Privacy Policy
Last updated 6 September 2026
Coffee is a diary of the coffee you drink. To do that it stores what you log — the drink, the price, the place, and anything you attach to it — and syncs it so you don't lose it when you change phones. This page explains exactly what that means, in the order you'd probably ask.
Who is responsible. Coffee is made and operated by Andrei Prikhodko, an independent developer. For anything in this policy, including requests about your data, write to support@geolocoffee.com. Under the GDPR this is the data controller.
What Coffee stores
Your account
You can use Coffee as a guest, in which case the only thing identifying you is an anonymous account number generated on your device. If you create a real account — with an email address, with Apple, or with Google — Coffee also stores the email address and the name your provider gives it, plus a profile photo if you set one. If you sign in with Apple and choose to hide your email, Coffee only ever sees Apple's relay address.
Your profile also holds a home country and a base currency, so totals can be shown in one currency.
What you log
Every record you create is stored: the drink and size, the price and its currency, the date and time, an optional 1–5 rating, and an optional note in your own words. Records also carry the place — its name, street address, city, country, and its geographic coordinates. Photos you attach are stored as image files. Drink types, sizes and place kinds you invent yourself are stored too.
Where the location comes from
Coffee asks for your location only while you are using it, and only to save you typing: it reads the device's position once to suggest nearby cafés when you start a new record. You can refuse, and everything still works — you pick the place on the map by hand instead. The coordinates that end up saved are those of the place you chose, not a trail of where you have been. Coffee does not track you in the background and has no idea where you are when it is closed.
Things that never leave your phone
Which achievements you have unlocked, which celebrations you have already seen, your appearance setting, and whether you have finished the welcome screens are kept in local storage on the device. They are not uploaded and they disappear when you delete the app.
Diagnostics and usage
Coffee uses Google's Firebase Crashlytics to learn about crashes. A crash report contains the technical state of the app at the moment it failed, your device model and system version, and an installation identifier — not your name and not your records.
Coffee also uses Google Analytics for Firebase to understand how the app is used: which screens are opened, how often people come back, roughly which country they are in (estimated from the network address, not from GPS), what device and language they use. This is tied to an app-instance identifier rather than to your name. In the European Economic Area and the United Kingdom this analytics is switched off unless you agree to it, and you can change your mind at any time in the app's settings.
Why Coffee is allowed to store it
| What | Why it is lawful |
|---|---|
| Account, records, places, photos, custom catalogues | Performance of a contract — this is the app; without them there is nothing to show you. |
| Reading your device location, and access to your photo library | Your consent, given through the iOS permission prompt, withdrawable in iOS Settings. |
| Usage analytics | Your consent in the EEA and the UK. Elsewhere, legitimate interest in understanding how the app is used. |
| Crash diagnostics | Legitimate interest in the app not being broken. |
| Abuse prevention and security | Legitimate interest in keeping the service and other people's data safe. |
Who else sees it
Coffee is not sold, rented or shared for advertising. Nobody buys this data, because it is not for sale. It does pass through a small number of service providers, each doing one job:
- Google (Firebase) stores the accounts, records and photos, and runs the maintenance jobs described below. The database and the photo storage are hosted in the European Union. Analytics and crash reporting are processed by Google, which may involve transfers outside the EU under the European Commission's standard contractual clauses.
- Apple receives map, address-lookup and place-search requests when you are choosing a place, and handles Sign in with Apple if you use it. Apple states that it does not associate these map requests with your Apple Account.
- jsDelivr and Cloudflare serve the daily currency exchange rates. These requests contain no personal data — just which currency you want rates for — though, like any web request, the provider sees the network address it came from.
How long it is kept
Records stay until you delete them or delete your account. Deleting a record also deletes its photos.
Deleting your account removes everything: the profile, every record, every custom catalogue entry, and every photo file. This runs automatically, server-side, and is not reversible — so export first if you want a copy.
Guest accounts that have not been opened for twelve months are deleted automatically, along with their data. If you would like to keep what you have logged, turn your guest account into a real one in Settings.
What you can ask for
Wherever you live, you can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. If you are in the EEA or the UK, the GDPR also gives you the right to restrict or object to certain processing, to receive your data in a portable form, to withdraw a consent you have given, and to complain to your national data protection authority.
Two of these you can exercise yourself, immediately, without asking anyone: Charts → export gives you your records as a CSV file, and Settings → Account → Delete account erases everything. For anything else, write to support@geolocoffee.com and expect a reply within 30 days.
Children
Coffee is not designed for, or directed at, children under 13, and it does not knowingly collect their data. If you believe a child has created an account, write in and it will be removed.
Security
Everything travels over encrypted connections and is stored encrypted at rest by Google. Access rules on the server allow each account to read and write only its own data — including its own photo files. No system is perfect, but nothing is stored in the clear and nothing is readable by another user.
Changes
If this policy changes in a way that affects you, the date at the top changes and the app will say so before the change takes effect. Older versions are available on request.