Privacy

Last updated 3 October 2026

This notice explains what the Heritage Café loyalty app and the café collect about you, why, and what you can do about it. The short version: we keep what a loyalty card needs, your location never leaves your phone, and you can delete everything from inside the app.

Who we are

Heritage Café, Fredrikinkatu 61 A, 00100 Helsinki, Finland. Questions: ask us at the counter, or message @heritagecafe_ on Instagram.

The loyalty app

When you sign in with Apple we receive an account identifier and, if you allow it, your name and email address (Apple may give us a private relay address instead of your real one). We use these to run your card: the stamps you collect, the rewards you earn and redeem, and the name our baristas call out. Your card and its history are stored on our servers in the European Union (Supabase, Stockholm).

We also store a notification token for your phone so we can tell you about double-stamp hours and rewards, and only if you turn notifications on.

Nearby nudges (optional)

If you switch on “Nearby nudges”, your iPhone itself watches whether you are within about a kilometre of the café and tells us only nearby or not nearby. We never receive or store your location, your route, or any coordinates. The yes/no fades after a few hours. You can switch it off any time in the app’s Profile, and we forget it immediately.

Photos you post to the wall

Photos and captions you submit to the community wall are reviewed by our staff before anyone else sees them, and are shown to other members of the app once approved. You can remove your own posts; deleting your account removes them all.

Purchases at the till

Our till runs on Shopify. When you scan your loyalty QR at the till, that purchase is linked to your card so it can earn a stamp. Separately, like most shops, we keep sales records: what was bought, when, and — for card payments — the card type and last four digits as printed on your receipt. We use this to recognise returning customers and to run the café; we never see or keep your full card number, and we do not combine it with your location.

What we don’t do

We don’t sell or share your data with advertisers, and we don’t track you across other apps or websites.
We don’t collect your location — only an optional nearby yes/no, computed on your phone.
The app has no account other than Sign in with Apple; we never see a password.

Your rights

You can see your stamps, rewards and posts in the app at any time. Delete account in Profile removes your account, card, history, posts and notification token for good. You can also ask us — at the café or on Instagram — to access, correct or delete your data, or to complain; you may also contact the Finnish Data Protection Ombudsman. Our legal basis is the loyalty agreement you enter by joining, and your consent for notifications, nearby nudges and wall posts.

Retention

Loyalty data is kept while your account exists. Sales records are kept as bookkeeping law requires. Notification and nearby data are discarded when you turn them off or delete your account.

Changes

If this notice changes in a way that matters, we’ll tell you in the app.