Privacy policy
Cravengo Operations is the private workplace app operated by CNG INDUSTRIES PTY LTD, trading as Crave N Go. This notice covers information handled through the staff, franchisee and headquarters app.
Information the app handles
- Your account: name, email, phone number, profile photo, sign-in identifiers, role, store assignments, approval status and work-standards acceptance.
- Work records: availability, shifts, attendance, breaks, timesheet approvals, permitted wage information, training and explanations you provide.
- Store operations: checklists, stock counts, supplier orders and conversations, tasks, incidents and the photos, videos or notes attached to them.
- Hiring: application details, resumes, contact information, experience, availability and recruitment or training notes when those features are used.
- Connected business systems: authorised store sales, delivery-platform reports, website orders and associated business or customer information needed for the connected feature.
- Security and operation: session and device identifiers, delivery or subscription status, access and error information, and information needed to prevent misuse or investigate failures. Service providers may also process network information such as IP addresses.
Why we use information
We use this information to verify access, organise shifts, record work, complete store duties, manage stock and supplier orders, deliver approved notifications, recruit and train staff, prepare business reports, keep the service secure and respond to support or privacy requests.
Only approved accounts receive store access. An invitation, registration or deletion request does not grant access to another person’s records or a shop.
Photos, location and notifications
The app requests camera or photo access for the profile and work evidence you choose or are required to submit. Some store workflows require a fresh photo. It does not perform facial recognition.
Where your shop enables an on-site attendance check, the app requests a device location reading to check proximity to the shop. Enabled foreground shift checks can assess whether you have left the shop while the app is open. Attendance records include the check result and relevant proximity information. These features do not establish continuous background location tracking.
Device permissions and enabled notification channels are controlled through the app, your browser and device settings. Denying a required permission can prevent that workflow from completing; contact your store owner for help or an appropriate alternative. Messages you explicitly send, including supplier orders, go to their chosen recipients.
Who can access information
Access depends on your role and assigned stores. Authorised store owners, managers and headquarters can access information needed for their responsibilities. Franchise businesses may be responsible for their own employment records. Ask headquarters if you need to identify the store operator responsible for your information.
We use hosting, storage, authentication and communication providers to operate the service. Depending on the features enabled, these include Sites/OpenAI and Cloudflare, ChatGPT sign-in, OneSignal, Resend and Mobile Message or Twilio. Connected business features can process information through Square, Uber Eats, DoorDash and Meta/WhatsApp when configured and authorised. A provider being listed does not mean every integration or messaging channel is active.
Suppliers receive orders and messages addressed to them. Approved report recipients receive their authorised reports. External video, review and other links are governed by those services’ own privacy practices. Service-provider processing may occur outside Australia; we do not represent that all app data remains in Australia.
We do not use app records for third-party advertising or provide an in-app sale-of-personal-data feature. Information may also need to be disclosed where required by law or to handle a genuine security, safety or legal matter.
Storage and security
The app uses encrypted connections, individual sign-in, scoped permissions and private storage for uploaded staff evidence. Local passwords are stored as derived hashes, rather than plaintext. Treat shared devices carefully and sign out when finished. No internet service can guarantee perfect security.
Keeping and deleting information
Information is kept while needed for its workplace purpose or a legitimate legal, security or recordkeeping reason. Account deletion and employment-record retention are separate: we may need to retain specific timesheets, accounting, safety or dispute records after a sign-in account is removed. Any retained information must remain restricted to its justified purpose. We review what can be removed when handling your request and explain any necessary retention.
You can request deletion of your Cravengo account and associated personal data through the account-deletion page, including if your account is pending, rejected or disabled, or you have uninstalled the app. Headquarters verifies the request and coordinates removal of the account, sign-in access, profile information and other associated data that does not need to be retained. Disabling access alone is not treated as completed deletion.
Removing a Cravengo account does not delete an external ChatGPT, Google, supplier or delivery-platform account. Recipients may retain messages already delivered to them.
Your choices and privacy requests
For access, correction, account or data deletion, or a privacy concern, email cravengomelb@gmail.com. Include the email used for your account and enough information to identify the request. Do not send passwords, verification codes or identity documents unless a necessary, secure verification process has been agreed.
We may need to confirm identity before disclosing or deleting private information. We will explain relevant next steps, any information that must be retained and the outcome. If you are unhappy with the response, reply to headquarters to request a review.
Changes to this notice
We may update this notice as the app or its processing changes. The current version will remain accessible from the app.