Privacy
Who runs Daily Loaf
Daily Loaf is run by the Bakebound team, trading under an Australian sole-trader ABN, provided on request. Below is what Daily Loaf collects, the reasons, where it is stored and what you are entitled to ask. It is written for two groups: bakery owners who use Daily Loaf, and customers who have joined a bakery's club.
From bakery owners
When you open an account we take your business name, an email address, a password (kept only as a hash) and an Australian mobile number, confirmed by a texted code. On Free we also keep a record of the marketing consent you gave: the exact sentence, its version, the time, your IP address and browser, and how it was given. On Crumb or Hearth we keep a reference to your customer record at Stripe and the state of your subscription. Card numbers are never held by us.
As you use the product we keep your card settings, your members, your campaigns and how each was delivered, and the counts that measure your plan.
From members of a bakery's club
When a customer joins a bakery's club we record their mobile number, confirmed by a texted code, when they joined, and, if they choose, a first name and an email address. An email address is used for campaigns only once the member confirms it from a link we send. Every stamp, every reward code and any opt-out from messages is recorded too. We record no purchases, no amounts and nothing the bakery does not press.
A member can stop a bakery's messages at any time with the link in any message, or by replying STOP to a text from the bakery's number. Their stamps and rewards stay. A member who wants their record removed can ask the bakery or email hello@bakebound.com.au.
What it is used for
Running the stamp card for the bakery, sending the messages the bakery writes to members who agreed to receive them, billing the bakery, keeping the service secure, and, for owners on Free only, acting on the marketing consent they gave.
Where it is kept
Daily Loaf's application is hosted by Vercel in Sydney and its database by Supabase in Sydney, backed up every day. Texts and phone numbers pass through Vonage and email through Postmark, and either one may handle a message beyond Australia while delivering it. Stripe handles card payments and holds card details under its own privacy policy. One more outside service draws the QR image on the Loyalty card page from your join link; the link holds nothing but your public join code. Apart from that, your data stays in Australia.
Who can see it
Each bakery sees its own members and no one else's. The Bakebound team can see data when it is needed to run or support the service. For owners on Free, business contact details are shared with the partners named on our partners page for the purpose in the consent sentence, and with nobody else. Member details are never sold, never shared for marketing, and never used by Bakebound or its partners to contact members.
How long it is kept
As long as the bakery's account exists, and for a reasonable time after that for billing and legal records. A removed member is deleted from the live service, and backups age out in their normal cycle.
What you can ask
You can ask what we hold about you, ask us to correct it or ask us to delete it, by writing to hello@bakebound.com.au. A person replies within one business day, Melbourne time. Nothing on this page limits your rights under the Privacy Act 1988 or the Australian Consumer Law.
If this page changes
If we change this page in a way that matters, we email bakery owners at their confirmed address before the change takes effect.