Legal
Privacy policy
Repunch is run by Bold Tech Labs FZCO, Dubai, United Arab Emirates (“we”, “us”). This page explains what we collect on repunch.app, why, and what you can ask us to do with it. We follow the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, for visitors in the EU/UK, the GDPR.
What we collect
When you join the waitlist: your email address, and — if you tell us — the café you want on Repunch first. We also store which page you signed up on, the campaign that brought you (UTM tags and the Meta click id, if present), the country your request came from, and the time.
When café owners click “Join the pilot” or “Claim your café”: you leave our site for a form hosted by our form provider. We pass along which button you clicked and the campaign tags so we know which outreach worked. What you enter there is covered by this policy too.
When you browse: cookieless, aggregate statistics (pages viewed, referrer, device type, country). These do not identify you and use no cookies.
Only if you allow it: the Meta Pixel, which sets a cookie so we can see which ad brought you here. It is off until you press “Allow” in the banner, and you can change your mind by clearing site data.
Why we use it
- To send you your first card and a short note when we open (legal basis: your consent when you sign up).
- To see which cafés people want and which ads and messages work, so we can decide where to launch (legitimate interest; aggregate only).
- To keep the form free of spam and abuse (legitimate interest).
We do not sell your data, and we don’t use it for anything unrelated to launching Repunch.
Who processes it for us
| Provider | What for | Where |
|---|---|---|
| Cloudflare | Hosting, spam protection (Turnstile), cookieless analytics | Global edge network |
| Airtable | Stores waitlist sign-ups | United States |
| Plausible Analytics | Cookieless product analytics | European Union |
| Meta Platforms | Ad measurement — only with your consent | Global |
| Resend | Sends the waitlist confirmation and launch emails | United States |
| Tally / Typeform | Café owner form | European Union |
Where data leaves the UAE we rely on the providers’ standard contractual protections.
How long we keep it
Waitlist data is kept until we launch in your area and for 12 months after, then deleted unless you’ve become a Repunch user. Analytics are kept in aggregate.
Your rights
You can ask to see, correct, export or delete your data, or withdraw consent at any time. Email hello@repunch.app from the address you signed up with and we’ll do it within 30 days. You can also complain to the UAE Data Office.
Changes
If we change this policy we’ll update the date at the top. Material changes will be emailed to people on the waitlist.