Privacy Policy
What we collect
- Account basics: email, name (if you give it), and a sign-in identifier
from Google if you use Google sign-in.
- Subscription + credit activity: what you order, when, at which cafes, and
your credit balance over time.
- Social activity you opt into: friend connections, event RSVPs, and
pairwise cafe comparisons you submit.
- App + device analytics: screen views, crashes, and basic device info
(model, OS version) for debugging and product decisions.
Location
- By default we only ask for a one-time location reading to populate "cafes near you." You can deny it without losing access to anything else.
- Nearby friends is off unless you turn it on. If you do turn it on, then while the Brew Pass app is open we update your approximate location every few minutes so friends you have accepted — who have also turned Nearby on — can see roughly how far away you are, shown only as a rough distance such as "~10 min walk." They never see your exact location or a map of you, and we round your position before storing it.
- We never track your location in the background or when the app is closed. Turning Nearby off hides you immediately, and if you simply close the app your location stops being shared within the hour.
What we don't collect
- We don't read your messages, contacts, photos, or microphone.
How we use it
- To run the credit economy and the order pipeline (redeem credits, pay cafes,
send receipts).
- To power the social features you opt into (friends, gatherings, your list).
- To improve the app (debugging crashes, understanding which features get used).
- To contact you about your account or service announcements.
Sharing
- With cafes: we share your first name and order details with the cafe you
ordered from, so they can prepare and hand it to you.
- With service providers: we use Firebase (Google Cloud) to host the app
and the database. Your data lives in the U.S. in Firebase's encrypted
storage.
- We do not sell your data. Period.
Your rights
- See or export your data: email contact@brew-pass.com.
- Delete your account and data: Settings → Delete account, or email us.
- We comply with reasonable requests within 30 days.
Security
- Passwords are hashed by Firebase Authentication; we never see them.
- Network traffic is HTTPS-only.
- Subscriptions and payments are handled by our payment processor; we don't
store your card details.
Children
Brew Pass is for adults (18+). We don't knowingly collect data from anyone
under 18.
Contact
Privacy questions: contact@brew-pass.com.
Changes
If we materially change this policy (e.g., a new category of data, a new
third-party sharing relationship), we'll prompt you in-app the next time you
launch.