Last updated: August 5, 2026
Beans on Me ("we", "us", "the app") helps people share unclaimed coffee shop misorders with people nearby. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
1. Information we collect
Account information
- Name and email from your Google or Apple account when you sign in (Apple may provide a private relay address)
- A unique user ID generated by our authentication provider
Content you submit
- The address, coffee shop name, item description, and optional note you enter when posting a misorder
- An optional photo (receipt or order screen) you choose to attach
- Which misorders you have claimed
Location
- Your device location is read to sort the feed on your device and to auto-fill an address if you tap "Use My Location" when posting.
- If you are signed in, the app also transmits the current coordinates to our database function for nearby alerts. The function immediately rounds them to two decimal places (roughly one kilometre), stores only that coarse result in one row per user, and replaces the previous value. We do not keep precise coordinates or a location history.
- When you post a misorder, the coordinates of the chosen coffee-shop address are saved with the post so other signed-in users can calculate distance. If you use your current location as the pickup address, that location becomes the post's pickup location. It is deleted with the post.
Automatically collected
- We do not use third-party advertising trackers, analytics SDKs, or behavioral profiling
- Advertisements are sold and served by us directly. We count aggregate impressions, carousel interactions, and CTA clicks on our own servers. Advertisers receive campaign-level analytics, not user identities.
- Photos are checked automatically for inappropriate content before a misorder is published. A rejected photo is deleted and never stored
2. How we use your information
- To let you sign in and identify your posts and claims
- To display your first name on misorders you post (so claimers know who to look for)
- To deliver the nearby-feed and map features
- To enforce our Terms of Service and prevent abuse
3. Who we share it with
We use the following third-party services to run the app. Each receives only the data needed to do its job:
- Supabase — stores your account, posts, claims, coarse alert location, and notification token on infrastructure in the US West region. Supabase privacy policy
- OpenAI — checks submitted text and photos for prohibited content before publication.
- Groq — assists advertisers with ad copy and provides private administrator reviews and operational summaries. Advertiser AI chats are stored by Beans on Me and may be reviewed by administrators.
- Resend — sends transactional advertiser emails and reports delivery, bounce, and complaint status.
- Vercel — hosts the public website and legal/support pages.
- Google and Apple — provide account sign-in. We receive the name and email information you authorize; neither provider receives your activity inside the app.
- OpenStreetMap Nominatim — receives the address text you type in the Post form (no name or location attached) to provide autocomplete suggestions. OSM usage policy
- Apple / Google Maps — when you tap "Directions," your device opens its system maps app with the destination address. We don't share anything beyond what the OS sends.
We do not sell or rent your personal information to anyone.
4. Data retention
- Misorders stay in our database after they're claimed, so both people keep an accurate record of the exchange. A poster can remove their own misorder within 5 minutes of posting
- Deleting your account permanently erases every misorder you posted or claimed, along with any photos you uploaded
- Account data (name, email, ID) is retained as long as your account exists
- Photos attached to misorders are deleted along with the misorder
- Account deletion begins immediately. A one-way hash of a suspended account's email may be retained solely to prevent repeat abuse; it cannot be used to recover the email address.
Advertiser information
If you request or receive advertising access, we collect the contact name, business name, email, phone number, preferred contact method, website or social profile, inquiry notes, advertisement text and images, destination links, AI-assistant conversations, AI usage records, link-check results, email delivery history, campaign analytics, and administrative decisions associated with the account. We use this information to provide the advertiser portal, review and operate ads, prevent abuse, communicate about campaigns, and measure results. Administrators can review advertiser AI chats. Advertisers can only see their own business records and campaign analytics. Acceptance of the advertiser terms and privacy notice is recorded with its version and timestamp.
5. Your rights
You can at any time:
- Access your profile data on the Profile screen
- Correct your displayed name through your connected sign-in provider
- Delete your account and all related data from the Profile screen → "Delete Account"
- Email us at privacy@beansonme.com with any request
If you are in the EU/UK, you have additional rights under GDPR including data portability and the right to lodge a complaint with your local supervisory authority. If you are in California, you have rights under the CCPA including the right to know and the right to delete.
6. Security
- All communication between the app and our servers uses HTTPS/TLS
- Your password is never stored — authentication is delegated to Google or Apple
- Database access is restricted via row-level security policies — a signed-in user can read misorders in the feed, but can only edit or delete their own posts, and can only claim a misorder nobody has taken. If you block someone, neither of you can see the other's posts
- No financial or payment information is collected
7. Children's privacy
Beans on Me is not directed at children under 13 and we do not knowingly collect data from anyone under 13. If you believe we have, contact us and we will delete it promptly.
8. Changes to this policy
If we make material changes, we will update the "Last updated" date and, for significant changes, notify active users via an in-app message before the change takes effect.
9. Contact
Questions? Email privacy@beansonme.com.