Peanut Express ("we", "us", "our") operates the CoffeeRun app and its supporting website. This policy explains what CoffeeRun collects, why, and the choices you have. We keep it plain and we keep collection to what the app actually needs.
Information we collect
- Account details — your email address and display name when you create an account.
- Phone number — used to verify your account and to let people who have your number find you in the app. A history of numbers linked to your account is kept to help keep the service safe (for example, to stop banned users returning).
- Contacts — with your permission, contacts from your device are used to help you find and invite people you already know. Contact details are matched privately and are not published or shown to other users.
- Location — with your permission, and only while you are using the app, to find nearby coffee shops and, if you opt in, to let your group see you're around when a run is happening. CoffeeRun does not track your location in the background.
- Camera — with your permission, to scan QR codes for group invites and runs.
- Content you create — coffee orders and preferences, group membership, and messages you send in chats and secure direct messages. These are stored so the service works.
- Notification tokens & device identifiers — to deliver push notifications about your runs and orders.
- Diagnostics — basic, non-identifying crash and error information to help us fix problems.
- Biometrics — if you enable a biometric lock (Face ID / Touch ID), it is handled entirely by your device's operating system and is never sent to us.
How we use it
- To provide and operate CoffeeRun and its features.
- To verify accounts and help you connect with people you know.
- To send notifications about your orders and runs.
- To keep the service safe and to fix bugs.
How your data is stored and shared
CoffeeRun's data is stored on servers operated by Peanut Express, not a third-party cloud database. We use a small number of service providers strictly to make features work:
- Google Firebase Cloud Messaging — to deliver push notifications; and Google Sign-In, if you choose to sign in with Google.
- Our email/messaging provider — to send verification and account emails.
We do not sell your personal information, show third-party advertising, or track you across other companies' apps and websites. We only disclose data where required by law.
Retention & deletion
We keep your data while your account is active. You can delete your account at any time — see the Account Deletion page. When you delete your account your login is permanently removed and your profile is anonymised; content tied to shared activity (such as past orders and messages) is anonymised so it no longer identifies you. A limited amount of data is retained in anonymised / de-identified form only where needed to keep the service safe — for example, to stop a banned user from returning.
Security
All data is transmitted over HTTPS and stored on access-controlled servers. No system is perfectly secure, but we take reasonable measures to protect your information.
Children
CoffeeRun is not directed at children under 13, and we do not knowingly collect their data.
Changes
We may update this policy from time to time; material changes will be reflected by the "last updated" date above.
Contact
Questions about this policy? Email [email protected].
← Back to CoffeeRun