privacy policy

Caffi ("we", "us", "the app") is operated by Tech Nuttiez OPC Private Limited. This policy explains exactly what data the Caffi iOS app collects, what we do with it, and what we don't do with it. We've kept it short on purpose — there isn't much to say, because the app is built to keep your data on your device.

1. What we collect

• Account identifier. When you sign in with Apple or Google we receive a unique user ID and the email address tied to that login. We use this only to authenticate you and to sync your caffeine history across devices you sign in on.
• Caffeine logs. Every drink you log (name, caffeine in mg, time) is stored locally on your device and synced to your private Firestore document, scoped to your user ID. Only you can read it.
• Profile preferences. Daily caffeine limit, bedtime, goals, and onboarding answers — all stored alongside your caffeine logs.
• Coach messages. Messages you send to the in-app coach are sent to OpenAI to generate a reply. We do not retain these messages on our servers; OpenAI processes them per their API data usage policies (no training on API data).

2. What we don't collect

• No analytics, no tracking. We don't run third-party analytics SDKs, advertising SDKs, or fingerprinting. No IDFA, no cross-app tracking.
• No location. Caffi does not request or use your location.
• No contacts, photos, microphone, camera. The app never asks for these.
• No selling or sharing. We do not sell, rent, or share your data with anyone for marketing or any other purpose.

3. Apple Health

With your permission, Caffi reads sleep data from Apple Health to correlate caffeine timing with sleep quality, and writes the caffeine you log to Apple Health's Dietary Caffeine category so it shows up alongside your other nutrition. Health data never leaves your device through Caffi. Apple Health data is governed by Apple's privacy controls; we never upload it to our servers.

4. Where your data lives

• On your iPhone. All caffeine logs and profile data are written to local storage first. The app works fully offline.
• Firebase (Google Cloud). Caffeine logs and profile data are mirrored to a private Firestore document keyed to your account so you can sync across devices. Data is encrypted in transit (HTTPS/TLS) and at rest by Google Cloud.
• Google Cloud Run. Coach messages are sent through our backend (a stateless Cloud Run service) which forwards them to OpenAI. We do not log message content.

5. Your rights

You can:

• Delete every entry from Settings → Clear all entries.
• Reset everything (logs + profile + sign out) from Settings → Restart onboarding.
• Sign out of the app at any time from Settings → Sign out.
• Request a full account deletion (logs + Firebase user record) by emailing us at technuttiez@gmail.com. We will action it within 7 days.

If you are in a jurisdiction with formal data-subject rights (GDPR, CCPA, etc.), the same email address handles access, correction, deletion, and portability requests.

6. Data retention

Your caffeine logs and profile remain in Firebase for as long as you keep an active Caffi account. When you request deletion (or you haven't signed in for 24 months), we delete your Firestore document and your Firebase Auth user record.

7. Children

Caffi is intended for users 13 and older, and is not directed at children under 13. We do not knowingly collect data from anyone under 13.

8. Changes

If we materially change this policy, we'll update the "Last updated" date at the top and, if the change affects what we collect, surface a notice in the app.

9. Contact

Questions or requests: technuttiez@gmail.com.