Privacy policy
Last updated November 2, 2026
Payments. Card purchases and Passport top-ups use real money through Stripe. Test Passport balances do not carry into the live app. A Golf card hold reserves funds separately from the purchase.
Who we are
Betty's Biscuits & Burgers ("Betty's", "we") runs the Betty's app for ordering food for pickup at our shop. Questions about this policy: [email protected].
What we collect and why
We collect only what is needed to take, make and hand over your order:
- Contact details you enter at checkout: name, phone number and email address, so we know whose order it is at pickup and can reach you about it.
- Sign in with Apple, if you choose it: an account identifier from Apple, and the name and email Apple shares (this may be Apple's private relay address). If you continue as a guest, we create an anonymous guest account on your device instead.
- Orders and Passport activity: what you ordered, prices, pickup times, refunds, and Passport funds and credit.
- Messages you send to the shop from Help in the app.
- Job applications you send from our website: your answers, and a photo if you add one. Only the owner sees them, and we remove them on request.
- Emails you send to [email protected]: your name, email address and what you wrote are kept in our mailbox and shown on our staff screen so we can answer you.
- Golf incident records: when the owner creates a record about missing or damaged equipment, a separate copy of the checkout name, phone and email, incident notes, follow-up and police-report details, and original evidence photos uploaded by the owner. We do not collect photographs or numbers from identity documents. Checkout contact details are as provided, not verified legal identity.
- A notification token from your iPhone, only if you allow notifications, so we can tell you when your order is ready.
We do not use advertising, we do not track you across other apps or websites, and we do not sell or rent your information.
Payments
Card details are entered into Stripe's payment form inside the app and go directly to Stripe. Betty's never receives or stores your full card number. Stripe's software may collect information about how the payment form is used to process payments and prevent fraud.
Who can see your information
- Betty's staff, to make and hand over your order and answer your messages.
- Service providers that run the app for us: Stripe (payments), Apple (Sign in with Apple and notifications) and our hosting provider. They may use your information only to provide their service.
- The shop owner can access private Golf incident records and evidence photos. Recording police-report details in the kitchen does not send anything to police.
- Authorities, if the law requires it.
How long we keep it
We keep order and payment records for as long as we need them to run the shop and meet tax and accounting rules. Guest sessions on a device expire on their own.
Emails stay in our mailbox and on our staff screen until we remove them. Deleting an app account does not remove them; write to [email protected] to ask us to.
Job applications and photos stay until we remove them. Write to [email protected] to ask us to. Removed information can stay in our server backups for up to 14 days.
Private Golf incident evidence remains after account deletion until the shop owner explicitly removes its private content. This includes the separate checkout-contact copy, notes, police-report details, revision history and original photos. Owner removal clears that private content from the active system while keeping anonymous case and equipment history. Database backups age out on their normal 14-day rotation.
Deleting your account
You can delete your account in the app: Passport → Delete account. This signs you out and removes your ordinary account and checkout personal details. The private Golf incident evidence described above is retained separately until the owner removes it. Some order and payment records must be kept for accounting, without being used for anything else. You can also email [email protected] to ask what we hold about you or to have it corrected or deleted.
Children
The app is not directed to children under 13, and we do not knowingly collect their information.
Security
Information travels over encrypted connections and is stored on access-restricted servers. No system is perfectly secure, but we limit who can see your information to the people who need it.
Changes
If this policy changes, we will update this page and the date at the top.