Privacy Policy

1. What we collect

If you collect stamps at a café

• your name and email address, or the details from Google if you sign in with Google
• your birthday (day and month only, never the year), if you choose to give it
• your stamps, visits and rewards at each café you use
• the emails we've sent you and whether you've unsubscribed

If you run a café on Back Again

• your name, email address and phone number
• your café's details, such as its name, address, opening hours, logo and photos
• your plan and payment history (card details are held by Stripe, not by us)
• questions you ask Ask Froth, our AI assistant, are sent to answer them; we keep only a count of how many you've asked

If you visit our website or enquire

• details you give us in a form, such as your name, email, phone number and café
• how you use the site, through cookies and similar tools (section 6)

2. How we use it

• to run the loyalty card: recording stamps, showing your progress and letting you claim rewards
• to send the emails the Platform is for, such as reward reminders, and win-back and birthday offers from cafés you've joined
• to send you updates and offers about Back Again, if you're a café owner or have enquired
• to support you, keep the Platform secure and prevent fraud
• to understand how the Platform and our website are used, and to improve them
• to measure our advertising

We don't sell your personal information.

3. What the café can see

When you join a café's card, that café can see your name, email address, birthday (day and month), and your visits, stamps and rewards at that café. A café can't see what you do at other cafés. Cafés use this to run their rewards and to send you offers through Back Again.

4. Emails and unsubscribing

Every marketing email has an unsubscribe link, and you can also email unsubscribe@backagain.au. Unsubscribing doesn't stop essential messages about your account or rewards, such as sign-in links.

5. Who we share it with

We use trusted providers to run Back Again. They only get what they need to do their job:

• Supabase: our database and sign-in, hosted in Sydney
• Netlify: hosts the website and Platform
• Resend: sends our emails
• Stripe: takes café owners' payments
• Google: sign-in with Google, address lookup for cafés, photo enhancement, and advertising measurement
• Meta: advertising measurement; when you enquire, your email and phone are scrambled (hashed) before they're sent
• Anthropic: powers Ask Froth and our writing tools. It receives a café's totals and settings and the owner's question, never a customer's name or email

Some of these providers store or process information outside Australia, including in the United States. We choose providers with strong security and privacy practices. We may also share information where the law requires it.

6. Cookies and tracking

We use cookies to keep you signed in and to make a tap on a café's sign count as a visit. On our website we also use Google Ads and the Meta Pixel to understand which ads bring people to us. You can block or clear cookies in your browser; the Platform needs its own sign-in cookies to work.

7. Keeping it safe, and for how long

Information is stored securely, sent over encrypted connections, and only available to people who need it. We keep it while your account is active and for as long as needed afterwards to meet legal and accounting obligations, then delete or de-identify it. You can ask us to delete your account at any time.

8. Seeing and correcting your information

You can ask for a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing hello@backagain.au. We'll respond within 30 days.

9. Complaints

If you're unhappy with how we've handled your information, email us first and we'll do our best to fix it. If you're still not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

10. Changes to this policy

We'll update this policy when the way we handle information changes. The date at the top shows when it last changed.