Sushi Hana Club App – PRIVACY POLICY

Privacy Policy for Sushi Hana Club App

Last Updated: November 20, 2024

Introduction

Welcome to Sushi Hana Club App (“we,” “our,” or “us”). We are committed to protecting your privacy and handling your personal information
responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application
(the “App”).

By using the Sushi Hana Club App, you agree to the collection and use of information in accordance with this policy. If you do not agree with
our policies and practices, please do not use our App.

Contact Information:

Email: sushihanaclt@gmail.com
Phone: (704) 910-3636
Address: 15719 Brixham Hill Ave, Charlotte, NC 28277

1. Information We Collect

1.1 Personal Information You Provide

When you create an account and use our App, we collect:

Account Information:

First and last name
Phone number
Email address
Account password (encrypted)

Order Information:

Delivery address
Order details and preferences
Dining session information
Table numbers

Payment Information:

We do NOT store your credit card details
Payment processing is handled by secure third-party payment processors
We only retain transaction IDs and order totals for record-keeping

Profile Information:

Dietary preferences
Favorite menu items
Loyalty points and rewards history
Order history

1.2 Information Collected Automatically

Device Information:

Device type and model
Operating system version (iOS/Android)
Unique device identifiers
Mobile network information

Usage Data:

App features you use
Time and date of app usage
Session duration
Crash reports and performance data

Location Data:

Precise GPS coordinates (only when using the app)
See Section 2 for detailed location data practices

Camera Data:

QR code scans (processed locally, not stored)
See Section 3 for detailed camera usage

2. Location Data Collection and Use

2.1 What We Collect

We collect your precise location data (GPS coordinates) when you use the App.

2.2 Why We Collect Location

We use your location to:

Verify you are physically present at our restaurant before allowing orders
Prevent fraudulent orders placed from outside our premises
Ensure orders are routed to the correct restaurant location
Comply with our geofencing security measures

2.3 How We Use Location

Permission Required: We only access your location when you open the app and attempt to start a dining session or place an order.

Background Collection: We do NOT collect location data when the app is closed or running in the background.

Frequency: Location is checked when you:

Open the app
Scan a table QR code
Place an order

Retention: Location data is used only for real-time verification and is NOT permanently stored. Location coordinates are deleted immediately
after session verification.

Third-Party Sharing: Your location data is NOT shared with third parties, advertisers, or used for marketing purposes.

2.4 Your Control

You can enable or disable location permissions in your device settings:

iOS: Settings > Sushi Hana > Location > “While Using the App”
Android: Settings > Apps > Sushi Hana > Permissions > Location

Note: Location access is required to place orders through the app. Disabling location will prevent you from using ordering features.

3. Camera Access

3.1 QR Code Scanning

The App requests camera access solely for scanning QR codes displayed on restaurant tables.

3.2 What We Do

Access your camera only when you tap the “Scan QR Code” button
Process QR codes locally on your device to identify your table
Use the QR code data to start your dining session

3.3 What We DON’T Do

We do NOT capture, store, or transmit photos or videos
We do NOT access your camera in the background
We do NOT access your photo library or camera roll
We do NOT use facial recognition or any image analysis

3.4 Your Control

You can deny camera access and manually enter table codes instead. Camera permission can be managed in your device settings:

iOS: Settings > Sushi Hana > Camera
Android: Settings > Apps > Sushi Hana > Permissions > Camera

4. Push Notifications

4.1 Types of Notifications

We may send you push notifications for:

Order Updates:

Order received confirmation
Order preparation status
Ready for pickup alerts

Session Alerts:

Active dining session reminders
Session timeout warnings

Promotional Offers:

Special deals and discounts
Loyalty rewards
New menu items

Account Alerts:

Security notifications
Account changes
Password resets

4.2 Data Collected

To send push notifications, we collect:

Device push notification token
Notification interaction data (opened, dismissed)
Delivery success/failure status

4.3 Your Control

You can opt out of notifications at any time:

iOS: Settings > Sushi Hana > Notifications
Android: Settings > Apps > Sushi Hana > Notifications
In-App: Settings > Notifications

Note: Disabling all notifications may prevent you from receiving important order status updates.

5. Third-Party Services

The Sushi Hana Club App uses the following third-party services that may collect, process, and store your data:

5.1 Firebase (Google LLC)

We use Firebase services for:

Push notifications about orders and promotions
App performance monitoring and crash reporting
Analytics to improve app functionality
Cloud messaging

Firebase Privacy Policy: https://firebase.google.com/support/privacy

5.2 Supabase

We use Supabase for:

Secure cloud data storage
User authentication and account management
Real-time order updates and synchronization

Supabase Privacy Policy: https://supabase.com/privacy

5.3 Google Play Services (Android)

Our Android app uses Google Play Services, which may collect device and usage data.

Google Privacy Policy: https://policies.google.com/privacy

5.4 Third-Party Responsibility

These third-party services have their own privacy policies. We encourage you to review them. We are not responsible for the privacy practices
of these third parties.

6. How We Use Your Information

We use the information we collect to:

6.1 Provide Services

Process and fulfill your orders
Manage your account and dining sessions
Verify your location for security purposes
Enable QR code table scanning
Process payments and refunds

6.2 Communicate With You

Send order confirmations and updates
Respond to your inquiries and support requests
Send promotional offers (with your consent)
Notify you about changes to our services

6.3 Improve Our Services

Analyze app usage to enhance functionality
Monitor and fix technical issues
Develop new features
Conduct research and analytics

6.4 Security and Fraud Prevention

Verify user identity
Prevent fraudulent orders
Detect and prevent security incidents
Enforce our terms of service

6.5 Legal Compliance

Comply with legal obligations
Respond to lawful requests from authorities
Protect our legal rights

7. How We Share Your Information

We do NOT sell your personal information. We may share your information only in the following circumstances:

7.1 Service Providers

We share data with trusted third-party service providers who help us operate the App:

Cloud hosting providers (Supabase)
Analytics services (Firebase)
Payment processors (for transaction processing only)

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

7.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

Court orders or subpoenas
Legal processes or government requests
Investigations of fraud or security issues
Protection of our rights, property, or safety

7.3 Business Transfers

If Sushi Hana is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your
information is transferred and becomes subject to a different privacy policy.

7.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

8. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

8.1 Active Accounts

Profile Data: Retained for the lifetime of your active account
Order History: Retained for 7 years for accounting, tax, and legal compliance purposes
Payment Information: Card details are NOT stored; only anonymized transaction IDs are retained
Location Data: Deleted immediately after each session verification (not retained)
Session Data: Deleted 24 hours after dining session ends
Loyalty Points Data: Retained while account is active

8.2 Deleted Accounts

When you delete your account through the app:

Personal information (name, email, phone) is permanently deleted within 30 days
Order history is anonymized (disassociated from your identity) but retained for 7 years for legal and tax compliance
Loyalty points are forfeited and deleted immediately
Marketing preferences are deleted immediately
Location data is already deleted (not stored)

8.3 Legal Requirements

We may retain certain data longer if required by law:

Tax records: 7 years
Transaction disputes: Until resolved
Legal proceedings: Until concluded
Regulatory compliance: As required by applicable laws

8.4 Automatic Deletion

Inactive accounts (no login for 3 years): We will send a notification and delete data 30 days after if no response
Failed registration attempts: Deleted after 90 days
Abandoned carts: Deleted after 30 days

9. Data Security

We implement industry-standard security measures to protect your personal data:

9.1 Technical Safeguards

Encryption in Transit: All data transmitted between your device and our servers uses TLS/SSL encryption
Encryption at Rest: Sensitive data stored in our database is encrypted
Password Protection: Account passwords are hashed using industry-standard algorithms and never stored in plain text
Secure Authentication: Phone number verification for account access
Database Security: Row-level security policies to restrict data access

9.2 Organizational Safeguards

Access to personal data limited to authorized personnel only
Regular security audits and vulnerability assessments
Employee training on data protection and privacy
Incident response procedures

9.3 Your Responsibility

Keep your password secure and confidential
Do not share your account credentials
Log out of the app on shared or public devices
Report any suspicious activity to us immediately

9.4 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

Notify you within 72 hours of discovering the breach
Inform relevant authorities as required by law
Take immediate steps to secure our systems
Provide guidance on protective measures you can take

No Absolute Security: While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute
security.

10. Your Privacy Rights

10.1 General Rights

You have the following rights regarding your personal information:

Right to Access: Request a copy of the personal data we hold about you.

Right to Correction: Request correction of inaccurate or incomplete data.

Right to Deletion: Request deletion of your personal data (subject to legal obligations).

Right to Object: Object to certain processing of your data.

Right to Restriction: Request restriction of processing in certain circumstances.

Right to Data Portability: Request your data in a structured, machine-readable format.

Right to Withdraw Consent: Withdraw consent for data processing (where applicable).

10.2 How to Exercise Your Rights

In-App:

Go to Settings > Personal Information to view and edit your data
Go to Settings > Delete Account to delete your account and data

Contact Us:

Email: sushihanaclt@gmail.com
Phone: (704) 910-3636

We will respond to verified requests within 30 days.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

11.1 Right to Know

You have the right to request:

Categories of personal information we collect
Specific pieces of personal information we hold about you
Categories of sources from which we collect information
Business or commercial purpose for collecting information
Categories of third parties with whom we share information

11.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain legal exceptions (e.g., tax records, pending
transactions).

11.3 Right to Opt-Out of Sale

We do NOT sell your personal information. We have not sold personal information in the past 12 months and do not intend to do so in the
future.

11.4 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights, including by:

Denying goods or services
Charging different prices
Providing different quality of services

11.5 How to Exercise CCPA Rights

Submit a Request:

Email: sushihanaclt@gmail.com
Phone: (704) 910-3636
In-App: Settings > Help & Support

Verification Process:
To protect your privacy, we will verify your identity by:

Confirming your phone number
Matching your email address on file
Asking security questions about your account

Response Time: We will respond to verified requests within 45 days. If we need more time, we will notify you.

Authorized Agent: You may designate an authorized agent to make requests on your behalf by providing written authorization.

11.6 California “Shine the Light” Law

California residents may request information about disclosure of personal information to third parties for direct marketing purposes. As we
do not share information for direct marketing, this does not apply.

12. Children’s Privacy

12.1 Age Restriction

The Sushi Hana Club App is not intended for use by children under the age of 13.

12.2 No Knowing Collection from Children

We do not knowingly collect personal information from children under 13 years of age. Our App does not target children, and we do not
intentionally gather information from anyone under 13.

12.3 Parental Rights

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at:

Email: sushihanaclt@gmail.com
Phone: (704) 910-3636

12.4 Removal of Children’s Information

If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will:

Delete that information from our servers within 48 hours
Notify the parent or guardian
Terminate the account

12.5 Age Verification

By using this App, you confirm that you are at least 13 years of age.

13. Cookies and Tracking Technologies

13.1 What We Use

The Sushi Hana Club App uses the following technologies:

Session Tokens: To keep you logged in and maintain your session.

Local Storage: To store your app preferences and settings locally on your device.

Analytics: Firebase Analytics to understand app usage patterns and improve functionality.

13.2 Mobile Identifiers

We may collect:

Device ID: For authentication and fraud prevention
Advertising ID: For analytics purposes only (NOT for targeted advertising)

13.3 Your Control

You can reset your advertising ID:

iOS: Settings > Privacy & Security > Tracking > Allow Apps to Request to Track (toggle off)
iOS Advertising ID Reset: Settings > Privacy & Security > Apple Advertising > Reset Advertising Identifier
Android: Settings > Google > Ads > Reset Advertising ID

13.4 Do Not Track

We do NOT use cookies or tracking technologies for cross-site tracking or behavioral advertising. We do not respond to web browser “Do Not
Track” signals as they do not apply to mobile applications.

14. International Data Transfers

14.1 Data Storage Location

Your personal data is stored on servers located in the United States.

14.2 Cross-Border Transfers

If you access our App from outside the United States, please be aware that your information will be transferred to, stored, and processed in
the United States.

The United States may have data protection laws that are different from those in your country. By using our App, you consent to the transfer
of your information to the United States.

14.3 Data Protection Standards

We ensure that any international data transfers comply with applicable data protection laws, including:

Implementing appropriate technical and organizational safeguards
Using standard contractual clauses where applicable
Ensuring your data receives adequate protection equivalent to the standards required in your jurisdiction

15. Changes to This Privacy Policy

15.1 Updates

We may update this Privacy Policy from time to time to reflect changes in:

Our data practices
Legal or regulatory requirements
App features and functionality
Industry standards

15.2 Notification

When we make material changes to this Privacy Policy, we will:

Update the “Last Updated” date at the top of this policy
Notify you via push notification (if you have notifications enabled)
Display an in-app notice when you next open the App
Send an email to the address associated with your account (for significant changes)

15.3 Continued Use

Your continued use of the App after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

15.4 Review

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Sushi Hana

Email: sushihanaclt@gmail.com
Phone: (704) 910-3636
Address: 15719 Brixham Hill Ave, Charlotte, NC 28277
In-App: Settings > Help & Support

Response Time: We aim to respond to all inquiries within 5 business days.

17. Additional Information

17.1 Governing Law

This Privacy Policy is governed by the laws of the State of North Carolina and the United States, without regard to conflict of law
principles.

17.2 Severability

If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions will remain in full force and
effect.

17.3 No Waiver

Our failure to enforce any right or provision of this Privacy Policy will not be considered a waiver of those rights.

17.4 Entire Agreement

This Privacy Policy, together with our Terms of Service, constitutes the entire agreement between you and Sushi Hana regarding the use of the
App.

End of Privacy Policy

By using the Sushi Hana Club App, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.