Legal
Privacy Policy
Effective date: April 1, 2026 · Operated by Raven Studios LLC
Your privacy matters to us. This Policy explains what information CoffeeVibes collects, how we use it, and the choices you have. We aim to be straightforward: no vague language, no surprises.
1. Overview
Raven Studios LLC (“Raven Studios,” “we,” “us,” or “our”) operates CoffeeVibes. This Privacy Policy applies to the CoffeeVibes mobile app, website at coffeevibes.app, and all related services. It does not apply to third-party services linked from the App.
By using CoffeeVibes you consent to the practices described in this Policy. If you do not agree, please do not use the App.
2. Information We Collect
Information you provide
- Account information: Display name, email address, and profile photo, provided when you sign in with Google, Apple, or a magic link.
- Profile preferences: Home city, favorite drinks, and vibe preferences you set during onboarding or in settings.
- User content: Check-ins, drink ratings, reviews, and crawl data you submit.
- Communications: Messages you send to our support team.
Information collected automatically
- Location data: Approximate device location (“when-in-use” permission only) used to find nearby shops and validate check-in geofences. We never request background or “always-on” location access.
- Usage data: Features used, screens viewed, and interactions within the App, collected via Google Analytics in anonymized form.
- Device information: Device model, operating system version, app version, and unique device identifiers used for push notifications and debugging.
- Push notification tokens: Device tokens used to deliver notifications you have opted into.
- Log data: IP address, crash reports, and error logs used to diagnose technical issues.
Information we do not collect
- Passwords. We use OAuth (Google, Apple) and magic links only.
- Precise GPS coordinates stored long-term. Location is used in real time for proximity queries and is not persisted beyond the session.
- Payment information. Subscriptions are processed entirely by Apple or Google.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the App and its features
- Personalize your discovery feed and shop recommendations
- Calculate and display real-time shop busyness from aggregated, anonymized check-in data
- Enable social features including coffee crawls and meet-ups
- Send push notifications you have explicitly opted into (crawl updates, friend activity, drink drops)
- Respond to your support requests and communications
- Detect, investigate, and prevent fraudulent or prohibited activity
- Comply with legal obligations
We do not use your data for ad targeting. We do not build advertising profiles. We do not sell your data.
5. Data Storage & Security
Your data is stored on Supabase (PostgreSQL) hosted in the United States, protected by row-level security (RLS) policies that enforce per-user data access at the database layer. Authentication tokens are stored in iOS Keychain or Android Keystore (encrypted, hardware-backed secure storage), never in unencrypted storage.
We use HTTPS/TLS for all data in transit. Access to production systems is restricted to authorized personnel only. We conduct periodic security reviews of our infrastructure and policies.
No method of transmission over the internet or electronic storage is 100% secure. While we take security seriously and implement industry-standard safeguards, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we delete your personal profile data within 30 days. Some data may be retained longer where required by law or for legitimate business purposes (such as fraud prevention logs), after which it is deleted or anonymized.
Aggregated, anonymized analytics data (such as total check-in counts per shop) is not linked to individual users and may be retained indefinitely.
7. Third-Party Services
We use the following third-party services to operate CoffeeVibes:
| Service | Purpose |
|---|---|
| Supabase | Database, authentication, and real-time features |
| Cloudflare | CDN, DDoS protection, and media delivery |
| Foursquare Places | Coffee shop data (names, addresses, categories) |
| Google / Apple | OAuth sign-in; subject to their own privacy policies |
| RevenueCat | Subscription management (no payment data) |
| Expo / APNs / FCM | Push notification delivery |
| Google Analytics | Anonymized website analytics (pages visited, session data, traffic source) |
Each provider has their own privacy policy governing their use of data. We encourage you to review them.
8. Your Rights & Choices
You have the following controls over your data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update your profile information at any time in the App settings.
- Deletion: Delete your account and all associated personal data through Settings → Account → Delete Account, or by emailing hello@coffeevibes.app.
- Push notifications: Opt out at any time via your device notification settings or within the App.
- Location: Revoke location permission at any time via your device settings. Core discovery features require location; social features (meet-ups, check-ins) will be limited without it.
- Analytics opt-out: You can opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on.
To exercise any of these rights, contact us at hello@coffeevibes.app. We will respond within 30 days.
9. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- The right to know what personal information we collect, use, and disclose
- The right to delete personal information we have collected from you
- The right to correct inaccurate personal information
- The right to opt out of the “sale” or “sharing” of personal information — we do not sell or share your personal information for advertising purposes
- The right to non-discrimination for exercising your privacy rights
To submit a California privacy request, contact us at hello@coffeevibes.appwith “California Privacy Request” in the subject line.
10. Children's Privacy
CoffeeVibes is not directed at children under 13 and we do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at hello@coffeevibes.app.
11. Changes to This Policy
We may update this Privacy Policy periodically. When we make material changes, we will update the effective date at the top of this page and notify you through the App or via email. Your continued use of CoffeeVibes after changes are posted constitutes your acceptance of the updated Policy.