Privacy Policy — Cyprus Restaurant

Who we are

The Cyprus Restaurant app is operated by Glade Tider ApS, Bakkeboager 2, 2640 Hedehusene, Denmark (CVR-nr. 43775790). Glade Tider ApS also operates Dalle Valle and Café A. This policy covers the Cyprus Restaurant app.

If you have any questions about this policy or how your data is handled, contact us at ahdebreky@gmail.com.

What we collect

When you create an account, we collect:

Your name and email address
Your birthday, if you choose to add one
A record of the coupons you redeem, and when

If you allow push notifications, we also store a notification token tied to your device so we can send you updates. This is separate from your name and email, and you can turn it off at any time from the app's Profile screen. We do not collect your location, photos, contacts, or any browsing or usage analytics.

How we use it

To create and identify your account
To let you redeem coupons and to keep a record of what you've redeemed
To send you a birthday offer, if you've added a birthday
To send you push notifications about new deals, if you've allowed them

We do not currently send marketing emails. If that changes, your email may occasionally be used to tell you about offers from other venues operated by Glade Tider ApS, such as Dalle Valle and Café A. You can ask us to leave you out of this at any time by contacting us or deleting your account.

Who we share it with

We use a small number of service providers to run the app:

Railway, which hosts our server
Supabase, which hosts our database
Google Firebase, which delivers push notifications

These providers only process data on our behalf to run the app. Some may be located outside the EU/EEA. Where that's the case, we rely on appropriate safeguards, such as the EU Standard Contractual Clauses, to protect your data. We do not sell your data, and we do not share it with advertisers.

How long we keep it

We keep your account and redemption data for as long as your account is active. If you delete your account, whether in the app or by requesting deletion by email, we delete your data. Requests made by email are processed within 30 days; deleting your account in the app removes your data immediately.

Your rights

Under GDPR, you can:

See what data we hold about you, from the "View my data" screen in the app, or by contacting us
Remove your birthday at any time from that same screen
Turn off push notifications at any time from the Profile screen
Delete your account and data at any time, in the app or by emailing us
Ask us to correct inaccurate data by contacting us

You can also lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk if you believe we haven't handled your data properly.

Children's privacy

The app isn't directed at children under 13, and we don't knowingly collect data from anyone under that age.

Security

We use standard security measures, including encrypted connections (HTTPS), to protect your data in transit. No system is perfectly secure, but we take reasonable steps to protect the information we hold.

Changes to this policy

We may update this policy from time to time. If we make a significant change, we'll update the date at the top of this page.