Privacy

Last updated 21 October 2026

What the app collects

• Your phone number, which is how you sign in.
• Your name, so we know who to call when your order is ready.
• Your email address, and an address if you give one. You fill these in once, under Account, and you can change them there.
• Your orders — what you ordered, when, what it cost, and any note you typed for the kitchen.
• Your loyalty stamps and the rewards you have earned.
• A push token for your phone, but only if you allow notifications.

What it is used for

• Your account: signing you in and keeping you signed in.
• Your orders: sending them to the kitchen and showing you where they are.
• Reaching you about an order. Each order keeps its own copy of your name, phone number, email and address as they were when you placed it, so the counter can reach you about that order even if you change them later. Staff can see those details while they are handling the order.
• Your stamps: counting them and letting you spend them.
• Notifications you asked for, such as your order being ready.

Feedback from the QR code

• The QR code in the shop opens a page that asks how your visit went. A thumbs up takes you to Google, and anything you write there is between you and Google.
• A thumbs down opens our own form. It keeps what you pick and the note you write, and, only if you give them, your name and a mobile number or email.
• We use that contact for one thing: a manager reaching you about that note. The owner and the managers on the alert list see it, by text and on the owner desk, and the owner also gets your note and contact by email.
• The texts go out through Semaphore, a text-message service, and the email through Resend, an email-sending service. We use them only to carry the note to us.
• Either tap is counted, with where the QR code was and when. To stop one phone flooding the form, we also note the network address a tap or a note came from. It is used for nothing else and is cleared within three days.
• We clear your contact 90 days after a manager follows up, or 180 days after you send the note if no one has. The note stays, without your contact, so we can see what keeps going wrong.

The card on the web

• Your rewards card also opens in a browser, at card.bakugoramen.com. You sign in with your phone number and a texted code, the same as in the app, and it is the same card.
• It keeps you signed in with three cookies. bk_at and bk_rt hold your sign-in. bk_seat holds whether you picked My phone or Not my phone, when you signed in, and when you last used the card. They are used for nothing else.
• On My phone, the cookies last up to a year from when you last used the card, so you stay signed in until you sign out or a year goes by without use.
• On Not my phone, the cookies are kept only for this browser session, and the card signs you out after 15 minutes without use, or 2 hours in all, whichever comes first.
• Before a code is texted, Cloudflare Turnstile, a service that tells people from bots, checks the page. Cloudflare sees your network address and browser for that check. See Cloudflare's Turnstile Privacy Addendum.
• To stop one phone or one network asking for codes without end, we count the codes sent to each number and from each network address. The number is counted by its scrambled fingerprint, not the number itself. The address is used for nothing else and is cleared within three days.

Bookings

• You can book a seat on the card on the web, and staff can book one for you at the counter. A booking keeps a name and a mobile number, how many of you are coming, and the day and time of your visit. On the card, the number is your card's unless you give another, which we check with a texted code first.
• Staff see the booking on the counter tablet, with the name and number, so they can confirm it and reach you about it. The owner sees the same on the owner desk when closing a day that has bookings. The managers on the booking alert list get a text with the day, the time, how many of you there are and your last name.
• The texts go out through Semaphore, the same text-message service: the code, the confirmation, reminders, and word if the booking is cancelled or let go. We use it only to carry those texts.
• Most texts to you carry a link to your booking. It opens without signing in and shows your first name, the time, how many of you there are and whether it is a table or the bar. Whoever holds the link sees all of that, and can say you are coming or cancel the booking, so pass it on only to someone you would let do that.
• If a number misses two bookings in 30 days, it cannot book for 30 days. That is kept against the number's scrambled fingerprint, not the number itself.
• A booking's name and number are cleared about 60 days after the visit, and its link stops working. The rest of the booking stays, without them. A code for another number is cleared within three days.
• Deleting your account cancels your open bookings, with a text to say so, and clears the name and number on your past ones at once. A booking it has just cancelled keeps the number until that text has gone out, and loses it in the next daily clear-out. The fingerprint stays, so a pause on the number stays too.

What it does not do

• No tracking. Nothing here follows you around other apps or other websites.
• No third-party ads. There are no ads in the app at all.
• No sale of your data. We do not sell it, rent it, or trade it.

Where it lives

Everything is stored with Supabase, on servers in Singapore. Your full phone number is held by the sign-in service and on each order's copy of your details. Your account record itself keeps only the last four digits of it, plus a scrambled fingerprint of the whole number that cannot be turned back into the number itself.

If the app crashes or hits an error, a crash report goes to Sentry, a crash-reporting service, on servers in the United States. It says what went wrong and on what kind of phone and iOS version. It does not carry your name, phone number, email, address or card, and while the card form is open the app sends Sentry nothing at all.

Deleting your account

You can delete your account in the app, under Account. Deleting anonymises your record: your name, phone number and email are blanked on your account, your address is removed, every past order's copy of your name, phone number, email and address is blanked, any notes you typed are blanked, and your devices are removed so no more notifications reach you. What is left is a row with nothing in it that points at you, and the plain fact that some orders were once placed.

This cannot be undone. We promise nothing about how long an anonymised row sits in the database, because the database enforces no such promise, and we would rather say that than say something we do not keep.

One thing does stay: the scrambled fingerprint of your phone number. We keep it so that the same number cannot claim a welcome gift a second time, or shake off a pause on bookings. It is not the number, and nothing can turn it back into one.

Contact

Questions about any of this? Call the store at 0995-667-1940, or message us on Instagram at @bakugoramen.

This page is written in plain words on purpose. It is not legal advice.