Privacy Policy

The short version

Information stored on your device

The app keeps limited settings on the device so the experience works between launches. This can include:

• the signed-in Supabase session stored in the operating system’s app container;
• whether the optional daily reminder is enabled and its selected time; and
• temporary timer state while the app is running; and
• Little Café levels, stars, earned beans, daily reward dates, decorations, café name, theme, and mascot. These game saves remain on your device, subject to Apple backup settings.

The synchronized coffee data described below is associated with the signed-in account.

Account and hosted data

Kawaii Coffee Timer uses Supabase for brewing-account authentication and synchronized database records. Supabase may process:

• your email address, account identifier, password-verification material, and security-session information;
• authentication audit events containing the linked account identifier, IP address, and user agent; the IP address can indicate coarse approximate location but is not device GPS or precise location;
• retained API, authentication, and database request, response, and error metadata used to debug failures, protect the service, and maintain reliability; and
• brew recipes, beans, roaster and origin details, roast and grind choices, flavor notes, completed brew sessions, coffee and water amounts, ratings, tasting notes, timestamps, and achievements.

Supabase automatically retains authentication audit events in external log storage to secure accounts, detect abuse, and support compliance. Its platform Logs Explorer also retains request, response, and error metadata from API, authentication, storage, database, and Edge Function services according to the project plan. These records can be associated with an account or network request, so Kawaii Coffee Timer discloses linked Other Diagnostic Data for app functionality, as well as linked coarse location derived from IP address. The app does not request device location permission or collect GPS coordinates. See Supabase Logging. Passwords are handled by Supabase authentication and are not provided to the publisher in readable form. Row-level access controls are used to separate authenticated users’ app records. No internet system can be guaranteed completely secure, so please use a unique password and do not put sensitive personal information in brew notes.

Sign-in options

The current build supports email-and-password account creation, sign-in, password reset, sign-out, and in-app account deletion. Little Café can be played without signing in. The brewing tools require an account. The app does not include Sign in with Apple, Google sign-in, social sign-in, or third-party identity SDKs.

Notifications and device features

The app requests notification permission only when you enable the optional daily brew reminder in Settings. That reminder is scheduled locally; the app does not register a server-side push token or send marketing notifications. The current build does not request camera, photo-library, microphone, contacts, motion, health, or location permission.

Analytics, diagnostics, advertising, and tracking

When purchase measurement is enabled in an iPhone release, RevenueCat receives an anonymous app customer identifier, app and operating-system information, purchase records, and an Apple AdServices attribution token. RevenueCat uses the token to request Apple Ads attribution, including campaign, ad group, keyword and claim-type information when Apple provides it. We use these records to validate purchases, understand purchase and restore outcomes, and measure which Apple Ads campaigns lead to purchases.

This integration does not send your brewing-account identifier, email, journal, tasting notes or café game content to RevenueCat. It does not request the advertising identifier (IDFA), display ads, or request cross-app tracking permission. Supabase service logs remain separate and are used for account security and app functionality as described above. Versions with purchase measurement disabled do not send this RevenueCat measurement data.

Purchases

The optional Café Style Pack is a one-time, non-consumable in-app purchase. Apple processes payments. StoreKit verifies purchase status on the device to unlock and restore four room themes and three extra café friends. In measurement-enabled versions, verified purchase results and user-requested restores are also sent to RevenueCat. Apple can send purchase and refund notifications to RevenueCat so its purchase records stay current. We do not receive payment card details. There are no subscriptions or paid game-currency purchases. Restore Purchases is available in Café Studio. Local game progress is independent of your brewing account, and deleting that account does not revoke Apple purchases.

Why information is used

Information is used to provide requested app features, authenticate and secure accounts, preserve preferences and progress, validate and analyze purchases, measure Apple Ads acquisition, respond to support or deletion requests, prevent abuse, and meet legal obligations. It is not used to build a profile for targeting ads across other companies’ apps or websites.

Retention and deletion

Local reminder settings and cached app state remain until you disable the reminder, sign out where applicable, delete the app, or the operating system removes them, subject to Apple’s backup behavior. Individual beans and brew sessions can be deleted from their corresponding app screens.

To delete a hosted account in the app, sign in, open Settings, choose Delete Account and Data, and confirm. The server requires a valid signed-in session. It permanently deletes the Supabase authentication identity; database foreign-key rules then delete that user’s Kawaii Coffee Timer recipes, beans, sessions, and achievements.

The Supabase authentication tenant is shared with other publisher services. Deleting the authentication identity is therefore global and irreversible, and can also delete or make inaccessible records in those services that are linked to the same identity. This cannot be undone. Provider backups expire under the provider’s retention process. Supabase authentication audit logs, API and service diagnostics, and limited records may remain under the provider’s plan-based retention controls when needed for security, reliability, fraud prevention, compliance, dispute handling, or law.

If you cannot sign in or access the in-app deletion control, email isaiahdupree33@gmail.com from the account email with the subject Kawaii Coffee Timer account deletion. Ownership may be verified before processing this fallback request.

Service providers and disclosures

Supabase processes account and synchronized app data on the publisher’s behalf. RevenueCat processes purchase and Apple Ads measurement records as described above. Apple provides the App Store and operating-system services. Deleting the app or your brewing account does not delete Apple purchase records or automatically erase RevenueCat transaction records; contact the privacy address below for a request concerning those records. Records may be retained for restoration, fraud prevention, financial recordkeeping and legal obligations. Information may also be disclosed when required by law, to protect users or the service, or as part of a business transfer subject to applicable safeguards.

Children

Kawaii Coffee Timer is a general-audience coffee app with a café minigame. It is not directed to children under 13, and the publisher does not knowingly collect personal information from a child under 13. A parent or guardian who believes a child supplied account information can contact the address below to request deletion.

Changes

If data practices change, this policy will be updated and the “Last updated” date will be revised. Material changes will be communicated in the app or by another appropriate method when required.

Contact

Privacy questions and requests can be sent to isaiahdupree33@gmail.com.