Privacy Policy

Cashless Cafeteria may collect account profile information, school information, staff records, student records, guardian records, household records, contact details, lunch card identifiers, photos uploaded by authorized users, role and permission details, cafeteria menu data, purchase activity, wallet activity, top-ups, payment metadata, notification preferences, audit logs, and support or demo request details.

Payment card details are handled by supported payment processors. Cashless Cafeteria stores payment status, transaction references, wallet activity, and related reconciliation information, but does not need to store full payment card numbers.

We use information to operate cafeteria POS checkout, verify buyers, manage household wallets, process top-ups, support lunch cards, show family portal activity, send notifications, maintain reports, secure the platform, provide support, and improve the service.

We also use audit logs and security records to help schools review account changes, payment activity, and administrative actions.

Access to data is scoped by school, role, permissions, and household relationships. Guardians, students, and household-linked users should only see information associated with their linked household or account.

Staff access is controlled through school-assigned roles and permissions.

Notification preferences may control whether users receive purchase, low-balance, top-up, account, invitation, or administrative notices.

Notifications are designed to be sent only to the users connected to the relevant transaction, household, student, staff member, guardian, or school account.

We share information with the school or organization that manages the account, authorized users within that school, and service providers that help operate the platform, such as hosting, email, storage, analytics, and payment processing providers.

We do not sell student, guardian, household, or cafeteria transaction information.

Online top-ups, payouts, payment methods, and related payment events may be processed by third-party payment providers such as Stripe. Those providers process payment information under their own terms and privacy practices.

We use payment provider records to confirm payment status, reconcile wallet balances, handle failed payments, and support school payout activity.

The platform uses authenticated sessions, school scoping, role-based permissions, audit logs, rate limiting, and controlled API access to help protect records.

No system can guarantee absolute security. Users and schools should use strong account practices and report suspicious activity promptly.

We retain records as needed to operate the service, support school cafeteria operations, maintain transaction and audit history, comply with payment and accounting needs, resolve disputes, and meet legal or contractual obligations.

Schools may request updates, deactivation, or deletion of eligible records through authorized administrative workflows, subject to operational, audit, payment, or legal retention needs.

Cashless Cafeteria is designed for school-managed cafeteria operations. Student data is handled in the context of the school relationship and household access configured by the school.

Schools are responsible for determining required notices, consents, and policies for their community. We support school-controlled access and privacy-conscious data scoping.

Users may update certain profile details, language, timezone, notification preferences, and payment settings where available. Schools can manage staff roles, household links, account status, and record corrections through administrative tools.

We may update this Privacy Policy as the platform, procedures, or legal requirements change. The updated date on this page will reflect the latest version.

Questions about privacy practices may be directed to the Cashless Cafeteria team through the contact or demo request options on the website.