Last updated: 27 March 2026
Your Privacy at a Glance
Qaalab stores your designs, cart, and orders on your device. Data only leaves your device when you use the map or address search at checkout — your location and IP are then sent to OpenStreetMap to find your address — and when map and font assets load from public CDNs, which receive your IP.
What Data We Use
Cake Designs & Preferences
Your cake customisations, favourites, cart items, and settings are stored entirely on your device using local storage. Nothing is sent to our servers.
Camera Access
If you choose to upload an edible image for your cake, the app requests camera or photo library access. Images are processed locally and are not uploaded to any server.
Location Data
Location access is requested only to help set your delivery address when placing an order. Your location is not tracked, stored, or shared.
Motion & Gyroscope
The app uses device motion sensors to create a subtle 3D parallax effect on the cake preview. This data is processed in real-time and never stored or transmitted.
What We Do NOT Collect
- No personal identification information
- No email addresses or phone numbers (unless you enter them for orders)
- No browsing history or usage analytics sent to third parties
- No advertising identifiers or tracking pixels
- No cookies for cross-site tracking
Third-Party Services
Qaalab uses no third-party analytics, advertising, or cross-site tracking. Anonymous usage statistics are stored on your device only and never uploaded. The only third parties that receive any data are the map and asset services used at checkout when you choose to set a delivery location:
- OpenStreetMap — when you tap "Find my location" or use the map, your approximate or precise location and IP address are sent to OpenStreetMap (map tiles) and its Nominatim service (to look up your address). This happens only at your request.
- unpkg — the map (Leaflet) library loads from the unpkg CDN, which therefore receives your IP address. Display fonts and 3D assets are bundled in the app, so no other CDN is contacted.
No personal data is sent to these services beyond what is technically required (location for geocoding, IP for content delivery). When online ordering features are introduced in future versions, this policy will be updated accordingly.
Data Sharing
When you share a cake design (via screenshot or link), you are using your device's native share sheet. Qaalab does not intercept, store, or process shared content.
When you place an order, your order details and delivery information will be shared only with the assigned bakery for fulfillment purposes.
Children's Privacy
Qaalab does not knowingly collect personal information from children under 13. The app's cake design features can be used by anyone without providing personal data.
Changes to This Policy
We may update this privacy policy as new features are added. Changes will be reflected on this page with an updated date. Continued use of the app constitutes acceptance of the updated policy.
Contact Us
If you have questions about this privacy policy, please contact us at:
Email: support@qaalab.com