PushForCoffee is built to hold as little about you as possible. There are no accounts, no email addresses, no passwords, and no location tracking.
No email address. No phone number. No password. No contacts. No location. No payment information of any kind. No third-party analytics or advertising SDKs.
Your identity is the app installation on your device, not an account. If you delete the app without using your recovery code, that identity and everything attached to it is gone. Your recovery code is the only way to move to a new phone or return after a reinstall.
Notifications are delivered through Apple Push Notification service and Firebase Cloud Messaging. Those services necessarily see the message we send to your device. We send an identifier rather than names or orders, so the contents of a round are fetched by the app rather than carried in the notification.
You can turn notifications off in the app or in your phone's settings at any time. The app still works without them.
Other members of a team you have joined can see your display name, your order when you respond to a round, and the tally if that team has it switched on. Nobody outside your teams can see anything. We do not sell, rent, or share your information with anyone, and we do not use it for advertising.
Data is held in a Supabase database. Some processing may occur on servers outside Australia. By using the app you consent to that transfer.
Push tokens are deleted when you opt out and when Apple or Google report them as dead. Round history older than 90 days is deleted automatically. Tally rows older than 30 days stop being counted and are deleted after 90.
The app isn't directed at children and holds nothing that would identify one.
If this policy changes materially, the app will tell you before the change takes effect.
Questions, complaints, or deletion requests: privacy@pushforcoffee.com. If you're in Australia and unhappy with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.