Privacy Policy

1. Who we are

Chiya Bari is a chiya and hookah lounge in Pokhara, Nepal. This app runs our loyalty membership, where you collect cups and earn a free tea.

2. What we collect

• Your name and mobile number.
• A PIN you choose. We only ever store a secure one way hash of it, never the PIN itself.
• Your date of birth, only if you choose to add it, so we can send you a birthday treat.
• Your cup and reward history (cups added, rewards redeemed and when).
• Basic security records such as failed login counts, used only to protect your account.

3. How we use it

We use your information to run your membership card, track your cups and rewards, let our counter staff serve you quickly, and occasionally send you a message such as a birthday wish. We do not use it for advertising.

4. How we protect it

Your PIN is hashed with a strong algorithm (PBKDF2). Your login session is a signed, secure, HttpOnly cookie. All traffic is served over HTTPS, and the app is hosted on Cloudflare. Only Chiya Bari staff and admins can view membership records, and every staff action is logged.

5. Sharing

We do not sell or rent your information. We do not share it with third parties for marketing. Data is only handled by Chiya Bari and the hosting provider that keeps the app running.

6. Your choices

You can ask our staff to update your name or birthday, reset your PIN, or delete your account at any time. If you forget your PIN, staff can reset it at the counter, since PINs cannot be recovered.

7. How long we keep it

We keep your account while it is active. Old activity records are trimmed automatically over time, and your balances stay on your account.

8. Contact us

Questions about your data? Reach us at:

• Zero-km, Pokhara 33700, Nepal
• Phone: +977-9808884838
• Email: chiyabarinp@gmail.com
• Instagram: @chiyaabari