Privacy

Privacy Policy

Last updated · 14 August 2026

CupRank is a real-world coffee brewing game: everyone brews the same coffee, the cups are judged blind, and the results become a shared record. This page says what we collect to make that work, what stays private, where it lives, and how to leave.

What we collect

• Your email address — used to sign you in (a one-tap link, or Google / Apple sign-in) and never shown publicly.
• Your @handle — the public name you pick at first sign-in. Your real name appears only if you switch it on; it is off by default.
• Game records — brews, recipes, measurements, ballots, placements and ratings. Results are public by design: finished games, leaderboards and profiles are the product.
• Photos you submit — at check-in you may photograph the coffee bag or batch, and if you host an event you may attach a venue mark to its public page. Those are the only two photos the app uploads. Both go to our storage and are accessible to anyone with the link, the same as the record they belong to.

Camera and photo permissions

The camera scans a game’s QR code to join — scans are processed on your device and nothing is recorded or uploaded. Saving a result card to your photo library happens only when you ask, with your permission, and stays on your device.

What we don’t do

No ads. No third-party analytics or tracking SDKs. No selling or renting personal data — to anyone, ever. No profile of you is built or shared, and nothing follows you to other apps or sites.

We do measure our own screens. When you log a brew, the app records how long each step took and which field you changed — never what you typed. A grind number, a coffee name and a tasting note are not in that record and cannot be: the column that would hold them does not exist, and the database refuses anything that is not a field name. Those timings are never shown to you, never mixed into your progress or your tendencies, and cannot be read back by your own account. They are deleted with your account.

Where your data lives

Data is stored with Supabase (database, authentication and file storage) and the website is served by Vercel. Sign-in emails are delivered over Gmail. If you sign in with Google or Apple, that provider confirms your email address to us and we store nothing else from your account there. Each of these providers processes data on our behalf under their own security terms; none of them may use it for their own purposes.

What other people can see

Your @handle, your finished games, your placements and your position on leaderboards are visible to others — that is the point of a ranked public record. Your email address is never displayed. Your real name is shown only if you turned it on, and you can turn it back off at any time.

Deleting your account

Delete it yourself, and it happens immediately. On iPhone and Android: open Profile, tap Account settings, then DELETE ACCOUNT. On the web: sign in, open Profile, then DELETE ACCOUNT. Or email dev@cuprank.app from the address you signed up with and we will do it for you — the same steps are on the support page.

Either way the same things happen: your account, your email address and your photos are deleted, and your entries in shared game records are anonymised — a game’s outcome belongs to everyone at the table, so the result survives but your name comes off it.

Children

CupRank is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has an account, contact us and we will remove it.

Changes

If this policy changes, the new version appears here with a new date at the top. Material changes will be called out in the app.

Contact

dev@cuprank.app — the same address for a question, a correction or a report. What you agree to by using CupRank is in the terms of use; how to reach a person, report content and delete your account is on the support page.