Privacy Policy

Last updated: October 11, 2026

This policy explains how Sabbar Alqahwa Trading Establishment (“Cherry”, “we”) collects, uses, and protects your personal data when you use the Cherry iPhone app and the ordering page at cherrycupcafe.com, in accordance with Saudi Arabia’s Personal Data Protection Law.

Data we collect

• Account details: first and last name, mobile number, and preferred app language. Optionally: email address, gender, and date of birth.
• Order details: items and add-ons, branch, arrival time, amount, and order status.
• Cherry points: membership number, points balance and history, rewards, and in-store purchases recorded by the cashier using your membership number.
• Notifications: if you allow notifications, we store the device token provided by Apple, linked to your account, to send you order status updates and Live Activity updates on your Lock Screen.
• App performance (optional): anonymous counts such as opening the menu, starting or failing a payment, and crashes, with a random session ID that changes each time you open the app. They do not include your name, phone number, orders, or any device identifier, and are deleted within 30 days. You can turn this off in “Account → Preferences → Share app performance”.
• AI assistant “Chiro”: optional. When you use it, your messages and Cherry’s menu are sent to Anthropic (the provider of the Claude model) to generate the reply, after you agree in the app. If you are signed in, we also send your first name, your gender (if set) and your points balance and available rewards so it can greet you by name. We do not send your phone number or email and we do not store the chats on our servers. Anthropic may keep messages for a limited time under its policy for safety purposes only, and they are not used to train models. Please do not type personal or payment details in the chat.
• Location: optional. The app asks only when you tap “Nearest to me” to find your closest branch, or turn on the “passing a branch” alert (a local notification, at most one a day). Your location is used on your phone only; we do not collect it or send it to our servers, and you can turn the alert off or remove access in Settings at any time.
• Support messages: what you send us through “Feedback and support” in the app.
• Payment: you enter card or Apple Pay details directly with our payment provider, Moyasar. Card numbers do not reach our servers and we do not store them.

We do not use the app to track you across other apps or websites, display advertising, or sell your data.

How we use your data

• To fulfil your order, notify the branch, and track its status.
• To sign you in by sending a verification code to your number by SMS.
• To calculate points and award rewards, including birthday gifts.
• To understand our customer base and offer relevant promotions, using your gender if you choose to add it.
• To send offer and greeting notifications to customers who turned on “Offers & greetings” in the app; we may target them by gender or occasion if you added them. You can turn them off in the app at any time.
• To respond to feedback and support tickets.
• To prevent fraud and abuse of offers, and meet legal and accounting obligations.

Who we share data with

We share only the minimum necessary data with service providers working on our behalf:

• Moyasar for payment processing.
• Loyverse (our point-of-sale system) to record in-store sales. We no longer send your account details to it; the cashier adds points for your in-store purchases in our own system by scanning your membership code.
• Our SMS provider (Msegat) to send verification codes to your number.
• Apple to deliver notifications to your device.
• Cloudflare for service and database hosting.

We may also disclose data when required by a competent authority in accordance with applicable laws.

Retention

We retain your account data while your account exists. We may keep order and sales records for the period required by accounting and tax laws, without linking them to your identity after account deletion.

Your rights

• View and edit your data in “Account” in the app.
• Delete your account at any time through “Account → Delete account”. We permanently erase your name, email address, gender, date of birth, points, and rewards.
• Contact us to request a copy of your data or object to its processing.

Data security

Data is transmitted over an encrypted HTTPS connection. Your session token is stored in the device’s Keychain. Access to data is limited to those who need it to provide the service.

Children

The service is not directed at children under 13, and we do not knowingly collect their data.

Contact

For privacy questions, contact us on WhatsApp at 055 756 4366.

We may update this policy. We will publish changes here with the update date and notify you in the app if a change is material.