Privacy policy

1Who we are

Webby provides a loyalty and order-tracking tool for home kitchens and small kitchens. The service runs at app.madebywebby.com. The operator is Webby. Contact: help@madebywebby.com.

2Kitchen staff (the app)

Chefs and staff do not self-signup. Webby or a kitchen owner invites an email. You set a password and sign in on the website or in the Webby app. We store your email, name if you give one, role (owner or staff), which kitchen you belong to, and sign-in timestamps. Passwords are handled by our auth provider (Supabase); we do not see them in plain text. You can remove your own account from Profile. That removes the login. It does not remove the kitchen or its customers.

The app is the same service as the website. It does not collect a separate profile. We do not sell staff accounts or use them for advertising.

3Kitchen customers (loyalty)

Each kitchen keeps a roster of their regulars: name, phone, points or stamp counts, order notes, and (when used) a loyalty card / wallet pass. That data is entered by the kitchen or, later, by the customer on a join link the kitchen sends. Webby hosts it so the kitchen can log orders and update passes. The kitchen is responsible for what they record about their customers.

We do not use kitchen customer lists to market other businesses. Public menu pages do not require a customer login.

4Wallet passes

If a kitchen uses Apple Wallet or Google Wallet, we send the member name, points or stamps, and pass artwork to Apple or Google so the pass can live on the customer’s phone. Lock-screen updates use Apple Push and Google’s wallet APIs. Device registrations for Apple passes are stored so we can refresh the pass when points change. Customers can delete a pass from Wallet themselves.

5Where it is hosted

The app is hosted on Vercel. Accounts and kitchen data are stored in Supabase (Postgres). Public photos the operator pastes in are served from object storage (Cloudflare R2) when used. Email for invites and password reset goes through our auth provider. Apple and Google process wallet data as above. We do not run ads or advertising trackers on the chef app.

6Cookies and sign-in

We use cookies (or the equivalent in the app) to keep you signed in. Opening the app again within 7 days refreshes that sign-in. After 7 days without a visit, you sign in again. Signing out ends the session on that device only.

7How long we keep it

Staff accounts stay while the kitchen is a customer, or until the account is removed. Kitchen customer rows stay until the kitchen (or Webby, if asked) removes that person or the kitchen. Paused kitchens are hidden, not automatically wiped.

8Your rights

If you have a staff account you can ask us to correct or delete it. Kitchen customers should ask the kitchen first; Webby can help the kitchen remove a person if needed. Email help@madebywebby.com. UK/EEA users may also contact the ICO.

9Changes

If this policy changes in a way that matters, we will update this page and the date at the top.