Coffee meets Alcohol (“we”, “us”, or “our”) operates the Coffee meets Alcohol mobile application and this website at coffeemeetsalcohol.com. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
1. Information we collect
When you use the app, we may collect:
- Account information — email address and authentication identifiers when you sign in with Apple or Google through our authentication provider (Supabase Auth).
- Profile information — display name and taste preferences you choose during onboarding or in Settings.
- Tasting and brew records — product details (brand, origin, style, ratings, notes), timestamps, and related metadata you save in the app.
- Photos — images you capture or select for label scans, tasting records, brew logs, and share cards.
- Subscription status — purchase and entitlement information processed by Apple App Store, Google Play, and RevenueCat (we do not receive your full payment card details).
- Device permissions — the app may request access to your camera and photo library so you can scan labels and attach photos. We do not continuously track your device location; map features use product origin information you enter or we derive from labels.
2. How we use information
We use your information to:
- Provide core app features (scanning, saving, and displaying your records).
- Authenticate your account and sync your data across sessions.
- Process optional premium subscriptions and restore purchases.
- Extract structured label data using AI when you scan a product.
- Improve reliability, security, and support for the service.
3. AI label scanning
When you scan a label, photos you submit are sent to our backend and processed with Google Gemini to extract product details (for example brand, origin, and tasting notes). Enrichment may also use web search to supplement label information. Do not scan images containing sensitive personal information unrelated to the product label.
Google’s handling of data sent to its APIs is governed by Google’s terms and privacy policies. We use Gemini on Google’s paid tier where configured so prompts are not used to train Google’s models.
4. How we store and share information
- Supabase — hosts authentication, database records, file storage, and server-side functions. Data is stored in cloud infrastructure operated by Supabase.
- RevenueCat — manages in-app subscription entitlements.
- Apple / Google — process sign-in and in-app purchases under their respective privacy policies.
- OpenStreetMap Nominatim — we may send product origin text (region and country names) to geocode map coordinates. We do not send your account identifiers to this service.
Label photos you upload are stored in cloud storage associated with your account. We do not sell your personal information.
5. Data retention and deletion
We retain your data while your account is active. You can delete individual tasting or brew records in the app. You can delete your entire account from Settings; this removes your profile, records, and associated stored photos from our systems, subject to reasonable backup and legal retention requirements.
6. Your choices
- You may use the app without granting camera access, but label scanning requires photos.
- You may sign out at any time from Settings.
- You may manage or cancel subscriptions through Apple or Google account settings.
- You may contact us to request access, correction, or deletion of your data.
7. Children
The app references alcoholic beverages for personal tasting records and is intended for adults. It is not directed at children under 13 (or the applicable age in your region), and we do not knowingly collect personal information from children.
8. Security
We use industry-standard measures including encrypted transport (HTTPS) and access controls on our backend. No method of transmission or storage is completely secure; please use a strong sign-in method and keep your device updated.
9. International users
Your information may be processed in countries where our service providers operate, including the United States and other regions where Supabase, Google, Apple, Google Play, and RevenueCat maintain infrastructure.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the effective date above when we do. Continued use of the app after changes means you accept the updated policy.
11. Contact us
Questions about this Privacy Policy or your data: [email protected]