Privacy Policy
Last updated: October 28, 2026
Caff Conscious ("we," "our," or "us") operates the Caff Conscious mobile application (the "App"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our App.
We are committed to a local-first data philosophy. Your health and log data is stored on your device and may also be included in platform backups you enable. We do not sell your data. We use third-party services for subscriptions, optional analytics and advertising attribution, crash diagnostics, and community contributions as described below.
1. Information We Collect
A. Health Data (HealthKit & Health Connect)
To provide the core functionality of the App, we request permission to read and write data to your device's health system (Apple HealthKit on iOS and Health Connect on Android).
- We Read: Caffeine, sleep analysis, heart rate, and heart rate variability (HRV).
- We Write: Caffeine consumption data (so your other health apps remain updated).
We do not transmit your health data to any external servers. All analysis happens locally on your device.
B. Consumption Logs
Data regarding what you drink (drink name, size, caffeine amount, and time) is stored locally on your device.
2. Third-Party Data Sharing
We share data with only the following third-party services, and only for the specific purposes listed below:
RevenueCat (Subscription Management)
We use RevenueCat for the "Caff Conscious Pro" subscription. The App Store processes payments; RevenueCat validates purchases and manages subscription status. On Android, Google Play processes payments. The App connects to RevenueCat when it starts, even if you do not subscribe.
- What is shared on iOS: An anonymous customer identifier, transaction information, and app/device metadata, including the identifier for vendor (IDFV).
- What is shared on Android: An anonymous customer identifier, transaction information, and app/device metadata. When analytics is on, RevenueCat also receives the Firebase Analytics app-instance identifier, as described below.
- What is NOT shared: Your health data, caffeine logs, name, or email address.
The App does not enable RevenueCat's optional AdServices token collection.
On Android, when analytics is enabled, we associate the Firebase Analytics app-instance identifier with your RevenueCat customer record. This allows RevenueCat to send purchase and subscription lifecycle events, including product, transaction, revenue, and currency information, to Google Analytics for subscription measurement and Google Ads reporting. This association does not include caffeine logs or health information. Turning analytics off queues removal of the association; removal takes effect after RevenueCat synchronizes the change and does not delete events already processed.
Supabase (Product Database)
The App connects to a product database hosted on Supabase to look up beverage caffeine content by barcode or search query.
- What is shared: Barcode numbers and search terms only.
- What is NOT shared: Your health data, caffeine logs, personal identity, or any other personal data.
Firebase (Analytics, Crash Reporting & Performance Monitoring)
We use Google Firebase to improve app stability and speed and to understand how features are used. The App uses three Firebase services: Analytics, Crashlytics, and Performance Monitoring.
- Firebase Crashlytics: Automatically collects crash reports when the App encounters an error. Reports include app-scoped installation identifiers, stack traces and app/device/OS metadata. Crash reports are not intended to contain your health data or caffeine logs.
- Firebase Analytics: May collect general feature-interaction events together with app, platform, device, and app-install information. We do not send drink names, serving identity, caffeine amounts, exact Consumption times, provenance details, free text, or HealthKit and Health Connect content in those events. Production Capture Reliability telemetry is disabled.
- Firebase Performance Monitoring: Measures app timing, such as how long the App takes to start and to load some screens. On iOS, it also measures the timing of network requests. Reports include app-scoped installation identifiers and app/device/OS metadata. They do not include your health data or caffeine logs.
You can opt out at any time. The App provides a toggle in Settings to disable analytics, performance monitoring, crash reporting, and new SKAdNetwork milestone updates. Analytics collection, performance monitoring, and new SKAdNetwork updates stop when you turn the setting off. Crashlytics stops automatic report transmission after the next app launch. While Crashlytics collection is disabled, reports may be stored on your device; if you later re-enable collection, stored reports may be sent. RevenueCat's Android subscription-reporting association is removed after synchronization as described above. Subscription requests continue when analytics and crash reporting are off. Apple may still deliver SKAdNetwork postbacks that were already scheduled.
Firebase Privacy Information |Google Privacy Policy
3. Data Storage and Security
Local Storage
Your personal caffeine logs, settings, and health correlations are stored locally on your device in a local database. We do not operate an account-based log-sync service. Copies may exist in device backups managed by Apple or Google when you enable those platform services.
Health Connect & HealthKit
Data accessed from Health Connect and HealthKit is governed by the respective platform's strict privacy standards.
Google Play: Our use of information received from Health Connect adheres to theHealth Connect Permissions policy, including Limited Use requirements.
4. User Rights and Data Deletion
- Export: You may export your full log history to a CSV or JSON file via the App settings at any time.
- Deletion: You may delete all data stored by the App using the "Delete All Data" option in Settings. This will erase your local database. You may optionally choose to also delete data written to HealthKit/Health Connect during this process.
5. Analytics
Caff Conscious uses Firebase Analytics, Firebase Crashlytics, and Firebase Performance Monitoring to monitor app stability and speed and to understand general feature usage. These providers may process app, platform, device, app-install, network, and diagnostic information, including app-scoped identifiers, under their own privacy terms. Product analytics events do not include caffeine amounts, drink names, sleep/health/heart values, or other consumption-log content. The separate production Capture Reliability transport remains disabled because the required coarse aggregation and privacy audit have not been completed. On iOS, the app also uses Apple's SKAdNetwork API to report two generic milestones: a newly saved consumption and a newly started introductory trial. The conversion values represent milestone presence only; they contain no caffeine, health, identity, or purchase-value fields.
You may disable analytics, performance monitoring, crash reporting, and new SKAdNetwork updates via the toggle in the App's Settings screen. Analytics collection, performance monitoring, and new SKAdNetwork updates stop when you turn the setting off. Subscription requests continue when analytics and crash reporting are off. Crashlytics stops automatic report transmission after the next app launch. While Crashlytics collection is disabled, reports may be stored on your device; if you later re-enable collection, stored reports may be sent. Apple may still deliver SKAdNetwork postbacks that were already scheduled.
6. Children's Privacy
Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13.
7. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically for any updates.
Contact Us
If you have questions or concerns about this privacy policy, please contact us by email athackedcubeapps@gmail.com.