Privacy Policy

Information we handle

Account and sign-in information

When you create an account or sign in, we handle information used to identify and authenticate you, including your account identifier, email address, display name, email-verification status, account role, and profile image where provided. Our authentication system manages sign-in sessions and credentials. If you choose a supported third-party sign-in option, the sign-in provider supplies the account information you authorize it to share.

Profile photographs

If you choose to add a profile photograph, we process the image you select and associate it with your account. You can replace or remove a custom profile photograph using the profile controls in the app.

Location information

We use a location you choose or, with your device permission, your device location to show nearby stores and calculate distances. Location coordinates may be sent to our service when you request nearby listings. The app can remember a selected location on your device. Maps and location-related features may also involve Google Maps or device location services.

You can change your selected location and manage device location permission in your device settings. Withholding permission can limit features that rely on your current location.

Reservations, orders, and reviews

When you use reservation and order features, we handle information such as the store and Happy Bags selected, quantities, prices, order identifiers, pickup details, and order status. If you submit a rating or review, we handle that rating and any comment you provide. These records help us manage reservations, pickup, cancellations, support, and the services associated with your account.

Notifications and device information

For push notifications, we handle a notification device token, device platform, and notification preferences associated with your account. Notification delivery uses Firebase Cloud Messaging. We use this information to deliver service messages and the notifications you enable. You can manage supported notification preferences in the app and notification permission in device settings.

Information you send us

If you email us or otherwise contact support, we handle the contact details and information you provide so that we can respond. Please avoid sending passwords or full payment-card details by email.

Local storage and connections

The app stores information on your device to maintain sign-in sessions and remember settings, such as a chosen location. Sign-in and embedded web features may use cookies or similar browser storage. Network connections also make information such as your IP address available to the services receiving the request.

How we use information

We use personal information to:

• Create, authenticate, and manage accounts.
• Show nearby stores and available Happy Bags.
• Manage reservations, orders, pickup, and related service requests.
• Display the profile information and reviews you choose to provide.
• Deliver notifications and respect your notification preferences.
• Respond to support and privacy requests.
• Maintain the service, protect accounts, investigate misuse, and meet applicable legal obligations.

Sharing and service providers

We share information needed to provide the features you use. This includes information required by participating stores to manage and fulfill your reservation, and information processed by providers supporting authentication, maps, notification delivery, hosting, and storage.

The current app uses Keycloak for authentication, supports Google sign-in where enabled, and uses Google Maps and Firebase Cloud Messaging for relevant features. Those services process information involved in providing their functionality. Third-party sign-in and platform services also have their own privacy notices.

We may disclose information where required by law, to respond to a lawful request, or where reasonably necessary to protect users, the service, or legal rights. If the service is transferred as part of a business transaction, personal information may be transferred subject to applicable law and appropriate notice.

Security and international processing

We use access controls and authentication measures intended to protect personal information. You should keep your sign-in credentials confidential and contact us if you believe your account has been accessed without permission.

Providers involved in operating the service may process information outside the country in which you live. The applicable locations depend on the service and provider involved. Contact us if you need more information about processing relevant to your account.

Retention

We retain personal information for the purposes described in this policy and for as long as needed to provide the service, resolve disputes, maintain necessary records, protect against misuse, and meet applicable legal obligations.

Retention can vary by information type. For example, order or legal records may need to be retained after an account is closed. Information stored locally on your device may remain until you change the relevant setting, clear the app's data, or remove the app. Removing the app does not by itself delete your server-side account.

Your choices and privacy requests

You can manage device permissions, supported notification preferences, and your custom profile photograph using the app or your device settings. You may also contact us to request access to, correction of, or deletion of personal information associated with your account, or to raise a privacy concern.

Email [email protected] with enough information for us to understand your request. We may need to verify your identity before disclosing or changing account information. Your available rights and any exceptions depend on applicable law.

Request account deletion

To request deletion of your 1 OR MORE account and associated personal information:

1. Email [email protected], preferably from the email address associated with your account.
2. Use the subject 1 OR MORE account deletion request.
3. Include your account email address and explain whether you are requesting account deletion or deletion of particular information. Do not include your password.

We will review the request and may ask for information needed to verify account ownership. Where information must be retained for legal obligations, dispute resolution, or security, we will explain the relevant exception in our response. Account deletion is different from signing out or uninstalling the app.

Children and guardians

If you believe that a child has provided personal information in circumstances that require parental consent or otherwise raise a privacy concern, contact [email protected]. We will review the concern and respond in accordance with applicable law.

Changes to this policy

We may update this policy to reflect changes to the service or our practices. The current version and its last-updated date will be available on this page. Where required, we will provide additional notice of material changes.

Contact

HAPPY TIME AUSTRALIA PTY LTD Operator of 1 OR MORE Privacy contact: [email protected]