Privacy Policy

Last updated: 8 November 2026

This Privacy Policy describes how TokenQube, a TouchQube product ("TokenQube", "we", "us"), collects, uses and shares information when you use the TokenQube app for iPhone, iPad and Android, its App Clip, and the website token.touchqube.com (together, the "Service").

TokenQube has two kinds of users: shops, who sign up and create order tokens, and customers, who scan a token's QR code to be alerted when their order is ready. Customers do not create an account.

Information We Collect

From shops

• Account information: your mobile number and the brand name(s) you register. One mobile number can own several brands.
• Sign-in codes: when you sign in, we send a one-time code by SMS or WhatsApp. We keep a record that a code was sent and, for WhatsApp codes, only a scrambled (hashed) copy of the code.
• Content you add: your logos, the colours and messages of your customer screen, and the token numbers you create with their times and status (preparing, ready, delivered).
• Linked screens: the device IDs of TokenQube counter or TV screens you link to your brand, and when they last connected.
• App settings such as language and display choices, kept on your own device.

From customers

• We do not ask for a customer's name or email. A phone number is optional (see below).
• WhatsApp number (optional): if you choose “Also send it to my WhatsApp”, we keep your mobile number with that one token, send you one message when the order is ready, and delete the number once the order is delivered or cancelled. Shops cannot see it.
• Alert details: if you turn on order alerts, your browser or the App Clip gives us a push notification address (a long code from Apple, Google or your browser maker) so we can make your phone ring when the order is ready. It is tied to that token only.
• Technical information: when the token page opens, our server records basic technical details, such as the browser type and whether notifications are allowed, to find and fix alert problems. Like any website, our server also receives your IP address.
• On your phone only: the token page remembers your recent tokens (for 24 hours) in your browser's storage, so you can follow several orders. This stays on your phone.

Cookies

We do not use advertising or tracking cookies and we do not use analytics services. The website stores a few settings, such as language and your sign-in, in your browser's local storage.

How We Use Your Information

• To create and run your account, sign you in and keep it secure.
• To show customers your token, logo and messages, and to alert them when you mark an order ready.
• To show your tokens on the counter and TV screens you link.
• To answer your support requests and to find and fix problems.
• To meet legal requirements.

We do not sell your information, and we do not use it for advertising.

Sharing Your Information

We share information only with service providers that help us run TokenQube, and only as needed for that purpose:

• MSG91, to send sign-in codes by SMS.
• WhatsApp (Meta), when a sign-in code is sent on WhatsApp, or when a customer asks for the order-ready message on WhatsApp.
• Apple, Google and browser makers' push services, to deliver order alerts.
• Amazon Web Services, which hosts our servers in India.
• Google Fonts, which serves the fonts on our home page.

Customers see the shop's name, logo, messages and the token number. Shops do not see who scanned their tokens; they only see whether a token's alert is set up, reached the phone, and was answered.

We may also share information when required by law, regulation or a valid legal request, or to protect our rights and the safety of our users.

Your Rights

You can see and change your brand name, logo and customer screen in the app at any time. You can delete a brand in the app under Settings → Delete this brand: this removes the brand, its tokens, logos, linked screens and its customers' alert details. To access, correct or delete any other personal information, or to withdraw consent, contact us using the details below. We will respond as required by the Digital Personal Data Protection Act, 2023 and other applicable law.

Data Retention

We keep a brand's information while the brand exists, and delete it when the brand is deleted, except where we must keep some records by law. Customers' alert details are removed with the token's brand, or earlier when the push service tells us they are no longer valid.

Security

All connections to TokenQube use encryption (HTTPS). Sign-in codes are stored scrambled, and access to our servers is restricted.

Children

TokenQube is a tool for businesses. Shop accounts are not meant for children under 18.

Changes

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal or regulatory reasons. We will update the date at the top when we do.

Contact Us

For questions, requests or complaints about our privacy practices, contact support@touchqube.com.