Privacy Policy
Last updated: May 1, 2026
Caffy is designed with your privacy in mind. We collect only what is necessary to provide accurate caffeine tracking and sleep predictions. We do not sell your data to third parties.
Data We Collect
• Caffeine entries (drink name, amount in mg, time consumed) • Profile information (age, weight, caffeine sensitivity, bedtime, wake time) • Notification preferences • Account email address (for authentication) We do not collect location data, contacts, camera access, or any other device information beyond what is listed above.
How Your Data Is Used
Your data is used exclusively to: • Calculate real-time caffeine metabolism curves • Predict sleep readiness scores • Generate personalised alerts and recommendations • Display your intake history and weekly insights All calculations are performed locally on your device. Your entries are synced to our secure database solely to preserve your history across devices.
Data Storage & Security
Your data is stored on Supabase (supabase.com), a GDPR-compliant cloud database provider. Data is encrypted in transit (TLS) and at rest (AES-256). Row-Level Security policies ensure your data is only accessible to your own authenticated account — not to other users or Caffy staff.
Data Retention & Deletion
Your caffeine entries and profile are retained for as long as your account is active. You may delete your account and all associated data at any time from Settings → Delete Account. Deletion is permanent and irreversible.
AI Analysis & Data Processing
The AI Weekly Analysis feature sends a summary of your weekly caffeine data to our secure server for processing. This includes: • Aggregate intake statistics (total mg, average mg, over-limit days) • Sleep score data (best/worst days, caffeine at bedtime) • Anonymised profile factors (age range, caffeine sensitivity, half-life, bedtime/wake time, smoker status, pregnancy status, oral contraceptive use) This data is sent to a Supabase Edge Function and processed using an AI language model (Claude by Anthropic) to generate personalised insights. It is not stored beyond the duration of the request and is never used to train AI models. The resulting insights are cached locally on your device only. This feature is only triggered manually or once per week. You can disable it by not using the AI Weekly Analysis section.
Third-Party Services
Caffy uses the following third-party services: • Supabase — database and authentication (supabase.com/privacy) • Anthropic (Claude API) — AI analysis of anonymised weekly stats, processed server-side and not retained • Apple UserNotifications — local push notifications (no data leaves your device) No analytics SDKs, advertising networks, or tracking libraries are included in the app.
Children's Privacy
Caffy is intended for users aged 13 and older. We do not knowingly collect data from children under 13. If you believe a child has provided personal information, please contact us to have it removed.
Your Rights
Depending on your jurisdiction you may have the right to: • Access the personal data we hold about you • Request correction of inaccurate data • Request deletion of your data • Export your data in a portable format To exercise any of these rights, contact us at the address below.
Contact
If you have questions about this policy or your data, please contact us at privacy@caffy.app