Caffy Privacy Notice
At Caffy, we're as dedicated to protecting your personal data as we are to brewing the perfect cup of coffee. Your privacy and data integrity are our top priorities. This Privacy Notice explains how we collect, use, share, and protect your personal information.
Data Collection & Usage
Just like selecting the finest coffee beans, we gather personal data through direct interactions, automated technologies, and third parties. Every piece of information, from your name to your coffee preferences, helps us improve your Caffy experience. Know that we treat your personal data like a rare coffee blend — collected, stored, and handled with care, ensuring its integrity from bean to cup.
When you use our app, we collect the following data:
Personal information:
Your name and email address.
Usage data:
Device information including your device’s IP address, user navigation anchors (what parts of the app you visit), error reports, and stack trace.
This data is used to:
We rely on the legal basis “performance of a contract” when we collect and process data to provide and improve app functionality. This processing is necessary for us to provide you with our app’s services according to our End User License Agreement (EULA).
We rely on the legal basis “legitimate interest” when we collect and process data to personalize your experience. This processing is necessary for us to meet our and your legitimate interest in provisioning you with the best app experience.
We rely on the legal basis “consent” when we collect and process data to communicate with you as a subscriber to Caffy’s newsletter or other marketing communication. The consent is voluntary and you can withdraw your consent at any time by unsubscribing.
Data Controller
Humanized AB, 559241-6654, Kalendegatan 29B, 211 35 Malmö, Sweden, is the data controller responsible for the processing of personal data described in this privacy policy.
Data Sharing
We share your data with:
Rest assured that we only share data with trusted partners who help us enhance your coffee journey.
International Data Transfer
We are based in Sweden, but we serve coffee aficionados across the world. To be able to do so, we may send your personal information outside of your country, state, or province, including to the United States. This data may be subject to the laws of the countries where we send it. We take steps to protect your information when we send your information across borders.
If you are located in the EEA, the UK, or Switzerland, your personal information may be sent to service providers located in other regions, including the United States. When we send your personal information outside of the EEA, UK or Switzerland, we do so in accordance with applicable law.
When we transfer your personal data to organizations in the United States participating in the EU-U.S. Data Privacy Framework, we do so knowing that such organizations have certified their compliance with the EU-U.S. Data Privacy Framework. This Framework is our assurance to you that your data enjoys a level of protection recognized as adequate by the European Commission.
When we transfer your personal data to organizations in the United States who do not participate in the EU-U.S. Data Privacy Framework, your data is protected by contractual commitments that are comparable to those in the EU Standard Contractual Clauses.
Data Retention and Deletion
Your data is stored only as long as it's needed to provide you the best coffee experience, much like how we store our beans for optimal freshness. You can request data deletion by navigating to the settings menu in the app and selecting the 'Delete My Account’ option.
User Consent and Rights
By using our app, you consent to our data practices. You have the right to access, correct, restrict or even delete your data — think of it as choosing how your coffee is brewed. To the extent processing of your personal data is based on your consent, you always have the right to withdraw that consent at any time.
Data Protection
We guard your data like a barista guards the espresso machine, with robust security measures. To protect your data, we employ SSL pinning and HTTPS for secure communication, alongside JWT authentication to ensure that each sip of data is as secure as it is delightful.
Contact & Complaints
If you have any questions or need to discuss your data over a virtual coffee, reach out to us at info@caffy.com. As per your data protection rights under the GDPR, you also have the right to lodge a complaint regarding our processing of your personal data. This complaint can be made to the Swedish Data Protection Authority (IMY). For more information on how to lodge a complaint and the procedures involved, you can visit IMY's website or contact them directly.
Policy Updates
We may update this policy. We’ll notify you of any material changes via email.
