Privacy Policy

1. Introduction

ibeanthere is operated by an individual (the "Operator", "we", "us", or "our"). The Operator is responsible for personal information under their control and handles privacy questions at support@ibeanthere.app. This Policy describes collection, use, disclosure, and retention when you use our website and services (the "Services"). It does not waive your legal rights or replace any consent required by law. Third-party services may also process information under their own policies, as explained below.

2. Information Collected

• Personal Information: We collect the information you provide directly, such as your name, email address, username, password, and coffee preferences when you register or update your profile.
• Location Data: With your consent, we collect precise geolocation data to show you nearby cafes and to verify visits.
• Automatic Information: We collect server logs, information used to keep you signed in, and, when enabled, the events described in the Analytics section. This may include an IP address, browser information, and actions in the app. We do not set advertising or cross-site tracking cookies.

3. Public Information

Certain information you provide is public by default. Your username is always publicly visible and searchable. Content you post, such as cafe reviews, ratings, photos, and comments, are available to the public by default. We recommend that you do not use your real name as your username if you wish to remain anonymous. Any information disclosed in public areas becomes public information, and you should exercise caution before sharing.

4. How Information Is Used

We use the information we collect to: (i) provide, maintain, and improve the Services; (ii) personalize your experience and coffee recommendations; (iii) manage your account; (iv) send account, security, and support messages; (v) monitor and analyze trends and usage.

5. Disclosure of Information

We do not sell your personal information. Providers used to deliver the Services include Supabase (database, authentication, and storage), Render (backend hosting), Vercel (website hosting), Cloudflare (domain and email routing), Resend (outgoing email), PostHog (analytics), and Google Maps (place information and photos). Information disclosed depends on the feature and provider; not every provider receives every category of data. When you submit a report, what you write and the username you are signed in as are sent to us by email through Resend and are shown in the moderation screen, so that the report can be acted on. We remain responsible under applicable law for personal information processed on our behalf and must use contractual or other means to provide the protection required by law. Independent third-party websites or services may have their own purposes and policies; review those when you follow a link or use their features. This distinction does not exclude our own legal responsibilities. We may also disclose information with valid consent or where permitted or required by law, including for security, legal claims, or lawful requests from authorities.

6. Information About Others

Do not submit another person's private contact details, images, or other personal information unless you have a lawful basis and any necessary permission. Share only what is needed for the relevant feature. If information about you was submitted without authority, contact support@ibeanthere.app so we can assess correction, restriction, or removal. A user's submission does not relieve us of our own legal obligations.

7. Anti-Spam (CASL Compliance)

We will send commercial electronic messages only with consent or another basis permitted by applicable anti-spam law. Such messages will include sender identification and an unsubscribe method as required by law. Necessary account, security, or service messages may still be sent where legally permitted; they will not be used to bypass a marketing opt-out.

8. Children

The Services are not intended for use by persons under 13 years of age. We do not knowingly collect or use personal information from anyone under 13. If we become aware that we have collected personal information from a child under 13, we will make commercially reasonable efforts to delete it.

9. International Transfers

Our service providers may store or process personal information in Canada and other countries, including the United States. Foreign authorities may access information under their local laws. We remain responsible for protection required by applicable law when information is processed on our behalf and must use any legally required transfer safeguards. Contact support@ibeanthere.app for information about providers and cross-border processing. This Policy does not itself constitute consent to a transfer where separate consent is required.

10. Data Security

We use safeguards intended to protect personal information, including access controls and the security features of our hosting, authentication, and storage providers. Safeguards must be appropriate to the sensitivity of the information and applicable law. No online service or storage method can be guaranteed completely secure. If a breach occurs, we will assess it and make notifications and reports required by applicable law. Contact support@ibeanthere.app to report a suspected security issue; do not send passwords.

11. Data Retention

We retain personal information for as long as reasonably necessary for the disclosed purposes and applicable legal obligations, taking account of the type of information, account status, security needs, and legal claims. Information no longer needed should be deleted or de-identified. You can request account deletion in Settings → Delete Account. A completed deletion removes your account, coffee logs, and uploaded photos from the active app. Shared cafe, bean, and roaster records remain with your personal attribution removed. Deletion cannot be undone; if it fails partway through, follow the retry instructions or contact support. Account deletion is not a promise of immediate erasure from every backup, server log, or external analytics system. Limited records may remain for backup lifecycles, security, or legal purposes only to the extent permitted by law, and must not be kept indefinitely without a lawful need. Contact us about associated provider records or a broader erasure request. Copies independently made by others from public content may remain outside our control.

12. Your Data Rights

Your rights depend on which laws apply to the Services and your circumstances, not location alone. These may include access, correction, withdrawal of consent, deletion, portability, or an objection to certain processing, subject to legal conditions and exceptions. You can update account information or request account deletion in Settings, or contact support@ibeanthere.app for requests, including concerns about analytics linked to your account. We may reasonably verify your identity, request clarification, and explain any lawful limits on a request. We will respond within the time required by applicable law. Withdrawing consent does not make earlier lawful processing unlawful; if particular information is necessary for a feature, that feature may no longer be available. You may complain to the Office of the Privacy Commissioner of Canada or another authority with jurisdiction without first contacting us.

13. Changes to Privacy Policy

We may update this Policy as practices or legal requirements change and will revise the Last Updated date. Material changes will be brought to your attention through a prominent notice on the Services or another appropriate means. A policy update or continued use does not by itself authorize a new use of personal information where further consent is required by law.

14. Google Maps Photos

When a Google photo is displayed, we send the cafe's Place ID to Google. Your browser may connect directly to a Google image host, which can disclose your IP address and browser information to Google.

15. Analytics

When enabled, PostHog measures page views and product actions: opening a cafe page, following a map or directions link, saving a coffee log, and following a coffee-guide link to the map. Events may include a cafe identifier, the type of action or page, language, and, for signed-in users, an account identifier. Our event filtering removes names, email addresses, written content, and raw URL query strings from event payloads. Network requests can still disclose an IP address and browser information to the provider. The current configuration uses in-memory storage rather than analytics cookies or local storage. Signed-in activity can be linked across visits using the account identifier. Avoiding cookies does not make that activity anonymous or remove applicable consent requirements. There is currently no in-app analytics consent or opt-out control. Contact support@ibeanthere.app about this processing or to make a privacy request; any consent or choice required by law must be provided separately from this notice.

16. Contact Us

Questions, comments, or concerns about this Privacy Policy, and requests to access or correct Personal Information collected through the Services, should be directed to support@ibeanthere.app.