3AIN Privacy Policy

Last updated: 15 May 2026

3AIN ("we", "our", "us") operates the 3AIN mobile application (the "App"), an IoT-based coffee shop management platform for café owners and employees. This Privacy Policy describes what information we collect, how we use it, and your rights.

1. Information We Collect

• Account information: username, email address, name, role (owner or employee), associated shop(s).
• Authentication data: hashed password, JWT session tokens.
• Device identifiers: push-notification device tokens (Firebase Cloud Messaging on Android; Apple Push Notification service on iOS) used solely to deliver in-app notifications.
• Operational data: orders, payments, machine telemetry, employee shift information, and other data you enter into the app to run your café.
• Technical data: standard server logs (IP address, request timestamps) collected by our backend for security and debugging.

2. How We Use Your Information

• To provide the App's core functionality: authentication, order management, machine monitoring, reporting.
• To send operational notifications (e.g., new orders, machine alerts).
• To improve and secure the service.
• To comply with legal obligations.

3. Data Sharing

We do not sell your data. Data is shared only with:

• Google Firebase (for Android push notifications) — see Firebase Privacy.
• Apple Push Notification service (for iOS push notifications).
• Law enforcement if required by valid legal process.

4. Data Retention

We retain your account and operational data for as long as your account is active. You may request deletion of your account and associated data by contacting us at the email below.

5. Security

All data is transmitted over HTTPS (TLS). Passwords are hashed using bcrypt before storage. We restrict access to production systems to authorized personnel only.

6. Children's Privacy

The App is intended for business use by adults (café owners and their employees). We do not knowingly collect data from anyone under 13.

7. Your Rights

Depending on your jurisdiction (e.g., GDPR for EU residents, CCPA for California residents), you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at the email below.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notice or email.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact:

Hamza Kissi
Email: hamza.kissi.hk@gmail.com