Privacy Policy
Last updated: June 12, 2026
1. Data Controller
The data controller responsible for your personal data is:
2. What Data We Collect
Account data
When you register, we collect your email address. We do not collect your name, phone number, or any other personal information. Your password is hashed and never stored in plain text.
Usage data (analytics)
We use Google Analytics 4 to understand how the app is used. It collects data such as pages visited, session duration, device type, and approximate location derived from your IP address. This data is processed by Google and is subject to Google's Privacy Policy. Analytics are only enabled if you give consent.
User-generated content
Reviews and coffee suggestions you submit are stored and associated with your account.
3. Purpose and Legal Basis
We process your email address to provide and secure your account (legal basis: performance of a contract, Article 6(1)(b) GDPR).
We process analytics data only with your explicit consent (legal basis: consent, Article 6(1)(a) GDPR). You can withdraw your consent at any time using the controls below.
4. Data Storage and Third Parties
Your account data is stored by Supabase, Inc., our database and authentication provider. Supabase stores data on servers located in the European Union. For more information, see supabase.com/privacy.
If you choose to sign in with Google or Apple, those providers may collect and process data according to their own privacy policies. We only receive the email address associated with your account from these providers.
Analytics data is processed by Google LLC via Google Analytics 4. Google may transfer data to servers outside the EU. No data is shared with advertising networks or sold to third parties by Cuppd.
5. Data Retention
Your account data is retained for as long as your account exists. When you delete your account, your email address and all associated data are permanently deleted immediately. This action cannot be undone.
6. Cookies
Strictly necessary: We use a single session cookie to keep you logged in. This cookie is required for the service to function and does not require consent.
Analytics (optional):If you consent, Google Analytics 4 sets cookies to measure usage. These cookies are only placed after you click "Accept" in the cookie banner. You can withdraw consent at any time below.
7. Your Rights Under GDPR
As a user in the EU, you have the following rights under the General Data Protection Regulation:
- Access— request a copy of the data we hold about you
- Rectification— ask us to correct inaccurate data
- Erasure— request deletion of your personal data
- Restriction— ask us to limit processing in certain circumstances
- Portability— receive your data in a portable format
- Objection— object to processing based on legitimate interests
To exercise any of these rights, contact us. You also have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) at naih.hu.
8. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by displaying a notice within the service. The date at the top of this page indicates when the policy was last revised.
9. Contact
For any questions or requests regarding this Privacy Policy, please reach out via our contact form.