Privacy policy
Last updated 19 October 2026
Tansi (“we”) is an app for shops: a live queue, a point of sale, customer records, rewards, stock and books. This policy explains what personal information we handle when a shop, its staff or its guests use Tansi — the app at app.tansi.store, this website, and the chats a shop connects on LINE, Messenger or Telegram — and what you can do about it.
Questions or requests: privacy@tansi.store.
1.Who is responsible for what
We are responsible for your Tansi account: what you sign in with and the settings you choose.
Each shop decides what it keeps about its own customers — your visits, bills, points and the notes its staff write. We keep those records for the shop and use them only to run Tansi for it. If you ask us about a shop's records of you, we will help, and we may pass your request to the shop.
2.What we collect
Only what Tansi needs to work:
- Your account: your name, email address, phone number, a password (stored only as a one-way hash), and the profile picture of a sign-in provider you use. Each sign-in session is recorded with its device's IP address and browser, so you can see where you are signed in and sign a device out.
- Joining a queue: your name, phone number, party size, what you came for and any note, and the times you were called and seated. If a shop asks guests to be nearby, your browser's location is checked once against the shop's and is not stored.
- At a shop: once you are seated or served, the shop's record of you — your name, phone number, email address and profile picture from your account, your visits, what you spent, your points and stamps, and any birthday, tags or notes its staff add. Your orders and bills, how you paid and, for a mobile-wallet payment, the photo of your transfer the staff take as proof.
- Chats: when you message a shop on LINE, Messenger or Telegram, your ID on that app and your name and profile picture as that app shares them. We read your messages to answer them and do not store their text.
- Notifications: if you allow your browser to notify you, the address your browser gives us to send your ticket's alerts.
- Shops and their staff: the shop's name, logo, branches (address, phone, location, opening hours), menu and prices, staff names and roles, staff PINs (stored only as a one-way hash), time clock and cash drawer records, and an activity log of who did what.
3.Information from Facebook, LINE, Telegram and Google
- Signing in with Facebook, Google or LINE: your name, email address, profile picture and an ID for you at that service. We ask for nothing else, and we do not post anything.
- A shop connecting its Facebook Page: the Page's name and picture, and an access token for the Page, stored encrypted, so Tansi can send and receive the Page's Messenger messages. We do not read the profile of the person who connects it, and we keep no token for them.
- Messenger: when you message a shop's Page, your ID for that Page and your first name, last name and profile picture.
- LINE and Telegram: your user ID and display name (on LINE also your profile picture).
- Signing in with a phone number: the number goes to Google Firebase, which sends you the code.
4.How we use it
We do not sell personal information, show advertising, or use any analytics or advertising trackers. A shop sends you offers only if you agreed to them, and you can turn them off for each shop in your account settings.
- To run the queue: give you a ticket, show your place in the line, and tell you when it is your turn — on the page, in the chat and on the shop's screen.
- To let a shop take orders, bills and payments, keep its customer records and rewards, and keep its books.
- To sign you in, keep your account secure, and send you the emails you ask for (verifying your address, resetting your password).
- To answer the questions you send in a chat (the menu, your rewards, opening hours).
- To find and fix problems and keep the service running.
5.Who else handles it
We use these services to run Tansi, and they handle data only for that:
- Railway: our servers and database, in Singapore.
- Cloudflare: the network in front of the app, which protects it from attacks.
- A cloud storage provider: the photos of wallet transfers, kept private.
- Brevo: sends our emails.
- Google Firebase: sends sign-in codes by text message.
- LINE, Meta (Messenger) and Telegram: carry the messages between you and a shop when you chat with it there.
- Your browser's push service (Google, Apple, Mozilla or Microsoft): delivers the notifications you allowed.
- Vercel: serves this website.
6.The shop, and assistants it connects
The staff of a shop you visit see that shop's records of you, as far as their role allows. A shop may also connect an AI assistant (such as ChatGPT or Claude) to Tansi; it can then do only what the staff member who connected it allowed, it asks before it changes anything, and every change it makes is in the shop's activity log.
We may disclose information when the law requires it.
7.Cookies
The app uses only the cookies it needs: one that keeps you signed in (30 days, renewed while you use it), one for the moment you sign in with another service, and, on a shop's own devices, ones that remember the device and the staff member using it. There are no advertising or tracking cookies. This website sets no cookies; it remembers only your light or dark theme, in your browser.
8.How long we keep it
- Your account and a shop's records are kept while you or the shop use Tansi, until you ask us to delete them.
- Sign-in sessions end after 30 days without use, or when you sign out.
- Browser notification addresses are deleted 48 hours after they are made.
- Email links expire after 1 hour (password reset) or 24 hours (verification) and are deleted a week later.
- The record of messages we sent is kept for 6 months, and a shop's activity log for 24 months.
- Points expire as each shop sets them (a year unless the shop changes it).
9.Your choices and rights
Send any request to privacy@tansi.store. We answer within 30 days.
- See and correct: your account page shows your name, email, phone and where you are signed in. A shop can correct its record of you; ask its staff, or us.
- Sign out: sign out any device from your account page, or every other device by changing your password.
- Offers: turn a shop's offers off in your account settings.
- Deletion: ask us to delete your account and the information about you — see Data deletion.
- A copy: ask us for a copy of the information we keep about you.
10.Security
Tansi is served over HTTPS only. Passwords and PINs are stored as one-way hashes, and the credentials shops give us for LINE, Facebook and Telegram are encrypted. Staff see only what their role allows, and sensitive actions (voids, refunds, changes to roles) are recorded with who did them and who approved them. No system is perfectly secure; if a breach affects you, we will tell you.
11.Children
Tansi is not meant for children under 13, and we do not knowingly keep an account for one. A parent or guardian can take a ticket for a family.
12.Changes to this policy
When we change this policy we update the date at the top. If a change matters to how your information is used, we will also say so in the app before it takes effect.