Privacy Policy
Mackbear Rewards app and mackbearcoffee.com.ge
Last updated: 14 November 2026
This policy explains what personal data Mackbear Coffee Co. collects through the Mackbear Rewards app and this website, why we collect it, and the choices you have.
1. Who we are
The data controller is Meidan Kofe LLC (შპს მეიდან კოფე), identification number 445692340, registered at 22a Tamar Mepe Avenue, apt. 48, Batumi, Georgia, operating the Mackbear Coffee Co. cafés.
Contact: info@mackbearcoffee.com.ge · +995 557 54 45 40
2. What we collect
| Data | Why |
|---|---|
| Email address | To create your account and send your one-time sign-in code. |
| Name | So staff can greet you and confirm the right account at the till. |
| Phone number (optional) | To move existing stamp-card balances to your account and contact you about your account if needed. |
| Birthday (optional) | To offer a birthday treat. |
| Purchase and reward history | Bill amount, number of drinks, branch, date and time, tokens and stamps earned or used. Needed to run the loyalty program and prevent misuse. |
| Technical data | Basic logs (such as IP address and time of requests) kept by our hosting provider for security and troubleshooting. |
We do not collect payment card details, precise location, contacts or photos. The app does not use advertising or cross-app tracking, and we do not sell your data.
The camera is used only in staff mode, by our cashiers, to scan customer QR codes. Camera images are not stored or sent anywhere.
3. Legal basis
We process your data to provide the loyalty program you sign up for (performance of our agreement with you), to keep the program fair and secure (our legitimate interest), and, for optional fields, with your consent, which you can withdraw at any time by clearing those fields in the app. We process data in line with the Law of Georgia on Personal Data Protection.
4. Who processes the data for us
- Supabase stores the app's database and handles sign-in, on servers in the European Union (Frankfurt, Germany).
- Google (Google Workspace) delivers sign-in code emails from our company email.
These providers act on our instructions and may not use your data for their own purposes. We share data with authorities only when the law requires it.
5. How long we keep it
We keep your account and history while your account is open. If you delete your account, your profile, tokens, stamps and history are deleted immediately from our live database. Backups are overwritten within 30 days. Records we must keep by law (for example accounting) are kept for the required period without being linked to your app account.
6. Your rights
You can see and edit your details in the app under My account, and delete your account there at any time (Delete my account). You can also email us to request a copy of your data, correction, deletion or restriction of processing, or to object to processing. You may lodge a complaint with the Personal Data Protection Service of Georgia.
7. Children
The app is not directed at children under 13, and we do not knowingly collect their data.
8. Security
Data is sent over encrypted connections. Access rules in our database ensure customers can see only their own data, and balances can only be changed through the till process by authorised staff. QR codes change every 60 seconds and can be used only once for a purchase.
9. Changes
If we change this policy, we will update the date above and, for important changes, tell you in the app.