‹privacy policy

Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains how Cappd ("we", "us", "our") collects, uses, and protects your information when you use the Cappd application and website (the "Service").

1. Information We Collect

Account information: When you sign up, we collect your email address, username, display name, and password (handled securely via our authentication provider, Supabase — we never see or store your password in plain text).

Profile information you provide: Bio, avatar/profile photo, and location, if you choose to add them.

Content you create: Photos, ratings, captions, comments, and check-ins you post through the Service.

Location data: When you check in at a cafe, we collect the location associated with that check-in so it can appear on your personal map and the cafe's page. You control what's visible to others through your privacy settings.

Usage data: Basic information about how you use the app — such as pages visited and actions taken — to help us understand what's working and fix bugs.

We do not collect more than we need to run the Service, and we do not sell your personal information to third parties.

2. How We Use Your Information

We use your information to:

  • Create and manage your account
  • Operate core features (check-ins, feed, map, likes, comments, leaderboards)
  • Show your content to the followers and audience you choose
  • Improve the Service and fix issues
  • Communicate with you about your account or updates to the Service (you can opt out of non-essential communications)

3. Who We Share Information With

We don't sell your data. We do share it with the third-party services that power Cappd, strictly to operate the app:

  • Supabase — hosts our database, handles authentication, and stores uploaded photos
  • Mapbox — powers map display and cafe search
  • Resend — delivers account emails (like signup confirmation and password reset)
  • Vercel — hosts the application itself

These providers process data on our behalf under their own security and privacy practices, and only to the extent needed to provide their service to us.

We may also disclose information if required by law, or to protect the rights, safety, or property of Cappd or its users.

4. Your Content and Visibility

Your posts, ratings, and check-ins are visible according to your account's privacy settings (public or followers-only, where applicable). Your profile information (username, avatar, bio) is visible to other users by default, since Cappd is a social app built around sharing.

5. Your Rights and Choices

You can:

  • Access and update your profile information at any time in the app's settings
  • Delete individual posts, comments, or check-ins
  • Download a copy of your data at any time from Settings → Account → Your Data
  • Deactivate your account temporarily (reversible by logging back in) or delete it permanently — both from Settings → Account

Permanently deleting your account removes your posts, comments, likes, follows, and profile information from the Service. Because of how our infrastructure is set up, the underlying login credential (email and password) may remain dormant rather than fully erased — contact us if you'd like that removed as well.

If you're in Australia, these rights are consistent with the Australian Privacy Principles under the Privacy Act 1988. If you're located elsewhere, you may have additional rights under your local law (for example, the GDPR if you're in the EU/UK).

6. Data Security

We take reasonable steps to protect your information, including relying on Supabase's security infrastructure for authentication and data storage. No system is completely secure, and we can't guarantee absolute security of information transmitted to the Service.

7. Data Retention

We retain your information for as long as your account is active. If you delete your account, we'll delete your personal data within a reasonable period, except where we're required to retain it for legal reasons.

8. Children's Privacy

Cappd is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we'll remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify users of material changes through the app or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

Questions about this Privacy Policy or your data? Reach out at contact@drinkcappd.com.