Masigo — Privacy Policy

Last updated: September 12, 2026 · Toronto, Canada

Masigo ("we", "us") is an order-ahead and loyalty app for independent cafés, operated by Masigo (a division of AIO Agency, Toronto, Ontario). This policy explains what we collect, why, and how you can control it. It applies to the Masigo app (web and app-store versions) and masigo.app.

What we collect

• Account info — your email address if you create an account (by email, or via Google sign-in, from which we receive only your email and name). A pickup nickname you choose. Browsing the app without an account is possible.
• Device identifier — a random ID generated on your device so your orders and stamps stay together. It is not your advertising ID and is not shared with anyone.
• Orders — what you ordered, the café, the amount, pickup status and any note you leave for the barista.
• Payment — payments are processed by Stripe. We never see or store your card number. Stripe may save a payment method for faster checkout if you choose; you can remove it from your account at any time.
• Loyalty, reviews & friends — your stamps, rewards, badges, reviews you write, and friends you add (by QR code or email search).
• Push notifications — if you turn them on, a push subscription token for this device so we can tell you when your order is ready.
• Location — only when you use the Explore map or "Update my location", and only on your device to sort cafés by distance. We do not store your location on our servers.
• Camera — only while you scan a café's check-in QR code. Camera frames are processed on your device and never uploaded.
• Support messages — anything you send us through Help & support, so we can reply.
• Technical logs — if the app hits an error, we record the error message, page and app version to fix it. No advertising or analytics SDKs are used.

How we use it

• To take your order, charge the right amount and let the café prepare it.
• To keep your loyalty stamps, rewards and badges across devices.
• To notify you about your own orders (push and email receipts).
• To show your pickup nickname and order to the café you ordered from — cafés never see your email or contact details.
• To verify that reviews come from real pickups and to prevent abuse of coupons and rewards.
• To respond to your support requests.

We do not sell your data and we do not use it for advertising.

Who we share it with

• The café you order from — nickname, order details and pickup status only.
• Stripe (payments), Supabase (database and sign-in), Vercel (hosting), Resend (email receipts) and Google (only if you sign in with Google). Each processes data on our behalf under their own privacy terms.
• Friends you add can see your nickname, badges and public loyalty progress. You can remove a friend any time.
• Authorities, if required by law.

Where it's stored & how long

Data is stored on servers in North America and protected in transit (HTTPS) and at rest. We keep your account data while your account exists. Order records are kept as the café's sales history (with your email removed once you delete your account) for accounting purposes, generally 7 years as required by Canadian tax law.

Your choices

• Delete your account — in the app under Me → Account → Delete account, or see how to delete your account. Your login, email, profile, friends and push subscriptions are removed immediately.
• Notifications — turn push off in the app (Me → Notifications) or in your device settings.
• Location & camera — controlled by your device permissions; the app works without them.
• Access or correct your data — email us and we'll send you what we hold or fix it.

Children

Masigo is not directed at children under 13 and we do not knowingly collect their data.

Changes

If we change this policy in a meaningful way we'll update the date above and notify you in the app.

Questions or requests: info@masigo.app
See also our Customer Terms & Refund Policy.