Privacy Policy
Last updated 28 August 2026
Care Pack, also known as Cafe Care Package ("we", "us", "our"), builds ordering software for wholesalers and free tools for cafes. This policy explains what we collect, why, and what you can do about it. If anything here is unclear, email lukas@kiness.com.au.
Who this covers
- Wholesalers and roasters who subscribe to Care Pack ordering.
- Cafes who order from a wholesaler through their private ordering link.
- Cafe and wholesaler owners who create an account for the free tools.
- Customers who reserve items through a cafe's surplus page.
What we collect
- Wholesalers: your business name and contact details, the people you invite to sign in, your catalogue and pricing, your customer list, and the orders placed with you.
- Cafes ordering from a wholesaler: your venue name, delivery address, contact details and the orders you place. Your wholesaler can see this; other wholesalers cannot.
- Free tools account holders: your name and email (via Google sign-in or an email and password), plus the cafe details you enter, such as your shop name, pickup times, payment details and logo.
- Surplus customers: the name and phone number you provide when reserving a bag, and any payment screenshot you choose to upload.
- Technical: basic data needed to keep the service running and secure, including sign-in and order activity logs.
Keeping businesses separate
Every wholesaler's catalogue, customers and orders are scoped to that business. One wholesaler cannot read or change another's data. We treat this as the most important thing the software has to get right.
Google sign-in
If you sign in with Google, we receive your name, email address and basic profile info from Google so we can create and secure your account. We never see or store your Google password. We only request the minimum permissions needed to sign you in.
How we use your information
- To run your dashboard and ordering links, and to deliver orders to the right business.
- To write draft invoices into your own accounting system where you have connected one.
- To collect payment on your behalf, but only where you have switched that on.
- To contact you about your account and the service.
- We do not sell your data, and we do not share it for advertising.
Who else touches it
We share data with the providers we need to run the service, and only for that purpose:
- Supabase — database and authentication.
- Netlify — hosting.
- Xero — where you connect it, so orders can become draft invoices in your own organisation.
- Stripe — where you have switched on payment collection. Card and bank details are handled by Stripe; we never see or store full card numbers.
How long we keep it
We keep your account and order data for as long as you use the service, and for a reasonable period afterwards so records and invoices stay reconcilable. Ask us to delete it and we will, except where we have to keep something for legal or accounting reasons.
Your choices
You can edit your catalogue, listings and details at any time from your dashboard. To delete your account, or to get a copy of your data, email lukas@kiness.com.au and we'll sort it out.
Changes to this policy
If we make meaningful changes, we'll update this page and the date above.
Contact
Questions about privacy? Email lukas@kiness.com.au.