides the rewards. We run the app and hold the data on their behalf.
• MILK's café software — when a café uses MILK to run their business, they decide what happens to their own business data. We process it for them.

This policy is written under the Privacy Act 2020.

What Constant Card collects

Only what the card needs to work:

• Your name and email address — so the card is yours, and so you can sign in again on a new phone.
• Your password — stored hashed by our authentication provider. Nobody at MILK or the café can read it.
• Your birthday — optional. Only used if the café runs a birthday reward.
• Your purchases at that café — what you bought, when, and how much, each time your card is scanned. This is what stamps, points and tier status are calculated from.
• A device notification token — only if you accept notifications. It identifies your device, not you, and it's deleted when you sign out or turn notifications off.

We do not collect your location, your contacts, or anything from other apps. We don't track you across other websites or apps, and there is no advertising ID in Constant Card.

What we do with it

• Run your card — count stamps or points, work out your tier, and show you your rewards.
• Send you deals from the café you hold a card with, if you've allowed notifications or opted into emails.
• Give the café insight into their own programme — how it's performing, which rewards get used.
• Show the café your visit pattern with them — the days and times you usually come in, and what you usually order — so the offers they send you are ones that suit you. This is only ever built from your visits to that café, and only that café can see it.
• Keep the service working and secure, and diagnose faults.

Who can see it

The café you hold a card with can see your name, your email if you gave one, and your activity in their programme. That's how they recognise you at the counter and how they run their rewards.

Beyond that, your information is only shared with the service providers we need to run the app — hosting, database and notification delivery — and only so they can provide that service to us. We may also disclose information where the law requires it.

Storage and offshore hosting

Constant Card runs on Supabase, whose database for this app is hosted in Sydney, Australia, and notifications are delivered through Expo. That means your information is stored and processed on servers outside New Zealand. We only use providers that are required to protect it to a standard comparable to the Privacy Act 2020.

Notifications and emails

Push notifications are entirely optional. If you decline them, or turn them off later in your phone's settings, your card keeps working exactly the same — you'll just see deals in the app instead of on your lock screen.

Deal and birthday emails have their own switch on the Account screen, and you can turn them off at any time.

Deleting your account

You can delete your Constant Card account from inside the app: Account → Delete my account. You don't need to email anyone or ask permission.

Here is exactly what happens when you do:

• Your login is closed and your password is destroyed — unless you also use it to work at a café on MILK (as an owner, manager or staff member). Then the login stays open for that job, and only your Constant Card details below are removed.
• Your name, email address, phone number and birthday are erased.
• Your cards are deactivated and your stamps and points are gone.
• Any device notification tokens are deleted, so you can't be notified again.

One thing is deliberately kept, and we'd rather tell you plainly than bury it: the café's record of past transactions stays in their books, with your identity stripped out of it. A café is legally required to keep its financial records, and those sales already happened. What remains is an unnamed row — it can't be traced back to you, and it isn't used to contact you or to build any profile.

Deleting your account can't be undone. If you join again later you'll start from zero.

This website

If you ask for a demo through the form on this website, we keep what you type into it — your name, your café's name, your email, and your phone number and message if you give them — so we can get back to you. It's stored in the same Sydney-hosted database described above. We only use it to talk to you about MILK, and we don't add you to a mailing list.

The website doesn't set cookies and doesn't run analytics or advertising trackers.

Your rights

Under the Privacy Act 2020 you can ask what we hold about you, and ask us to correct it if it's wrong. Most of it you can already see and change yourself on the Account screen.

For anything else, email hello@milkpos.com.nz and we'll respond within 20 working days, as the Act requires.

If you're not happy with how we've handled it, you can complain to the Office of the Privacy Commissioner.

How long we keep it

While your account is open, and for as long as the café needs it to run their programme. Once you delete your account, the personal parts are erased immediately as described above.

Children

Constant Card isn't designed for children under 13, and we don't knowingly collect their information. If you believe a child has signed up, email us and we'll remove the account.

Changes to this policy

If we change how we handle your information, we'll update this page and change the date at the top. If the change is significant, we'll tell you in the app.

Contact

MILK Limited
hello@milkpos.com.nz
New Zealand