PRIVACY POLICY — o10

Effective Date: December 16, 2025

This Privacy Policy explains how o10 (“we”, “us”, “our”) collects, uses, shares, and protects information when you use the o10 mobile application (the “App”).

1) Who We Are

Business Name: o10 (Coffee Shop)
Address: Khzema, Sousse, Tunisia
Email: o10.coffee.shop@gmail.com

2) Information We Collect

We collect only the information necessary to operate the App and provide its features.

A) Account Information (Authentication)

You may sign in using email authentication and/or third-party sign-in (Google), depending on which options are enabled in the App.

• Email address
• Name (only if provided by you or your sign-in provider)
• Firebase Authentication User ID (UID)

Important: We use your name and email address only for authentication and account management in the App. We do not use your name/email for advertising or marketing messages.

B) Third-Party Sign-In (Google)

If you choose to sign in using Google Sign-In, we receive from Google only the information needed to authenticate you in the App, which may include your email address and name (depending on what you allow). We do not receive your Google password.

Google may process data independently under its own terms and privacy policy.

C) App Data You Generate (App Features)

Depending on how you use the App, we may store and process:

• Orders and order history (items, quantities, timestamps, order status, and optional notes you enter)
• Virtual wallet (“Coins”) data (wallet identifier, coin balance, and history of coin spending in the App)
• Coin top-up records (top-ups are performed in person at the coffee shop by authorized staff/admin and recorded in the App)
• Reservations (reservation type, date/time, number of participants, reservation history)
• Referral data (referral code, referral relationships—who invited whom—and level/progress used for eligibility)
• Prize draw participation (entries/eligibility and results used to operate random draws and provide symbolic prizes such as discounts or small gadgets)
• Coupons (generated coupon codes, redemption status, and timestamps)

D) Technical and Security Data

To keep the App secure and functional, we (and our service providers) may process limited technical data such as:

• Device information (device model, operating system version, app version)
• Basic logs related to security and service operation (for example, to prevent abuse and troubleshoot)

We do not collect precise location (GPS) data.

3) Coins and Payments (No Banking/Card Data)

• The App does not collect or process credit/debit card details or bank account information.
• Coins are topped up in person at the coffee shop by authorized staff/admin and recorded in the App.
• Coins cannot be transferred between users inside the App.

4) How We Use Information

• Create and manage your account and authenticate users
• Provide App features (ordering, wallet/coins, reservations, referral, coupons, prize draws)
• Maintain wallet balance and transaction records
• Operate prize draws (random selection) and award symbolic prizes
• Provide customer support and respond to requests
• Maintain security, prevent fraud/abuse, and troubleshoot issues
• Comply with applicable legal obligations and enforce our policies

5) Service Provider: Firebase (Google)

We use Firebase Authentication and Cloud Firestore (Google) to operate the App, including sign-in and secure data storage. Your information may be processed and stored on Google/Firebase infrastructure according to their terms and security practices.

6) Sharing of Information

We do not sell your personal information.

We may share information only:

• With service providers that help run the App (for example, Firebase/Google), acting under our instructions
• If required by law, legal process, or to protect rights, safety, and prevent fraud/abuse
• In connection with a business transfer (e.g., merger or acquisition), where permitted and with appropriate safeguards

7) Advertising and Tracking

• The App does not display third-party ads.
• We do not track users across other companies’ apps or websites for targeted advertising.

8) Data Retention

We retain personal data only as long as necessary to provide the App, maintain your account, keep order and wallet records, and meet legal obligations where applicable. When data is no longer needed, we delete or anonymize it unless retention is required by law.

9) Your Rights and Choices (Access, Correction, Deletion)

You may request to access, correct, or delete your personal data. To request account deletion, email o10.coffee.shop@gmail.com from the email linked to your account with the subject: “Account Deletion Request”. We may request verification to protect your account.

If you used Google Sign-In, you can also find deletion instructions here: (Add your URL) https://<your-username>.github.io/<your-repo>/data-deletion.html

10) Security

We use reasonable technical and organizational measures to protect your information. However, no system is completely secure, and we cannot guarantee absolute security.

11) Children’s Privacy

The App is not intended for children under 13 (or the minimum age required by local law). We do not knowingly collect personal data from children.

12) International Data Processing

Firebase services may process and store data on servers located in different countries. We rely on appropriate safeguards as required by applicable laws.

13) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the effective date and make the revised policy available through the App and/or the link provided on the Google Play listing.

14) Contact Us

o10 (Coffee Shop)
Khzema, Sousse, Tunisia
o10.coffee.shop@gmail.com