ABTea Mobile App

Privacy Policy

Effective date: July 25, 2026

ABTea Milktea and Coffee Shop (“ABTea,” “we,” “us,” or “our”) operates the ABTea mobile application for ordering, customer accounts, rewards, and related services. This Privacy Policy explains what information may be collected or processed, why we use it, how it may be shared, and the choices available to users.

1. Information we may collect

Account and contact information

When you create or use an account, we may process information such as your name, email address, mobile number, account identifiers, authentication information, and profile details that you choose to provide.

Order and transaction information

We may process details connected to your orders, including selected products, quantities, customizations, totals, branch or pickup information, order status, payment method, and transaction references.

Payment confirmation information

When a feature asks you to submit proof of payment, you may choose to upload an image or payment reference. Do not include unrelated personal information in an upload. ABTea does not ask users to provide their GCash password, PIN, or one-time password.

Rewards and referral information

If you use rewards or referral features, we may process points balances, points activity, vouchers, redemptions, referrals, and QR or reference codes required to provide those features.

Camera, photos, and files

With your permission, the app may access the camera or selected photos and files when you scan a QR code, upload an image, save an image, or use another feature that you deliberately initiate. You can manage permissions through your device settings.

Device and technical information

We may process limited technical information—such as device type, operating-system or app version, network information, and diagnostic information—when reasonably necessary for compatibility, security, fraud prevention, and troubleshooting.

Communications

If you contact us, we may retain your message, contact details, and information needed to respond to and resolve your request.

2. How we use information

We may use information to:

• create, authenticate, and maintain user accounts;
• process and manage orders, payments, and pickup or fulfillment;
• operate rewards, vouchers, referrals, and customer-service features;
• send essential account, order, security, or service communications;
• protect users, prevent misuse or fraud, and secure the app;
• diagnose errors and improve reliability, performance, and usability;
• respond to support, privacy, correction, and deletion requests; and
• meet applicable legal, accounting, and regulatory obligations.

3. How information may be shared

We do not sell personal information. We may share or make information available only as reasonably necessary in the following circumstances:

• Service providers: vendors that support app hosting, database, authentication, email, file storage, security, or technical operations, including Supabase where used by the app.
• Order operations: authorized ABTea personnel who need information to prepare, verify, fulfill, or support an order.
• Legal and safety purposes: when required by law or when reasonably necessary to protect rights, safety, users, the public, or the integrity of our services.
• Business changes: in connection with a legitimate reorganization, transfer, or change in ownership, subject to appropriate safeguards.

4. Data retention

We keep information only for as long as reasonably necessary for the purposes described in this policy, while an account is active, or as required for legitimate business and legal obligations. Following a verified account-deletion request, account data and associated personal data that are not required to be retained will be deleted or anonymized.

Certain order, payment, security, fraud-prevention, dispute, tax, or accounting records may be retained when there is a legitimate or legal reason to do so. Any retained information will remain protected and will not be used for unrelated purposes.

5. Data security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or loss. No electronic system is completely secure, so users should also protect their account credentials and never share passwords, PINs, or one-time passwords.

6. Your choices and rights

Depending on applicable law, you may request access to, correction of, or deletion of personal information associated with your account. You may also manage device permissions through your phone settings.

To request deletion of an ABTea account and associated data, visit our Account Deletion page.

7. Children’s privacy

The ABTea app is not specifically directed to children under 13. We do not knowingly collect personal information from a child under 13 without appropriate authorization. A parent or guardian who believes a child has provided personal information may contact us.

8. Third-party services and links

The app may interact with third-party services or applications, such as Google Play, GCash, or external communication tools. Their own privacy policies govern information they independently collect or process. ABTea does not receive users’ GCash passwords, PINs, or one-time passwords.

9. Changes to this policy

We may update this Privacy Policy when our services or legal obligations change. The updated version will be posted on this page with a revised effective date.

10. Contact us