Privacy Policy

This Privacy Policy is a draft prepared for launch. It should be reviewed by qualified legal counsel before public reliance.

Who we are

Félist is operated by Felist Limited, a company registered in the United Kingdom ("we", "us", or "our").

Registered office: Office 1569, 3 Fitzroy Place, Glasgow, Scotland, G3 7RH, United Kingdom.

Privacy contact: privacy@felist.app

Effective date: 23 July 2026

Scope

This Privacy Policy describes how we collect, use, and share personal information when you use the Félist mobile app, our website at felist.app, our waitlist, and related services (collectively, the "Service").

By using the Service, you acknowledge this Policy. If you do not agree, please do not use the Service.

Information we collect

We collect the following categories of personal information:

  • Account information: email address, authentication identifiers, and optional display name when you create an account (including via Sign in with Apple or email magic link).
  • Preferences: niche interests you select during onboarding and cafés you favourite.
  • Order information: items ordered, prices, taxes, platform fee, pickup name, scheduled pickup time, order status, and payment status. We do not store your full payment card number.
  • Location information: when you grant permission, your device shares location to show nearby cafés and distances. We do not store precise GPS coordinates in our database; location is used on your device and for coarse discovery queries.
  • Waitlist: email address when you join our launch waitlist, with your consent.
  • Communications: messages you send to our support team.
  • Technical data: basic request and security logs from our servers (for example, IP address and timestamps) to operate and protect the Service.

Information we do not collect

  • Full payment card numbers — card payments are tokenized and processed by Square.
  • Precise GPS coordinates stored long-term on our servers.
  • Crash analytics or product analytics at launch — if we add these tools later, we will update this Policy.

How we use information

  • Provide and operate the Service, including account access, personalized café discovery, and order-ahead where available.
  • Process orders and share fulfilment details with the café you order from.
  • Communicate with you about your account, orders, and support requests.
  • Send waitlist and launch emails if you have given express consent.
  • Maintain security, prevent fraud, and comply with law.
  • Improve the Service using aggregated or de-identified information where possible.

How we share information

We share personal information only as needed to operate the Service:

  • Cafés: when you place an order, we share details required for fulfilment (such as pickup name, items, and pickup time) with the café you selected.
  • Square: payment processing, POS order creation, and related transaction data. Square’s privacy practices are described at squareup.com/legal/privacy.
  • Supabase: authentication and database hosting.
  • Railway and Vercel: application and website hosting.
  • Apple: when you use Sign in with Apple.
  • Resend (when enabled): transactional emails such as order receipts.
  • Legal and safety: when required by law or to protect rights, safety, and security.

Cross-border processing (Canadian users)

We are based in the United Kingdom and use service providers that may process personal information in the United States and other countries.

When your information is processed outside Canada, it may be subject to access by courts, law enforcement, or national security authorities in those jurisdictions.

We remain accountable for personal information processed by our service providers on our behalf and require appropriate safeguards contractually where applicable.

Retention

We keep personal information only as long as needed for the purposes described in this Policy.

If you delete your account, we delete your favourites, remove your email and profile details, and delete your authentication account. Order records may be retained in anonymized form (including pickup name, amounts, café, and line items) for up to seven (7) years for financial, tax, and dispute purposes, after which we delete or further anonymize them where feasible.

Waitlist emails are retained until you unsubscribe or ask us to delete them.

Your choices and rights

Depending on where you live, you may have rights to:

  • Access and receive a copy of personal information we hold about you.
  • Correct inaccurate information.
  • Delete your account and personal data — in the app, go to Account → Login details → Delete account.
  • Withdraw consent for marketing emails — email support@felist.app with “Unsubscribe” in the subject line; we will process requests within ten (10) business days.
  • Lodge a complaint with the Office of the Privacy Commissioner of Canada (for Canadian users) or your local supervisory authority.

Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

Security

We use technical and organizational measures appropriate to the nature of the data we process, including encryption in transit, access controls, and payment tokenization via Square. No method of transmission or storage is completely secure.

Changes

We may update this Policy from time to time. We will post the updated version on felist.app/privacy and update the effective date. For material changes, we may provide additional notice in the app or by email where appropriate.

Contact

Privacy questions: privacy@felist.app

General support: support@felist.app

Felist Limited, Office 1569, 3 Fitzroy Place, Glasgow, Scotland, G3 7RH, United Kingdom

D-U-N-S: 234856298