Cup Cup

Cup Cup · Legal

Privacy Policy

Last updated: August 30, 2026

Cup Cup ("Cup Cup," "we," "us") operates the Cup Cup mobile and web app for browsing our menu, placing pickup orders, and participating in the Cup Cup Club loyalty program. This Privacy Policy explains what information we collect, why, and how you can control it.

1. Who we are

  • Legal entity: Cup Cup LLC
  • Registered address: Baghramyan 59 Ave, Apt 28, Yerevan, Armenia
  • Website: https://cupcup.am
  • Contact for privacy questions: info@cupcup.am

2. Information we collect

We collect only what is needed to take your order, run the loyalty program, and let you delete your account. Specifically:

  • Name and phone number — collected when you place an order or join Cup Cup Club, so staff can prepare and hand off your order and so we can identify your loyalty account.
  • A device identifier (Firebase Authentication UID) — every device that opens the app is issued an anonymous sign-in session. This identifier links your orders and, if you join, your Cup Cup Club membership together. On its own it is not a name, email address, or other human-readable identifier.
  • Cup Cup Club loyalty data — your member code, cups earned, rewards earned/redeemed, and stamp/redemption history, if you choose to join.
  • Order history — items ordered, customizations, prices, pickup location, order status, and timestamps.
  • An optional order note — if you add one at checkout.

What we do not collect

  • Analytics or usage-tracking data — no analytics SDK is integrated in the app.
  • Advertising identifiers — no ad SDK; we do not use IDFA/AAID.
  • Precise or coarse device location — "location" in the app refers only to the pickup branch you manually select from a fixed list; we never request or read your device’s GPS position.
  • Payment card or bank details — checkout is currently pay-at-pickup only, and Cup Cup’s own systems never see or store card numbers. If online payment is introduced in the future, it will be handled by a bank payment provider, and this policy will be updated to describe what that provider (not Cup Cup) collects.

3. How we use your information

We do not sell your information, and we do not use it for third-party advertising or marketing profiling.

  • To take, prepare, and hand off your pickup order.
  • To operate the Cup Cup Club loyalty program (tracking stamps, issuing and redeeming rewards).
  • To let staff identify and assist you at pickup or when scanning a loyalty or redemption code.
  • To investigate suspected abuse of the loyalty/redemption system (see Section 6).

4. Who we share it with

Your information is processed using Google Firebase (Authentication, Firestore database, and Cloud Functions) as our backend infrastructure provider. Firebase processes data on our behalf to run the app; it is not an independent third party we share your data with for its own purposes. We do not otherwise sell, rent, or share your personal information with third parties.

5. How long we keep your information

  • While your account is active, we retain your profile, loyalty, and order data for as long as you use the app.
  • Order records are retained after account deletion for legitimate transactional and accounting purposes (see Section 6) — we retain anonymized order records for as long as reasonably necessary for accounting, tax, and business record-keeping purposes; we do not currently apply a separate fixed deletion schedule beyond that need.
  • Everything else tied to your account is deleted, not retained, when you delete your account — see Section 6 for exactly what that means.

6. Deleting your account and your data

You can permanently delete your Cup Cup account yourself, at any time, from inside the app — no email or support request is needed: More → Delete account, then type the confirmation word shown on screen and confirm.

When you delete your account, we immediately and permanently:

  • Delete your Cup Cup Club profile (name, phone number, member code, and loyalty progress).
  • Delete your member-code reservation, so it can never be looked up again.
  • Delete your loyalty stamps, rewards, and any active redemption tokens.
  • Delete your sign-in credential (Firebase Authentication user) itself.

What we keep, and why

Past orders are retained as transactional and accounting records — this is standard practice and is not unique to Cup Cup. When you delete your account, we remove the personal information from those records: your name and phone number on the order are replaced with a generic placeholder, any order note is removed, and the order is no longer linked to your account or device identifier in any way that could be used to reconnect it to you. What remains on a retained order is limited to what was ordered, its price, its pickup location, its status, and when it happened — the transaction facts, not you.

We also retain a security/anti-fraud log of loyalty and reward scan attempts (including invalid or already-used ones), because deleting that log on request would let someone abuse the system and then erase the evidence by deleting their account. When you delete your account, any scan-log entries that reference you have the direct link to your account removed and the scanned code itself is redacted; only non-identifying operational details (which staff member scanned, what the scan’s result was, which order or reward it referenced) remain.

Deletion is final. Once your account is deleted, it cannot be recovered, and re-joining Cup Cup Club later starts a brand-new account with no memory of the old one.

7. Your rights

This Privacy Policy is governed by the law of the Republic of Armenia. If you are located outside Armenia, you may have additional rights under the law of your own jurisdiction, to the extent it applies to you.

You can exercise your core rights today through the in-app account-deletion flow described in Section 6. For any other privacy request — for example, asking what information we hold about you — contact us at info@cupcup.am and we will respond consistent with applicable law.

8. Children’s privacy

Cup Cup is not directed to, and is not intended for use by, children under 13 years old. We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us at info@cupcup.am and we will delete it.

9. Security

We use industry-standard measures, including encryption in transit (HTTPS/TLS) for all communication between the app and our backend, to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. If we make a material change, we will update the "last updated" date at the top of this page. Continued use of the app after a change means you accept the updated policy.

11. Contact us

Cup Cup LLC, Baghramyan 59 Ave, Apt 28, Yerevan, Armenia. Questions about this policy or your data: info@cupcup.am. Website: https://cupcup.am.