Privacy Policy

BearLog (bearlog.app) is built around data minimization: customers can join a queue without an account, and we collect as little as the service needs to work. This policy explains what we collect from customers waiting in a queue and from the businesses (“providers”) that run queues.

1. What we collect from customers

• Queue token. When you join a line we generate a random token that identifies your place. No account, phone number, or email is required.
• Optional nickname.You may add a nickname so staff can call you. It is visible only to the venue’s staff and to you, and it is deleted or anonymized within 24 hours.
• Push subscription.If you opt in to notifications, your browser’s push subscription is stored so we can alert you when your turn is near. You can revoke it in your browser at any time.

Queue tokens and queue events (joined, called, completed) are kept for 90 days for support and service metrics, then deleted. Aggregate daily statistics (counts and wait times, with no personal data) are kept indefinitely. We never ask customers for clinical or health information, and providers are prohibited from collecting it through BearLog.

2. What we collect from providers

• Account details: your name, email address, and password (or Google sign-in), plus staff members you invite.
• Business details: your business name and location, used to set up your queue page and public directory listing.
• Billing: payments are handled by Lemon Squeezy and PayMongo under their own privacy policies. We receive confirmation of payment but never see or store your card details.

3. Cookies and analytics

The customer queue experience uses no advertising trackers. Our marketing pages use the Meta Pixel to measure how well our advertising works; Meta’s handling of that data is described in Meta’s privacy policy. We also keep first-party error logs (which never include nicknames or secrets) to keep the service working.

4. Where data lives and who processes it

We use Supabase (database and authentication), Vercel (hosting), and Resend (transactional email to providers) to run the service. These processors handle data on our behalf under their own security and privacy commitments. We do not sell personal data to anyone.

5. Your rights

You may request access to, correction of, or deletion of your personal data by emailing support@bearlog.app. Providers can delete their account, which removes account and business details. Customer data largely deletes itself: nicknames within 24 hours, queue records within 90 days. We comply with the Philippine Data Privacy Act of 2012 and honor equivalent rights for users elsewhere.

6. Children

Provider accounts are for adults operating a business. Customers of any age may be added to a line by staff, but we knowingly collect no personal data from children beyond an optional nickname that is deleted within 24 hours.

7. Changes

If we materially change this policy, we will update the date above and notify providers by email or in the dashboard. See also our Terms of Service.