Privacy Policy

1. Who is responsible for your information

Kaihzan-Nixxo Jamilla, based in the Philippines, provides Cafiqo and is responsible for the personal information described in this Policy (referred to as “Cafiqo,” “we,” “us,” or “our”). This Policy applies to the Cafiqo mobile app, website, and related support.

2. Information we collect

Account and profile information

During onboarding, Cafiqo creates a temporary account and internal user ID before the subscription screen is displayed. This allows a subscription purchased before registration to remain associated with the same account when registration is completed. After you purchase or dismiss the subscription screen, an email-and-password account is required for both free-tier and Cafiqo Pro users. We collect your email address, display name, profile photo, internal user ID, password authentication records, account status, preferences, and support or feature-suggestion messages. Passwords are handled through our authentication provider; we do not receive them in readable form.

Wellness and preference information

Goals, body weight, weight and beverage units, caffeine sensitivity, daily limit, usual caffeine intake, bedtime, bedtime caffeine target, appearance settings, quiet hours, and notification preferences.

Drink and activity information

Drinks logged, beverage type, caffeine amount, serving size, time and date, drink photos and processed images, and estimates or insights derived from this information, such as active caffeine, clearance time, and possible sleep impact.

Subscription information

Subscription status, product and entitlement information, trial status, purchase and expiration dates, App Store environment, and transaction-related identifiers. If you purchase before email registration, we first associate subscription access with the temporary internal account identifier created during onboarding. Registration converts that same identifier into your registered Cafiqo account. Apple processes your payment credentials; Cafiqo does not receive your full card details.

Technical and usage information

App and device information, operating system, app version, device and account identifiers, IP address, network status, approximate regional context derived from device language or locale, feature interactions, diagnostics, errors, and session recordings. Session recordings are configured to mask text and images. Cafiqo does not request precise or approximate device location.

Device access

With your permission, Cafiqo accesses the camera or photo library for drink and profile images and sends notifications, reminders, widgets, and Live Activities. You can manage permissions in iOS Settings. Cafiqo does not access HealthKit, contacts, microphone, Bluetooth, or motion data.

3. How we use information

• create, authenticate, sync, secure, and delete accounts;
• store drink history and personalize caffeine estimates;
• provide Snap AI, Insights, widgets, Live Activities, and reminders;
• manage Cafiqo Pro access and subscription status;
• respond to support and feature suggestions;
• understand usage, diagnose errors, prevent abuse, and improve Cafiqo;
• comply with law and enforce our Terms.

4. Legal bases for processing

Where applicable law requires a legal basis, we process information to perform our contract with you, with your consent (including device permissions), for our legitimate interests in operating, securing, supporting, and improving Cafiqo, and to comply with legal obligations. You may withdraw consent where processing relies on it, without affecting earlier lawful processing.

5. Service providers and disclosures

We disclose information only as needed to the following recipients:

• Supabase provides authentication, database, file storage, synchronization, and account-deletion infrastructure.
• PostHog provides product analytics, diagnostics, and masked session replay. It may receive identifiers, contact and profile attributes, wellness preferences, device information, and usage events.
• Superwall provides paywall and subscription management and may receive user ID, name, email, and entitlement or subscription information.
• RevenueCat validates purchases and manages subscription entitlements. It may receive your internal Cafiqo user ID, product and entitlement information, transaction identifiers, purchase status, and related App Store transaction information.
• Apple distributes the app, processes purchases, and supports system features such as notifications, widgets, and Live Activities under Apple’s own privacy terms.
• xAI processes a compressed drink photo, relevant user-supplied description or correction, and limited regional context when you use Snap AI. This information is sent to return the requested beverage analysis and is not permitted by us to be used for model training.
• Vercel hosts and measures use of the Cafiqo website and may process ordinary web request and performance information.

We may also disclose information when required by law, to protect rights and safety, to investigate abuse, or as part of a business transaction subject to appropriate safeguards.

7. Retention

• Active account data is retained while your account exists.
• Session recordings are retained for up to 30 days.
• Identifiable analytics are retained for up to 12 months.
• Support and feature-suggestion records are retained for up to 24 months.
• Purchase, transaction, fraud-prevention, and security records are retained as legally or operationally required.

When you delete your account, we delete account data and uploaded media under our direct control. Service providers may retain limited analytics, transaction, security, or backup records for their established retention periods or where legally required. We may retain de-identified information that can no longer reasonably be linked to you.

8. International processing

Cafiqo is provided from the Philippines and its service providers may process information in other countries. Those countries may have different privacy laws. Where required, we rely on contractual and other lawful safeguards for international transfers.

9. Security

We use reasonable technical and organizational safeguards designed to protect information, including authenticated access and provider security controls. No storage or transmission system is completely secure, so we cannot guarantee absolute security.

10. Your choices and privacy rights

You can update profile information and notification settings in the app, control device permissions in iOS Settings, cancel Cafiqo Pro in Apple subscription settings, and delete your account in Cafiqo. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or information about disclosures, and to complain to a privacy regulator. We do not discriminate against you for exercising applicable privacy rights.

Send a request to support@cafiqo.app. We may verify your identity before acting and will respond within the period required by applicable law. You may also use our account-deletion instructions.

11. Children and teenagers

Cafiqo is not intended for children under 13, and we do not knowingly collect their personal information. Users under the age of legal majority must have a parent or guardian review the Terms where required. If local law requires parental consent for an account-based service, a young person may not use those features without that consent. Contact us if you believe a child under 13 provided personal information, and we will investigate and delete it as appropriate.

12. Changes to this Policy

We may update this Policy as Cafiqo or the law changes. We will post the updated version with a new effective date and provide additional notice when required. Material changes will apply prospectively.

13. Contact us

For privacy requests or questions, contact Kaihzan-Nixxo Jamilla at support@cafiqo.app, Philippines.