security & data

Your customers trust you. You can trust us with them.

Shops put their regulars' names, numbers and purchases on Vibecheckqr. Here's exactly how we keep that safe — in plain words.

Each shop's data is walled off

Every request is checked by the database itself, not just the app. A shop owner and their team can only ever read their own customers, bills and orders — nobody else's.

No passwords to steal

Owners sign in with a one-time code sent to their email. There are no passwords stored anywhere.

Stored in India

Data lives on Supabase in the Mumbai region, encrypted at rest and in transit (HTTPS everywhere).

Customer numbers stay private

Phone numbers are never shown on a shop's public page. Reviews show a first name only. Customers only share what the form asks, with a clear note at check-in.

We never touch the money

UPI payments go straight from the customer to the shop. We don't store cards, UPI PINs or bank details.

Abuse limits

Reviews, orders, check-ins and queue tokens are rate-limited per device, so nobody can spam a shop with fake reviews or orders.

Prices checked on our side

Order totals, discounts and ticket stock are calculated by the server — a customer can't change a price from their phone.

Plans can't be faked

Only our admin can change a shop's plan. Owners can edit their own content but never their own billing status.

Backups

The database is backed up every week, so a mistake or outage doesn’t lose a shop’s history.

Your rights (DPDP Act 2023)

Shops own their data. They can export it or ask us to delete it at any time; we delete within 30 days except records we must keep by law.

Customers can ask a shop — or us — to see, correct or delete their details. We never sell data or share one shop's customers with another.

Read the full privacy policy and terms. Found a security issue? Please tell us and we'll fix it fast.