Skip to content
Legal

Privacy policy.

Last updated: April 11, 2026

Looking for the plain-English version? Our Trust & Security page covers what we do with operator and guest data, how we protect it, and who we run on, without the legalese.

01Overview

Habitu Technologies ("Company," "we," "us") operates the Habitu guest intelligence platform. This Privacy Policy explains how we collect, use, store, and protect information when you use our website (habitu.io) and platform services.

We serve two types of users: restaurant brands ("Merchants") who use our platform, and their customers ("Consumers") who interact with branded apps powered by Habitu.

02Information we collect

From merchants

  • Business name, contact information, and billing details
  • POS integration credentials (encrypted, used solely for data sync)
  • Brand assets (logos, colors, fonts) for app customization
  • Usage data and analytics from the merchant dashboard

From consumers

  • Phone number or email (used for account creation and communications)
  • Visit history and transaction data (synced from POS)
  • Loyalty points, rewards, and tier status
  • Device information and app interaction data

From website visitors

  • Information submitted through forms (name, email, company)
  • Standard web analytics (pages visited, referral source, device type)

03How we use information

  • To provide, maintain, and improve the Service
  • To process transactions and manage loyalty programs on behalf of Merchants
  • To send targeted Reach Out as configured by Merchants to their Consumers
  • To generate guest groups and analytics for Merchants
  • To communicate with Merchants about their accounts, billing, and product updates
  • To respond to inquiries submitted through our website
  • To detect and prevent fraud or abuse

04Data ownership and processing

Consumer data collected through the platform belongs to the Merchant. Habitu acts as a data processor on behalf of the Merchant (the data controller). We do not sell, rent, or share Consumer data with third parties for their own marketing purposes.

Merchants are responsible for obtaining appropriate consent from their Consumers for data collection and communications, in compliance with applicable local laws.

05Data storage and security

We implement industry-standard security measures to protect data, including encryption in transit (TLS) and at rest, access controls, and regular security audits. Data is stored in secure cloud infrastructure. POS credentials are encrypted and never stored in plaintext.

06Data retention

We retain Merchant data for the duration of the service agreement and for 30 days after termination, during which Merchants may request data export. Consumer data is retained as long as the Merchant's account is active. After account termination, all associated data is deleted within 90 days unless required by law.

07Third-party services

We use third-party services to operate the platform, including cloud hosting, payment processing, and POS integration partners. These providers are contractually obligated to protect your data and use it only for the purposes we specify.

08Consumer rights

Consumers who wish to access, correct, or delete their personal data should contact the restaurant brand (Merchant) that operates their loyalty program. Merchants can manage consumer data through the Habitu dashboard. Consumers may also contact us directly and we will coordinate with the relevant Merchant.

09Cookies

Our website uses minimal cookies for essential functionality (such as remembering theme preferences). We do not use tracking cookies or third-party advertising cookies.

10International data transfers

Our services are primarily operated in the United Arab Emirates. If data is transferred to servers in other jurisdictions, we ensure appropriate safeguards are in place to protect your data in compliance with UAE data protection regulations.

11Changes to this policy

We may update this Privacy Policy from time to time. We will notify Merchants of material changes via email. The "Last updated" date at the top of this page indicates the most recent revision.

Questions

Reach out at hello@habitu.io. We answer every email within one business day.