Trust
Minimal data
We ask customers for a name and mobile number. No email, birthday, address or location tracking.
Phone numbers encrypted at rest
Mobile numbers are encrypted with AES-256-GCM before they reach the database. Lookups use a keyed hash, and staff and owners only ever see the last four digits.
Passwords and PINs hashed
Owner passwords and staff PINs are stored as salted scrypt hashes, never in plain text.
Separate roles
Staff can stamp and redeem. Owners see only their own cafe. Platform admins manage billing. Each role signs in separately.
Access audit log
Logins, stamps, undos, redemptions, exports, offer sends, data deletions and admin actions are written to an audit log.
Customer self-service
Every card has a “My data” page where the customer can view, download, correct or delete their data, and switch offers off.
Automatic deletion
Cards with no visit for a set period (365 days by default; each cafe can change it) are deleted automatically.
No trackers, no data selling
No advertising or analytics cookies, and no third-party scripts or font CDNs on customer pages. The only cookie is a sign-in cookie for staff and owners.
Where data is stored
Configured data region for this deployment:
Hostinger VPS, Mumbai, India
Production deployments must use a database and backups hosted in India. This is a deployment requirement, not something this page can prove by itself.
DPDP readiness
KaapiPass is designed for DPDP readiness: itemised notice, purpose-specific unticked consent, easy withdrawal, rights requests, retention limits and a breach procedure. We do not claim certification or legal compliance; our documents are awaiting legal review.
How each requirement is handled →Grievance officer
Name: TO BE FILLED
Email: TO BE FILLED
Postal address: TO BE FILLED
Until this is filled in, please raise concerns with the cafe that issued your card. Customers can delete their own data at any time from their card.
What we don't have (yet)
- No ISO 27001, SOC 2 or other certification. We won't display badges we haven't earned.
- No independent penetration test yet.
- Our privacy notice, terms and data processing terms are drafts awaiting a lawyer's review.
- The company registration and grievance officer details above are still to be filled in.
See also: Privacy notice · Data processing terms · Terms