Privacy Policy

Who we are

Tany Tech Inc. ("Tany," "we") is a Canadian company that builds white-label mobile-ordering apps for independent food, coffee, and retail shops. This Privacy Policy explains what data we collect, why, and how we handle it. It applies to:

• Shop operators ('Merchants') who run their business on the Tany platform
• Customers who download and use a Merchant's branded app powered by Tany
• Visitors to tany.ca and any sub-domain we operate

Who controls your data

For the personal information of customers ordering through a branded app, the shop ("Merchant") whose app you use is the data controller — they decide why the data is collected and how it's used. Tany acts as the Merchant's data processor: we store and process that information on the Merchant's behalf, under our agreement with them (our Terms of Service), and only to run their ordering service. Tany is the controller only for the limited data we collect to operate the platform itself — Merchant account and billing details, and tany.ca website visitors.

What we collect when you use a branded app

When you use a shop's mobile app powered by Tany — for example, ordering a coffee through the shop's app — we collect the data needed to place and fulfill that order:

• Phone number (used to sign you in via SMS code)
• Name + email (optional; you add these on the Account tab if you want)
• Birthday (optional; some shops send a free-drink coupon on your birthday)
• Order history with the Merchant whose app you used
• Loyalty balance (operated by the Merchant via Square Loyalty)
• Saved card-on-file references (the card number itself stays with Square — we only see a token)
• Approximate location, if you grant the permission, so we can show you the closest shop
• Push notification token, if you grant permission, so the Merchant can send you order-ready alerts and (with your opt-in) marketing pushes

Your account belongs to you

You can edit your profile, change your email-marketing opt-in, or delete your entire account from the Account tab in the app. Deleting your account removes your personal information from our systems within 30 days. Past order records may be retained in anonymized form for tax and accounting purposes (Canada Revenue Agency requires merchants to keep transaction records for 6 years).

Who's the merchant of record

When you place an order in a branded app, the merchant of record is the shop whose app you're using — not Tany. They charge your card via Square, they prepare your order, and any refunds are issued by them. Tany provides the technology platform; the shop runs the business.

What we collect from shop operators

When a shop signs up for Tany we collect business contact info to set up the account:

• Shop name, slug, and brand assets (logo, splash, colors)
• Operator name, email, and (optional) phone
• Business address (used for HST/GST tax calculation on the Tany subscription)
• Stripe customer ID and payment method (held by Stripe, not by us)
• Square OAuth access token (lets us read your menu, locations, orders, customers, and write payments on your behalf — never your card processing keys)

Where the data lives

Customer data is stored in Supabase's Canadian region (ca-central-1). Payment card processing is handled by Square. Push notifications go through Expo's push service. SMS sign-in codes go through Twilio. Subscription billing for Merchants runs through Stripe. Crash reports (if Merchants enable them) go through Sentry. No customer data leaves Canada outside these specific service flows.

What we don't do

We don't sell your data. We don't share customer lists between Merchants — each shop sees only their own customers. We don't use any of it to train AI models. We don't embed third-party advertising trackers or analytics SDKs in the apps. We don't read the content of your push notifications.

Cookies and analytics (on tany.ca)

Our marketing website tany.ca uses first-party cookies for core functionality, plus third-party analytics and advertising-measurement tools so we can see which channels bring shops to Tany and improve our ads: Google Analytics 4, Google Ads, the Meta (Facebook/Instagram) Pixel and Conversions API, and Microsoft Clarity. We manage these with Google Consent Mode v2. In the European Economic Area and the United Kingdom, these analytics and advertising cookies stay switched off until you choose "Accept." Elsewhere — including Canada and the United States — they run by default on an implied-consent basis, but a cookie notice always appears and you can opt out, or change your choice, at any time using "Manage cookie preferences" below. These tools run on the marketing website only — none of these advertising or analytics trackers are present in the branded mobile apps, which collect only what's needed to run your orders (see the sections above).

How we protect your data

We use reasonable technical and organizational safeguards, including encryption in transit (HTTPS/TLS) and at rest, scoped access controls, tenant isolation so one shop can never see another's customers, and phone-based one-time codes instead of passwords. Card data is handled by Square and Stripe under the PCI-DSS standard — we never store full card numbers. No method of transmission or storage is perfectly secure, but we work to protect your data and address any issue promptly.

Children

Tany-powered ordering is intended for adults and is not directed to children under 13. We don't knowingly collect personal information from children under 13. If you believe a child has given us personal information, email [email protected] and we'll delete it promptly.

Your rights under PIPEDA

You have the right to access, correct, or delete your personal data. Because the shop whose app you used is the data controller, you can send requests to that Merchant using the contact details on their ordering page — or email [email protected] and, as their processor, we'll action it or pass it to them. You can also use the in-app Account → Delete account flow. We respond within 30 days as required by the Personal Information Protection and Electronic Documents Act (PIPEDA).

If a shop leaves Tany

When a Merchant cancels, we export their customer list as CSV and deliver it to the Merchant. We delete our copy within 30 days. The Square data stays with the Merchant — we never owned it.

Changes to this policy

We post material changes to this page at least 30 days before they take effect. Sign-in screens in the apps link here, so the latest version is always one tap away.

Contact

Tany Tech Inc., Ontario, Canada.

Privacy and data-access requests: [email protected]
General support: [email protected]

Manage cookie preferences

Review or change your consent for analytics and advertising cookies on tany.ca at any time.