Bean2go Privacy Policy
Effective date: 5 November 2026
Bean2go is operated by Technosult (Pty) Ltd (registration number 2006/031006/07), trading as Bean2go ("Bean2go", "we", "us"). We are the responsible party for your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA).
This policy explains what we collect when you use the Bean2go app or website, why we collect it, who we share it with, how long we keep it and what your rights are. It applies to coffee drinkers ("Drinkers") and to coffee shop owners and staff ("Baristas").
Contact / Information Officer: Brett Lee, support@bean2go.co.za, P.O. Box 1540, New Germany, 3620, South Africa.
1. What we collect
Information you give us
| What | Why |
|---|---|
| Name, email address, mobile number | To create your account, sign you in, and let the shop know whose order it is |
| Password | To secure your account. It is stored only as a one-way encrypted hash and we can never see it |
| Car make, colour and registration (Drinkers, optional) | So the barista can bring your order to the right car for drive-by collection. Only needed if you choose drive-by; walk-up orders don't need it |
| Drink preferences (favourite drink, milk, sugar — optional) | To pre-fill your usual choices when you order |
| Orders: shop, items, choices, comments to the barista, collection time | To place and fulfil your order |
| Ratings and comments about a shop | To show other Drinkers how good a shop is |
| Referral code you entered | To give you and your friend the referral reward |
| How you heard about us (optional) | To understand which marketing works |
| Baristas: shop name, address, phone, email, photos, menu, opening hours, and bank account details | To list your shop, take orders, and pay your earnings into your bank account |
Information collected automatically
| What | Why |
|---|---|
| Location while the app is open | To show coffee shops near you and the distance to them |
| Location during an active order trip — including in the background | Only after you tap "Directions" / "I'm on my way" for an order. We share your live estimated arrival time with that one shop so your coffee is ready the moment you arrive. Tracking stops automatically when you arrive, collect your order, or the order ends. A notification is shown on your phone the whole time tracking is running. We never track you at any other time |
| Device push-notification token | To send you order updates (accepted, ready, etc.) and, for Baristas, new-order alerts |
| Basic technical data (app version, device type, error logs) | To keep the app working and fix problems |
Payment information
Card payments are processed by PayFast (a South African payment provider regulated under PCI-DSS). You enter your card details on PayFast's secure page. Bean2go never sees or stores your card number or CVV. We only receive a payment reference and whether the payment succeeded.
We keep a record of your Bean2go credit (prepaid balance): top-ups, purchases and refunds.
2. What we do NOT do
- We do not sell your personal information.
- We do not use your information for third-party advertising, and the app contains no advertising trackers.
- We do not track your location except during an order trip you started.
- We do not send marketing messages without your consent, and every marketing message has an unsubscribe option.
3. Who we share it with
| Who | What they get | Why |
|---|---|---|
| The coffee shop you order from | Your first name, order, comments, collection time, car description (drive-by) and your live ETA while you're on your way | To make and hand over your order |
| PayFast (Cape Town, South Africa) | Payment amount, reference, your email | To process card payments |
| Supabase (database and hosting, data stored in Ireland, EU) | All app data | To run the service |
| Lovable (website hosting) | Technical requests | To serve the app |
| Google (Firebase Cloud Messaging) and Apple (Push Notification service) | Your push token and the notification text | To deliver notifications |
| Google Maps | When you tap Directions, your phone opens Google Maps with the shop's location; Google's own privacy policy applies inside Google Maps | Turn-by-turn directions |
| Email provider | Your email address | To send sign-in, password-reset and receipt emails |
| Authorities | Only what the law requires | Legal obligations, fraud prevention |
Cross-border transfer: our database is in the European Union (Ireland), which has data-protection laws at least as strong as POPIA (the GDPR). Our service providers are bound by contract to protect your information and use it only to provide their service to us.
4. How long we keep it
| Data | Kept for |
|---|---|
| Account details | Until you delete your account |
| Detailed GPS trip points | 30 days (in case of a dispute about an order), then permanently erased automatically |
| Orders, payments, credit transactions, payouts | 5 years, as required by South African tax law (Tax Administration Act). If you delete your account, these records are kept but no longer linked to your name, phone, email or car |
| Ratings | Until you delete your account (scores stay anonymously; your comments are removed) |
5. Your rights (POPIA)
You may:
- see the personal information we hold about you;
- correct it (most of it you can edit yourself in Profile);
- delete your account — in the app go to Profile → Delete my account, or follow the steps at /delete-account on our website, or email support@bean2go.co.za;
- object to processing or withdraw consent (e.g. turn off location or notifications in your phone settings — ordering still works without tracking, the shop just won't see your ETA);
- complain to the Information Regulator of South Africa: complaints.IR@inforegulator.org.za, www.inforegulator.org.za.
We respond to requests within 30 days. We may need to verify your identity first.
6. Security
All data is encrypted in transit (HTTPS/TLS). Access to the database is restricted by row-level security so each user can only see their own information; shops only see their own orders. Bank details are visible only to the shop owner and Bean2go administrators. Passwords are hashed. No card data is stored.
7. Children
Bean2go is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.
8. Changes
We may update this policy. We will show the new effective date at the top and, for important changes, notify you in the app.
9. Contact
Technosult (Pty) Ltd t/a Bean2go · support@bean2go.co.za · P.O. Box 1540, New Germany, 3620, South Africa.