01Overview
Cupdin is a social log for cafe visits — you record where you went, what you had, and (optionally) who with. This policy covers the personal data the Cupdin app collects, why we collect it, who can see it, and how you can control or delete it.
We built Cupdin to run on as little personal data as the product needs. There's no ad network reading your feed, and we don't sell your data — full stop.
02Data we collect
Everything below is either data you provide directly or data generated by using the app's features.
Category
What it includes
Why we collect it
Account info
Name, email address, profile photo, and your two-letter avatar initials, via Supabase authentication
To create and secure your account, and identify you to other users
Visit logs
Cafe selected, items ordered, notes, companions tagged, and a public/private visibility setting
This is the core content of the app — what you post to your feed
Photos
Any photo you attach to a visit log, selected via your device's photo library
To show a photo alongside your log entry, stored in Supabase Storage
City / location
The city you set on your profile (e.g. Hyderabad) — not continuous or background GPS tracking
To show you the right city feed and local cafes
Social graph
Who you follow, who follows you, blocked users, and companions tagged on a visit
To power your Following feed and friend-tagging features
Usage & device data
App version, crash logs, and basic device info
To diagnose bugs and keep the app stable
We don't collect payment information — Cupdin is free and has no in-app purchases at this time.
03How we use it
- To run the feed. Your public logs are shown to other users in your city's feed; private logs are shown only to people you've tagged or who follow you, per the visibility you chose.
- To power your profile. Visit counts, your loved-cafes ranking, and your 6-week activity chart are all computed from your own logged visits.
- To connect you with friends. Follower/following relationships and companion-tagging use your social graph data.
- To keep the app working and safe. Crash reports and moderation tools (like blocking and reporting) use account and usage data.
- To contact you when needed. Account-related emails only — we don't send marketing email.
04Sharing & visibility
Cupdin is a social app, so some of what you post is designed to be seen by others:
- Public logs are visible to anyone using the app in your city's feed, along with your name, avatar, and any tagged companions.
- Private logs are visible only to your followers/friends, per the in-app visibility toggle.
- Your profile (name, avatar, stats, loved cafes) is visible to other users of the app.
We do not sell personal data to advertisers or data brokers, and we don't share it with third parties for their own marketing purposes.
We use the following service providers to operate Cupdin, each bound to process data only on our behalf:
- Supabase — authentication, database, and file storage for photos and app data.
We may disclose limited data if required by law, to enforce our Terms & Conditions, or to protect the safety of our users.
05Storage & security
Your data is stored on Supabase's managed infrastructure with encryption in transit. We restrict internal access to what's needed to operate the app, and rely on Supabase's row-level security to keep private logs private.
No system is perfectly secure, and we can't guarantee absolute security — but we take reasonable, industry-standard measures to protect your information.
06Your choices
- Edit or delete a log any time from your profile.
- Switch a log's visibility between public and private when you post it.
- Block or report another user directly from their profile or a log of theirs.
- Control photo access through your device's OS-level permission prompt — Cupdin only requests your photo library when you choose to add a photo.
- Delete your account by emailing us at hello@cupdin.com; we'll remove your account and personal data, aside from what we're required to retain (see Retention below).
07Children's privacy
Cupdin is not directed at children under 13, and we don't knowingly collect personal data from anyone under that age. If you believe a child has created an account, contact us and we'll remove it.
08Retention & deletion
We keep your account and log data for as long as your account is active. When you delete your account, we remove your personal data and posted content within 30 days, except where we're legally required to retain records (for example, to resolve disputes or comply with a legal obligation) or where content has been cached elsewhere by other users before deletion.
09Changes to this policy
If we make a material change to this policy, we'll update the effective date above and, where appropriate, notify you in the app. Continuing to use Cupdin after a change means you accept the updated policy.