Privacy Policy — CakeManager

1. General Provisions

This Privacy Policy (hereinafter — the "Policy") defines the procedure for processing personal data of users of the CakeManager mobile application (hereinafter — the "App", "Service") and constitutes a public offer.

By using the App, you agree to the terms of this Policy.

2. Data Controller

The data controller is the owner of the CakeManager Service.

Contact email: support@cakemanager.com

2.1. Locations of Personal Data Storage and Processing

User authentication (login, registration, email verification) is handled using Firebase Authentication provided by Google. This processes: email address, password hash, user ID (UID), display name, email verification status.

Main application data (user profile, clients, orders, recipes, ingredients, transactions, finances, and other data entered by the user) is stored and processed exclusively on the Company's servers located in the Russian Federation (VPS provider BeGet.com, RF jurisdiction, compliant with 152-FZ requirements).

Firebase Authentication may process data in Google's infrastructure (including possible cross-border transfers under Standard Contractual Clauses and RF legal requirements). The Company does not store user passwords in plaintext — they are handled exclusively by Google within Firebase Authentication.

3. Categories of Personal Data We Process

Your data (as a confectioner):

• Name and surname
• Email address
• Phone number
• TIN / Tax ID (for self-employed and individual entrepreneurs)
• Authentication data

Your clients' data:

• Names and contact details (phone, delivery address)
• Birth dates, preferences, and other information necessary to fulfill orders
• Order history and payment information

Technical data:

• Device and operating system information
• IP address and session data
• Usage analytics data

4. Purposes of Data Processing

• Providing full functionality of the application (order tracking, client database, calculations, document generation)
• Automation of business processes
• Technical support and important notifications
• Service improvement and analytics
• Security and fraud prevention

5. Legal Basis for Processing

Processing is carried out on the basis of:

• Consent of the data subject
• Contract with the user
• Legitimate interests of the operator (service improvement, security)

6. Your Responsibility for Client Data

As a user (confectioner), you are solely responsible for:

• Obtaining consent from your clients for the processing of their personal data
• The legality of collecting and entering client data into the CakeManager system
• Compliance with the rights of data subjects (your clients)

CakeManager acts as a data processor on your behalf and provides technical protection of the information.

7. Data Sharing with Third Parties

We do not sell or share your personal data with third parties, except in the following cases:

• When required by applicable law
• For user authentication via Firebase Authentication (Google) — only data necessary for the authentication service is transferred (email, password hash, UID, displayName, verification status). Google acts as a processor under a data processing agreement with the Company, using Standard Contractual Clauses for any cross-border transfers where required;
• For technical processing on the Company's backend infrastructure (VPS BeGet.com, Russian Federation) — hosting and processing of main application data;
• With your explicit consent.

Main application data (clients, orders, recipes, ingredients, finances, etc.) is never transferred to Google and is stored exclusively on the Company's servers in the Russian Federation.

8. Data Retention

Personal data is stored for the duration of your account and for 3 years after deletion (to fulfill legal obligations and resolve disputes), unless otherwise required by law.

9. Your Rights as a Data Subject

You have the right to:

• Receive information about your personal data
• Request correction, blocking, or deletion of your data
• Withdraw your consent to processing
• File a complaint with the supervisory authority

To exercise your rights, please contact us at support@cakemanager.com.

10. Data Security

We implement necessary legal, organizational, and technical measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.

11. Changes to This Policy

We may update this Policy from time to time. The current version is always available in the App and on the website. Continued use of the App after changes constitutes acceptance of the updated Policy.