Privacy Policy

This policy explains what Comffee Drink & Play collects, why, and what your rights are — in plain language, under the Philippine Data Privacy Act of 2012 (RA 10173). It covers comffee.org, the installable Comffee app, and the software our partner cafes run. Our Data Protection Officer is reachable at comffee.dpo@gmail.com.

What we collect

• Your account — when you sign in with Google we receive your name, email address, and profile photo. We never see your Google password.
• Bookings and orders — stay dates, guest counts, seat reservations, game top-up order details, and vouchers you buy or redeem.
• Payments — processed by PayMongo, a licensed Philippine payment processor. We keep amounts, references, and payment status; we never store your card number, GCash or bank credentials.
• Chat — messages and photos you send through the site chat, so the cafe and our team can answer you. Each message also records the network address it was sent from, and, only if you have already allowed your device to share its position with us, that position too.
• Connection address — we record the network address a connection came from when you open an account and when you submit identity documents for a booking, the same way we do for chat messages above.
• Device position — where you have allowed your device to share its position with us, we record it. A position is required to complete a booking or to sell game top-ups; everywhere else it is optional.
• Face check (with consent) — when you clock in as partner-cafe staff, or verify your identity for a booking or to join the marketplace, we take a short face scan. The scan measures the 3D shape of your face (from a brief head movement and patterned screen light) to confirm a real, live person — not a photo or video. We keep a face template (a set of numbers, not a picture), the 3D shape measurement, and a few audit frames. For staff this also records the punch time, the distance from the cafe, and a phone-binding key.
• Technical basics — the logs any website keeps (device type, approximate network address, pages visited) to keep the service running and abuse out.

Why we use it

To run the service you asked for: confirming bookings and orders, taking and settling payments, answering chats, computing partner-cafe payroll from attendance, preventing fraud and abuse, and meeting legal obligations. Connection addresses and device positions are recorded to protect guests and cafe property, and to help police if there is ever a theft. We do not sell your data, and we do not use it for third-party advertising.

Face data

A face check confirms it's really you in three places, each only after you accept the on-screen consent: staff clocking in, customers verifying identity for a booking, and people joining the game-credit marketplace. The scan measures the 3D shape of your face from a brief head turn and patterned screen light, so a photo, a video, or a screen held up to the camera cannot pass. We keep a face template (numbers, not a photo), the 3D shape measurement, and a few audit frames — used only to confirm your identity, never for marketing, never sold. Audit frames are deleted after 30 days. Your face data is removed when you leave the cafe's staff, or on request for a customer or marketplace account. You can decline; ask about alternative arrangements.

Who we share with

Only the processors that make the service work: PayMongo (payments), Google (sign-in), our email provider (booking and receipt emails), and our hosting providers (Vercel and Supabase, where the site and its database run). Partner cafes see the data about their own branch — their bookings, their chats, their staff — never another cafe's. Authorities, only when the law requires it — including connection addresses and device positions, which we hand over on lawful request.

How long we keep it

Attendance selfies: 30 days. Face templates: until you leave the cafe's staff. Bookings, orders, and payment records: as long as bookkeeping and tax law require. Chats: while your conversation stays useful for support. Accounts: until you ask us to delete yours. Connection addresses and device positions: 2 years, then deleted.

Your rights

Under the Data Privacy Act you may ask to see your data, correct it, have it deleted, or object to how it's used. Email comffee.dpo@gmail.com and we'll respond. If you believe we've mishandled your data, you may also complain to the National Privacy Commission (privacy.gov.ph).

Cookies

We use cookies to keep you signed in and remember basics like which app mode you last used. We don't run third-party advertising trackers — in fact, the site strips social-network tracking tags off shared links when you arrive.

Questions? Ask us — or read the Terms of Service.