Omake Privacy Policy

Kouvre Inc. ("Kouvre", "we") operates the Omake mobile application (the "App"). This policy explains how we collect, use, disclose, and retain personal information. It is written to comply with Quebec's Act respecting the protection of personal information in the private sector as amended by Law 25, and with PIPEDA where it applies.

Also read the Application Terms, Rewards Terms, and Digital Card Terms.

1. Definitions

Member means a registered diner. Merchant means an independent business that hosts a loyalty program on Omake. Personal information means information that identifies a natural person directly or indirectly.

2. Privacy officer

Under Law 25, Kouvre has designated a person in charge of the protection of personal information (the "Privacy Officer"): Joseph Al-Chami, privacy@kouvre.com.

3. What we collect

We collect only what is needed to run Omake.

• Account: first name (display name) and email. If you use Sign in with Apple or Google, we receive the tokens and email those services provide. Apple Hide My Email is supported. We do not require a last name or phone number.
• Loyalty: visit timestamps, bill amounts staff enter to calculate points or stamps, balances, vouchers, and the diner QR.
• Device: a push token if you turn on notifications in the App.
• Diagnostics: crash reports if Sentry is enabled in a given build.

We do not collect date of birth, profile photos, precise location, contacts, or advertising identifiers. "Close by" location filters are off and unused.

4. How we use it

We use personal information to create and secure your account; issue your diner QR; track points, stamps, and vouchers; show staff your first name and last initial at the counter; send transactional email (sign-in codes); send transactional push if you allow it; and improve the App from aggregated, de-identified data.

5. Sharing with merchants

Merchants do not receive your email, full profile, or other restaurants' programs. At the counter they see your first name and last initial (for example, Mara T.) and the visit they are recording. Aggregated statistics (member counts, points issued) may be shown to a Merchant about its own program. We deliver any Merchant offer through Omake; we do not hand your email to the Merchant.

6. Marketing and communications (CASL)

Email marketing is opt-in only. The box is unchecked by default. You can withdraw in the App (You → email offers) or via the unsubscribe link in a promotional email.

Push notifications are transactional (visit recorded, voucher ready). They require the operating-system permission on the You tab. They are not marketing consent.

Sign-in codes and similar transactional messages are not marketing.

7. Where information is stored

Account and loyalty data are hosted on Supabase in us-east-2 (Ohio, United States). That is a communication of personal information outside Quebec. We also use Resend for email, Expo / Apple / Google for push and sign-in, and Sentry for crashes when enabled. Those processors may store data outside Quebec.

8. Retention and deletion

We keep personal information only as long as needed for the purposes above. Deleting your account in the App (You → Delete my account) or via omake.ca/delete-account anonymizes your profile, rotates the diner QR, clears devices and marketing consent, and releases your login. Restaurant ledgers (visits, amounts, voucher status) are kept for accounting, tax, audit, and anti-fraud.

9. Your rights under Law 25

You may access, rectify, or withdraw consent for your personal information, and request portability where the law requires it. Write to the Privacy Officer at privacy@kouvre.com. We respond within thirty (30) days.

10. Changes

Material changes will be posted on this page and, when Law 25 or the Consumer Protection Act requires it, notified to you.