Overview
This Privacy Policy explains how AORA Pagar handles information when you use the iOS or Android app. The app is provided for customers of Pagariäri AORA in Elva, Estonia.
The app does not require an account. It does not sell personal information, show ads, or use third-party advertising trackers.
Information We Process
To make menu alerts work, the app and backend may process:
- An anonymous device ID created by the server.
- A push notification token for this device from Apple Push Notification service or Firebase Cloud Messaging.
- Your selected favorite product IDs.
- Your notification preferences for those products.
- Basic app metadata such as app version, notification permission state, locale, and timezone.
- Server logs needed for security, debugging, rate limiting, and delivery diagnostics.
Information We Do Not Collect In The App
- No customer account or password.
- No name, email address, or phone number for menu alerts.
- No precise location.
- No payment information.
- No advertising identifiers.
- No in-app analytics SDK for tracking you across apps or websites.
Same-Day Reservations
The app may link to AORA's public same-day reservation flow when reservations are open. That reservation flow may ask for a name and contact detail so the bakery can hold the selected items. Reservation information is separate from anonymous app alert preferences.
How We Use Information
- To show the public product catalog and daily menu.
- To remember favorite products for this device.
- To send push notifications you enabled.
- To prevent duplicate notifications.
- To diagnose delivery problems and invalid push tokens.
- To protect the service from abuse and technical errors.
Push Notifications
Push notifications are delivered through Apple Push Notification service (APNs) on iOS and Firebase Cloud Messaging (FCM) on Android. Notification payloads may include product ID, product name, event type, date, public status, and an app deep link. They do not include private customer information.
You can disable notifications in the app or in your device's notification settings at any time.
Data Sharing
We do not sell your information. We use Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM) to deliver notifications to your device. Hosting and infrastructure providers may process server data only as needed to operate the service.
Retention And Deletion
Favorite products and notification preferences are kept while alerts remain active for this device. You can remove favorites, pause alerts, or delete this device's alert data from the app.
If you delete the app without first deleting alert data, the old anonymous device record may remain until it is cleaned up or the platform push service reports the push token as inactive.
See Data & Deletion for deletion instructions.
Children
The app is intended for general bakery customers and is not directed at children under 13. We do not knowingly collect personal information from children through the app.
Changes
We may update this policy when the app or backend changes. The updated date at the top of this page shows the latest version.
Contact
For privacy questions, use the contact links on AORA.ee, message AORA on Instagram or Facebook, or visit the bakery at Kesk 38, Elva.