Privacy Policy

1. Information we collect

• Email address (when signing up with email)
• Name and profile picture (when signing in with Google or Apple)
• Apple ID or Google account identifier

• Your device's location while using the App, to show nearby cafés on the map and power the fog-of-war discovery feature
• We only collect location data when the App is in use ("when in use" permission)

• Café reviews and ratings you submit
• Photos you upload of cafés
• Your list of favourite cafés

• Referral codes you generate or use
• Number of invites sent

• Cafés you have visited or reviewed
• Map areas you have explored (fog-of-war reveal history)
• Beans (in-app reward points) balance and history

2. How we use your information

• To create and manage your account
• To display nearby cafés and personalise the map experience
• To save your reviews, favourites, and progress
• To process referral rewards (beans)
• To send important notifications about the App
• To improve the App's features and performance
• To comply with legal obligations

3. Third-party services

We use the following third-party services which may collect or process your data:

• Supabase — database, authentication, and file storage (servers located in the United States)
• Mapbox — map rendering and location services
• Google Sign-In — optional authentication method
• Apple Sign-In — optional authentication method
• Google Places API — café location data

Each third-party service has its own privacy policy governing its use of your information.

4. Data storage and security

Your data is stored securely on Supabase servers. We implement industry-standard security measures including encrypted connections (HTTPS/TLS) and secure authentication tokens.

While we strive to protect your personal information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

5. Location data

CafeCollective uses your device location solely to:

• Show cafés near you on the map
• Reveal the fog-of-war as you explore areas
• Sort café recommendations by distance

We do not sell, share, or use your location data for advertising purposes. Location data is not stored on our servers — it is processed on your device in real time.

6. Invite-only access

CafeCollective is an invite-only platform. Access requires a valid referral code. By accepting an invitation, you agree to this Privacy Policy. Your referral activity (codes sent and received) is recorded to process reward points.

7. Data retention

We retain your personal data for as long as your account is active. If you delete your account, your personal data (including reviews, profile information, and location history) will be permanently deleted within 30 days.

8. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for location access at any time via your device settings

To exercise any of these rights, please contact us at the email address below.

9. Children's privacy

CafeCollective is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact us

If you have any questions about this Privacy Policy, please contact us at: