Privacy Policy

Version of 3 November 2026

This page explains what data the coffeebreak.kz website and the CoffeeBreak app for iOS, Android and web collect, why we need it, where it is stored and how to delete it.

Who processes the data

HighTengry LLP, BIN 260840032425, Astana, Republic of Kazakhstan ("we"). CoffeeBreak is a project of HighTengry LLP. For any questions about your data, write to coffeebreak@hightengry.kz.

Where the data is stored

All platform data is stored on servers in the Republic of Kazakhstan, as required by the Law of the Republic of Kazakhstan "On Personal Data and Its Protection". Backups are encrypted. Individual identification numbers (IIN) are stored encrypted, and every access to them is logged.

What data we collect

All users

your name and the phone number you sign in with;
your role on the platform (coffee shop, supplier or worker) and interface language;
technical data: device type and app version, sign-in time, error logs. We need them to keep the app working and to fix failures.

Coffee shop

name, BIN or IIN of the individual entrepreneur, address and coordinates of the location, contact of the owner or manager. We use them to verify that the coffee shop exists before enabling orders and shifts;
orders to suppliers, goods receipt, photos of delivery notes if you attach them;
team schedule and published shifts;
if you connect a Poster POS yourself: sales, stock levels, opening and closing of cash shifts, staff working time. We use this data to forecast purchases and confirm hours worked. You can disconnect at any time.

Supplier

company name, BIN, payment details, contact person. We use them to review the application to join the catalogue;
price list, stock, orders, shipment and payment confirmations, monthly platform invoices.

Worker (barista)

IIN and, if required for verification, a photo of an identity document. They are needed to register platform employment and to perform the duties of a tax agent;
shifts you chose and worked, ratings from coffee shops, payout amounts and social payments withheld;
details for receiving payouts;
location only at the moment you check in for a shift, to confirm you are on site. The app does not track your location in the background.

Website application form

Name, phone, role, name of the coffee shop or company, number of locations, product categories, work experience, and the advertising tags of the link you came from.

Why

to let you sign in and work in your role: place and accept orders, publish and take shifts;
to verify coffee shops and suppliers so that there are no random or dishonest participants on the platform;
to calculate shift payments, withhold and transfer 4% social payments for workers, as required by the law on platform employment;
to send notifications about orders, shifts and invoices;
to answer support requests and contact you about your website application.

We do not sell data and do not share it for advertising.

Other parties to a transaction, only as much as needed. A supplier sees the order, the coffee shop's name and address and a delivery contact. A coffee shop sees the supplier's payment details and the name and rating of the worker on its shift. A worker sees the coffee shop's address and shift terms.
Government authorities. As a tax agent we report workers' income and withheld payments to the state revenue authorities. We also disclose data upon a lawful request from government authorities.
Banks for payouts to workers.
Apple and Google to deliver push notifications. They receive your device's technical address and the notification text. We never include IIN, payment details or payout amounts in notifications.
Telegram, if you link the CoffeeBreak bot yourself. Then we know your Telegram ID and use it as a backup notification channel.

App permissions

Notifications: to tell you about orders, shifts and invoices. You can turn them off in your phone settings; notifications will then go to Telegram if it is linked.
Location: only for shift check-in, only while the app is open.
Camera and photos: only when you attach a delivery note or a document yourself.

Payments

The app does not collect or store bank card data. Coffee shops pay suppliers directly. Platform services are paid by invoice.

How long we keep data

Account data is kept while the account is open.
After the account is deleted, data is deleted within 30 days. The exception is records we must keep under Kazakhstan tax and accounting law (payouts, withheld payments, invoices). We keep them for the period required by law and then delete them.
Website applications are kept until you join the platform, but no longer than one year if you do not become a user.

Your rights and account deletion

You can find out what data we hold about you, correct it, delete it or withdraw your consent to processing. You can delete your account in the app (Profile → Delete account) or by request as described on the support page. We reply within 10 business days.

Legal basis

Your consent, given when you register in the app or tick the box in the website form, and the obligations of a tax agent under the laws of the Republic of Kazakhstan. Processing is carried out under the Law of the Republic of Kazakhstan "On Personal Data and Its Protection".

Age

The platform is intended for people aged 18 and over. We do not register minors.

Visit statistics

To understand which sections of the website are useful, we keep anonymous visit statistics. They contain no names or phone numbers.

Changes

If we change this policy, the new version will appear on this page with a new date. We will announce material changes in the app.

Language versions

This policy is available in Russian, Kazakh and English. If the versions differ, the Russian version prevails.