Privacy Policy

This policy covers information CakeWise stores for bakery owners and the customers who order from them.

Last updated: October 22, 2026

What we collect

• Bakery owners and team: name, email, password (stored hashed by our sign-in provider), bakery details, menu, photos, settings, subscription status, expenses, vendor bills, mileage and receipt photos, an activity log of changes, and, if they turn on notifications in the iPhone app, a push notification token for that device (deleted when they turn notifications off or delete their account).
• Bakery customers: name, email, phone, pickup or delivery details, order notes and items, inspiration photos, payment records, appointment times, emails the bakery sends them, and chats with the bakery’s assistant.
• Site visitors: only after they tap Accept on the cookie banner, an anonymous visitor code, approximate city, region and country from the network connection, and the referring site. Nothing is counted if they tap Reject. No advertising trackers and no precise location.

Who we share it with

We use these service providers only to run CakeWise. We don’t sell personal information or use it for advertising.

• Stripe: card payments (customer email, amount, order reference; card details go straight to Stripe), bakery payment accounts (owner email, business name, country) and CakeWise subscriptions (owner email and name).
• Resend: email delivery (recipient name and email and the message, such as order details, invoices, payment links, reminders and account emails).
• xAI, with Google as a backup, through our AI provider: the bakery chat assistant receives everything a customer types in the chat, which can include their name, email, phone and order details, plus the bakery’s menu and policies. Inspiration photos are not sent.
• Google, through our AI provider: receipt photos when an owner taps Read receipt, to find the vendor, date and total. This happens only after the owner taps Allow on a one-time prompt; owners who choose Not now can still enter expenses by hand, and can turn it off any time in Settings → Receipt reading, after which no further photos are sent.
• OpenAI, through our AI provider: questions typed into the CakeWise help chat on our website.
• Google Fonts and Google Maps (when a bakery adds a map): the visitor’s IP address and browser details, sent by the browser to load fonts and maps.
• Hosting and database providers: store and serve all of the above.

Deleting your account

Bakery owners and team members can delete their account at any time in Settings → Delete account, after re-entering their password. The bakery’s website goes offline straight away, and the account is permanently deleted after 30 days. You can cancel until then by signing back in. If you are a bakery’s only owner, its website, menu, customer list, chats, appointments, emails and photos are deleted. Team members only lose their own login.

What we keep after deletion

To meet tax and accounting rules, order and payment records (order numbers, dates, items, amounts, taxes and payments) and expense, bill and mileage records are kept for at least 7 years after deletion. Customer names, contact details, notes and photos are removed from those records. A bakery’s own Stripe account and its payment history stay with Stripe under Stripe’s policies.

Privacy requests: support@cakewise.app