Privacy notice

Honger is run by Wikus Kriek, trading as Honger ("we"). This notice explains what personal information we process and why, as required by the Protection of Personal Information Act (POPIA).

What we collect

• Your account: your name, and your email address if you sign in with Google. We never store passwords.
• Waiting list: the store name you entered, when you joined, and a phone number if you chose to leave one, used only to tell you you're in.
• Passkeys: only the public part of the key. The private key stays on your device.
• Your store: its name, settings, menu, paired devices and your Yoco API key (encrypted).
• Orders read from your Yoco account or typed into the app: items, notes, totals and any customer name you enter.
• Billing: which plan you paid for and when. Card details are handled by PayFast and never reach us; we keep only PayFast's reference to your subscription, encrypted.
• Technical data: IP address for rate limiting, kept for no more than a day.

Why we use it

• To run the service you signed up for: showing orders to your kitchen and keeping your devices signed in.
• To bill you and to work out your plan from your daily order count.
• To keep the service secure and stop abuse.

We don't sell your information. We advertise on Google, and the public pages and sign-up load Google's ad tag so we can tell whether an ad led to a new store. Google sets its own cookies for this; we send it no names, emails or order data, only that a sign-up or payment happened. Kitchen and counter screens never load it.

Your customers' information

For order data about your customers, you are the responsible party and we process it on your behalf. Only put in customer details you need to prepare the order.

Who else handles it

• Cloudflare, which hosts the app and database (servers may be outside South Africa).
• Yoco, which we read your orders and menu from.
• PayFast, which processes subscription payments and stores your card.
• GitHub, which keeps private nightly backups of the database for 30 days so the service can be restored after an outage.
• Google, if you choose to sign in with Google, and to measure our Google ads (see above).

How long we keep it

Orders are deleted after 90 days. Your account and store data stay until you delete them in Settings. Backups roll off after 30 days, so deleted data is gone from them within a month. Payment records are kept as long as tax law requires.

Your rights

You can download all your store's data or delete your store and account at any time in Settings. You can also ask us to correct or delete information, or object to how we use it, by emailing [email protected]. Our information officer is Wikus Kriek, reachable at the same address. You may complain to the Information Regulator (inforegulator.org.za).