Privacy Policy

Overview

Custom Case Kiosk (“CCK”) is operated by Balaji Trading, Inc. This policy covers how we collect, use, and protect information when you use our kiosks, our website, our online checkout and receipt pages (hosted at pay.balajibrands.com and operated by our Balaji Pay payment service), our mobile apps, or our partner forms.

Information we collect

• Order data. When you print a case at a kiosk or order online, we record the order number, kiosk location, items ordered, amounts paid, and any promo code applied.
• Payment data. Payments are processed by our payment processors (such as Square). Your card details are entered directly with the processor — we never see or store your full card number. The processor sends us back metadata about the payment, which we keep with the order: the card brand, its last four digits, its expiry month and year, the card type and how it was entered, the processor’s verification results for the security code and the billing address, its risk assessment of the payment, the processing fee it charged, the payment status, and the processor’s own receipt identifiers. Never the full card number.
• Receipt contact details. At checkout you can optionally provide an email address or mobile number to receive your receipt. We use these only to deliver receipts and order updates for that purchase — never for marketing.
• Uploaded designs. Photos and designs you upload are processed for printing. Uploads are screened by automated content-moderation tools and, where flagged, reviewed by our staff before printing.
• Shipping details. If you choose ship-to-home (where offered), we collect the recipient name and delivery address. Addresses are stored encrypted and used only to fulfill the delivery.
• Store assistance. If a store team member helped you and you select their name at checkout, we record that selection for the store’s records.
• Form submissions. Contact, partner, and demo forms collect your name, email, company, and message.
• Usage analytics. Standard web analytics (page views, performance metrics) via Vercel Analytics on the website, and error telemetry on our checkout pages so we can fix problems. We don’t use advertising trackers.

How we use it

Order and payment data fulfills your purchase, delivers your receipt, and supports reprints under warranty. Uploaded designs are used to produce your case and for quality assurance. Contact details deliver the receipt you asked for. Form data routes to the appropriate CCK team. Analytics data is aggregated and used to improve the service. We also use order records for fraud prevention, dispute resolution, and legal compliance.

Text messages & email

You are asked for a mobile number at checkout only if you want a text receipt, and we use it for that order alone — the receipt and updates about that order. It is a per-order choice, not a subscription: a checkout number is not added to any marketing list, and we don’t send marketing to checkout contact details. Receipt emails are likewise transactional. Message and data rates may apply. Every message we send carries “Reply STOP to opt out”; replying STOP tells your carrier and our messaging provider to stop delivering texts from that number to you. If you separately opt in to marketing texts from us, replying STOP to those removes you from that list.

Sharing

We share information with service providers who help us run the service: payment processors (to take payment), our kiosk production platform (to print your order), messaging and email providers (to deliver receipts and form replies), cloud hosting and storage providers, and automated image-moderation services. Retail partners that host a kiosk can see order and fulfillment information for their own location only. Providers may use your information only to provide services to us. We do not sell personal data, and we do not share it for cross-context behavioral advertising.

Retention

Online receipt pages remain available for about 180 days after purchase. Underlying transaction records are kept as long as needed for accounting, warranty, dispute, and legal purposes. Uploaded designs are held while needed for production, quality assurance, and reprint support. Checkout pages that are never completed expire automatically within about a day.

Kiosk production photos

Kiosks contain an internal camera pointed at the print bed. It photographs your case automatically while the case is being printed, so the resulting production photos are linked to your order. We use them to confirm a print came out correctly, to document a failed or partial print, and to resolve order disputes and warranty reprints — not for marketing, and not for facial recognition. The camera is inside the machine and is not a customer-facing or security camera. Production photos are held by our kiosk production platform and are available to us and to the retail partner hosting that kiosk for those purposes; they are kept while needed to support the order.

CCK Fleet app (operators & merchant partners)

The CCK Fleet app (iOS and Android) is a sign-in-gated tool for CCK’s operators and merchant partners; accounts are provisioned by CCK. Data collected via the app is linked to your account:

• Name. Your display name, which you can edit in the app, shown to your team on shared records.
• Email address. Used to sign in.
• Phone number (optional). Used for SMS codes and account recovery.
• Account identifier. An ID we assign to your account, used to associate your activity within the app.
• Device push token. Used for operational notifications such as kiosk alerts and order updates.
• Photos. Only photos a staff member chooses to take or upload to a kiosk’s gallery. Photos are re-encoded before upload, which removes location/EXIF metadata.

The app displays business and order data (orders, kiosk status, sales) CCK already holds from kiosk operations; it does not collect that from your device. The app contains no advertising, no third-party analytics, and no tracking; app data is never sold. Sign-in supports passkeys, one-time codes, and passwords; credentials are stored in platform secure storage (iOS Keychain / Android Keystore).

On iOS, delete your account in the app via My Account → Delete account; this removes the login and business records are retained per this policy. Android in-app deletion is coming in a future update — until then, and for any questions, email contact@customcasekiosk.com to request deletion.

CCK Design app (customers)

The CCK Design app (iOS and Android) lets you design a custom phone case from your own photo and order a print at a kiosk. Unlike CCK Fleet, there is no CCK sign-in and no CCK account — the app is anonymous to us. Your designs, drafts, favorites, and stickers are stored on your device. You can optionally back them up to a cloud account that is your own, never ours: on iOS, to your iCloud account’s private database; on Android, to a hidden app-data folder in your Google Drive, which you turn on yourself through Google’s own account chooser and consent screen. The Android app asks for one narrow permission, the app-data folder alone — it cannot see your other Drive files, folders, or file names — and it keeps no long-lived credential for your Google account. Either backup uses your own cloud storage, both are off until you turn them on, and CCK cannot read either one. Data collected via the app:

• Camera (optional). Used only if you scan a kiosk’s QR code to connect your session; no photo or video frame is captured, stored, or transmitted.
• Your photo. You add an image through the system photo picker, which hands the app only the images you pick — the app is never granted access to browse your photo library. The photo you choose stays on your device while you design. When you print, the finished print-ready image is uploaded to fulfill that print order. On iOS the app can write to your photo library only if you choose to save a finished design render.
• Location (optional). Used only when you tap to find kiosks near you. On iOS your coordinates stay on your device and are handled by Apple’s system location and geocoding services; they are never sent to or stored on CCK servers.
• Device push token (optional). Stored only if you turn on a back-in-stock alert for a finish; canceling the alert in the app removes it. It is not tied to a name or an account.
• Checkout session token. An anonymous token created when you check out, used only to complete that order. Card entry happens on our payment processor’s hosted page; the app never sees your card details.

If you download an additional font inside the app, that font file is fetched from Google’s public font service at the moment you tap it. The app contains no advertising and no third-party analytics or tracking, and app data is never sold. The iOS app ships with no third-party SDKs at all and never asks for tracking permission, because it does no cross-app tracking; the Android app uses Google’s own Android libraries plus three Google components for features you can see — Firebase Cloud Messaging for the back-in-stock alert, ML Kit for the kiosk QR scan, and Google Play services sign-in for the Drive backup above. Neither app carries an analytics or advertising SDK. The app may send anonymous, device-bound diagnostics (crash and performance data measured by the operating system) and anonymous usage events — which steps of the design and checkout flow are reached, keyed to a per-install random identifier — to our own servers to keep it working well. Neither carries your photos, your designs, or your location, and neither is tied to your identity, because there is none. You can turn this off in the app’s settings. Because there is no account, there is nothing to sign in to or delete. For questions about a specific order or alert, email contact@customcasekiosk.com.

Your rights

Email contact@customcasekiosk.com to request a copy of your data, correct an error, or request deletion. We respond within 30 days, and we never treat you differently for exercising these rights. California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and you may make requests through an authorized agent.

Children’s privacy

Our services are not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Updates are posted on this page with a revised “Last updated” date.

Contact

Balaji Trading, Inc. · 4850 Eucalyptus Ave, Chino, CA 91710 · contact@customcasekiosk.com