Ambi's Chai

Privacy Policy

Last updated: 4 July 2026

This Privacy Policy explains how Ambi's Chai ("Ambi's Chai", "we", "us", or "our") collects, uses, discloses, and protects your personal information when you use the Ambi's Chai mobile application and related services (the "App"). By creating an account or using the App, you agree to this Policy. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Who we are

Ambi's Chai operates a multi-location chai/tea café ordering platform. The App lets you browse store menus, place and pay for pickup orders, reorder past orders, receive order updates, and optionally order using a voice assistant.

2. Information we collect

We only collect information needed to run the App. We do not sell your personal information, and we do not use it for cross-app tracking or third-party advertising.

2.1 Information you provide

  • Account details: email address and password (for sign-up and one-time-code login).
  • Profile details: name, phone number, date of birth (optional), and a profile photo if you upload one.
  • Dietary preferences: preferences, allergies, drink preferences, or notes you add.
  • Order information: items ordered, per-item notes, your "usual" items, and order history.
  • Communications: messages to our voice/chat assistant and any support requests.

2.2 Collected automatically or with your permission

  • Precise location (with permission): to find the Ambi's Chai store closest to you, while you use the App.
  • Microphone audio and speech (with permission): when you use voice ordering, to transcribe your request and build your order.
  • Photos (with permission): only when you choose a profile picture.
  • Device push token: to send order updates and reminders.
  • Basic device / diagnostic data: needed for the App to run reliably.

2.3 Payment information

Payments are processed by Square. Card details are collected and processed directly by Square; the App transmits only a one-time secure token. We do not store your full card number. Saved cards are stored by Square as a "card on file"; we retain only a reference and non-sensitive details (e.g. card brand and last 4 digits) to display your saved cards.

3. How we use your information

  • Create and manage your account and authenticate you (email one-time codes).
  • Show per-store menus and let you place, pay for, reorder, and track orders.
  • Process payments and issue receipts (via Square).
  • Find your nearest store when you enable location.
  • Power voice/chat ordering (transcribe speech and build your cart).
  • Send order updates, pickup reminders, and store notifications (only if you enable notifications).
  • Honour your dietary preferences and "usual" items.
  • Provide support, prevent fraud and abuse, and keep the service secure.
  • Comply with our legal obligations.

We rely on your consent (e.g. location, microphone, notifications), the performance of our services to you (processing your orders), and our legitimate business interests (security, fraud prevention, service improvement).

4. Voice / AI ordering

If you use voice ordering, your microphone audio and its transcription are sent to our AI voice provider (xAI) to understand your request and build your order. The assistant can view the relevant store menu and add items to your cart; it does not take payment — you always confirm and pay yourself in the App. Voice audio is used to provide the ordering feature and is not used for advertising.

5. How we share your information

We share personal information only with service providers who help us run the App, and only as needed:

ProviderPurposeData involved
SquarePayment processing, cards on filePayment/card data, order amount, customer reference
Google Firebase Cloud MessagingPush notifications onlyDevice push token
xAIVoice/chat ordering assistantMicrophone audio, transcripts, order/menu context
AivenDatabase hosting (managed PostgreSQL)Account, profile, and order data
Fly.ioApplication hosting and file/image storage (bucket)Data processed by our backend; uploaded profile photos
Email / SMTP providerSending login one-time codes and account emailsEmail address, codes

These providers may process data on servers located outside Australia. We take reasonable steps to ensure they protect your information consistently with the Australian Privacy Principles. We may also disclose information if required by law. We do not sell your personal information.

6. Data retention

We keep your personal information for as long as your account is active or as needed to provide the App, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where we are required to retain certain records (for example, transaction records).

7. Your choices and rights

  • Account deletion: delete your account any time in the App (Profile → Delete account). This disables login and removes or de-identifies your personal information as described above.
  • Access and correction: view and update your profile in the App, or contact us to request access or correction.
  • Permissions: turn location, microphone, photo, and notification permissions on or off in your device settings. Turning off notifications in the App stops all push messages.
  • Marketing: the App sends only service-related messages (order updates, reminders). We do not send third-party marketing.

To exercise any right, email us at Ambi@ambischai.com.au. We respond within a reasonable time and as required by law.

8. Security

We use reasonable technical and organisational measures to protect your information, including encryption in transit (HTTPS), tokenised payments (we never store full card numbers), hashed one-time codes, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children's privacy

The App is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

10. International users and data transfers

Ambi's Chai operates in Australia. If you use the App from outside Australia, your information may be processed in Australia and in other countries where our service providers operate. By using the App you consent to this transfer, subject to the protections described in this Policy.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version in the App and/or on our website and update the "Last updated" date above. Significant changes will be notified to you where required by law. Continued use of the App after an update means you accept the revised Policy.

12. Contact us

Questions, concerns, or complaints about this Policy or how we handle your information:

Our locations:

  • North Sydney — 35 Ridge Street, North Sydney NSW 2060
  • Parramatta — Shop 3, 2 Horwood Place, Parramatta NSW 2150
  • Pennant Hills — Shop 5/366–368 Pennant Hills Road, Pennant Hills NSW 2120
  • Kent Street — 222 Kent Street, Sydney NSW 2000
  • ANU — ANU Campus, Joplin Lane, Acton ACT 2601

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

This document is provided based on the App's current data practices and is not legal advice. Please have it reviewed by a qualified legal professional, and add your registered legal entity name / ABN, before final publication.