Privacy
Karavan at Sandford canteen pre-ordering. Version 2026-09-12.
What we store
Your name and school email address (from your Sandford account), your role (student, staff or admin), the language you picked, and the orders you place: items, amounts, pickup times and their status.
When you pay with telebirr and give us the transaction number, we read the public receipt for that number and keep what it returns: the amount, the credited party, the time, and your telebirr number as telebirr masks it (for example 2519****8082). If you upload a screenshot instead, staff look at it to confirm the payment and it stays on our server for that purpose only.
We also keep a log of what staff and admins do in the app (who cancelled what, when), and the date you accepted these documents.
What we don’t store
No passwords for students or staff (sign-in is by email code or Google), no card numbers, no location, no contacts, no advertising identifiers, no analytics trackers. Google sign-in only tells us your email address, that it is verified, and your name. Admin passwords are stored as one-way hashes.
Who sees it
You see your own orders. Canteen staff see the orders they are preparing: your name, the items and the pickup code. Admins (the students who run the app and, later, a Karavan manager) can see all orders and export them so Karavan can reconcile against its telebirr statement. Nobody else gets the data. It is never sold or shared with advertisers.
Third parties that touch the data on our behalf: Resend delivers the sign-in emails; Google handles Google sign-in; Ethio Telecom publishes the telebirr receipt we read. Each sees only what that job needs.
How long
Orders and payment records are kept for the school year so Karavan’s accounts add up, then deleted or anonymised. Sign-in sessions last 30 days (12 hours for admins). Ask an admin to delete your account and its orders at any time; payment records tied to Karavan’s books may be kept in anonymised form.
Your choices
Sign out on every device from Settings. Ask an admin to see, correct or delete what we hold about you. Use the counter instead of the app whenever you prefer.
Contact
Questions go to the admins through the canteen counter or the support email shown on the Google sign-in screen.
These documents were written by the students who run the app for a school CAS project, in plain language. They are not legal advice. Sandford International School and Karavan Coffee may replace them with their own wording; when that happens the version changes and everyone is asked to accept again.