The exact information KantinApp processes depends on how you use the service, but it can include the following categories:

• Account information such as your name, school email address, school affiliation, and user role.
• Authentication and security information such as password hashes, sign-in sessions, verification codes, and password-reset activity.
• Preference data such as hidden allergens, hidden tags, default catalog view, default sort order, gluten-free interest preference, and notification settings.
• Usage data tied to your account, including votes, favorites, and school-specific menu interactions inside the app.
• User submissions such as tips, reports, support-style feedback, and requests to change school.
• Notification device data such as Expo push token, device key, platform, and device name when you enable push notifications.
• Basic website analytics and performance data on the public website, including data collected through Vercel Analytics and Speed Insights.

KantinApp uses personal information only as needed to operate and improve the service.

• Create and maintain user accounts.
• Authenticate users, protect accounts, and prevent misuse of the service.
• Show the correct school menu, favorites, tips, and other school-relevant content.
• Save your preferences and personalize the app experience.
• Send account verification messages and password-reset emails.
• Send push notifications that you choose to enable.
• Monitor service performance, investigate errors, and improve reliability and product quality.

KantinApp does not sell personal information. Information may be shared with service providers only when needed to operate the app and website.

• Hosting, delivery, and public-site analytics providers that help operate kantinapp.app and related services, such as Vercel.
• Email delivery providers used to send verification and password-reset messages, such as Maileroo.
• Push notification infrastructure used to deliver optional notifications that you enable, such as Expo.
• Other technical or legal counterparties when necessary to authenticate users, protect the service, investigate abuse, or comply with law.

KantinApp keeps information for as long as it is reasonably needed to operate accounts, provide the service, maintain security, and meet operational or legal obligations.

KantinApp uses reasonable technical and organizational safeguards. For example, passwords are stored as cryptographic hashes rather than plain text, and some sensitive actions are rate-limited. No method of storage or transmission is perfectly secure, so absolute security cannot be guaranteed.

• You can review and update many preferences directly inside the app.
• You can enable or disable push notifications through the app and through your device settings.
• You can request deletion of your account through the app or through the public deletion page at https://kantinapp.app/delete-account.
• You can contact KantinApp to request privacy help, correction of inaccurate data, or deletion of your account data where applicable.
• You can stop using the service at any time, but some data may remain for security, operational, or legal reasons.

KantinApp is intended for students and staff at participating schools. It is not designed as a children-directed service for young children.

KantinApp may update this Privacy Policy from time to time. When the policy changes, the version on this page will be updated together with the last updated date.

If you have questions about this Privacy Policy or want to request privacy-related help, contact KantinApp at kantinapp.support@gmail.com.