Privacy policy

Information we collect and why

• Accounts: email address, profile name, sign-in and session records, and information authorized through Apple or Google sign-in when you choose those options. We use these to authenticate you and manage your account.
• Preferences: coffee tastes, favorites, saved drinks and appearance choices, to remember your settings and personalize discovery. Guest choices may stay on your device; signed-in features associate saved information with your account.
• Location and searches: foreground device location with your permission, or a ZIP code you enter, plus your search criteria, to find nearby shops and drinks. These parameters are sent to our backend and may appear in hosting request logs. We do not request background location. Your location choice and selected ZIP area can be remembered on your device.
• Community content: drink submissions, reviews, ratings, comments and reactions, to operate and moderate community features. Contributions and associated profile information can be visible to other users. Avoid posting information you want to keep private.
• Membership: app account identifiers, purchase and subscription status, and related transaction information, to provide and restore paid features. Apple or Google processes store payments; we do not receive your full payment-card details.
• Technical information: IP address, request time and path, browser/device information, referring page, response status and diagnostics, to deliver the service, investigate problems and prevent abuse.
• In-app feedback: your chosen category and message, account ID, app version and platform, stored privately in the owner’s admin inbox. No location or automatic attachments are added. Account deletion removes your account-linked feedback.
• Correspondence: your email address and information you send us, to answer questions and handle support or privacy requests.

The homepage and this policy page have no advertising, analytics scripts, forms or third-party font requests. Hosting still generates request logs. The app uses local storage and, for web sign-in, authentication cookies; native sign-in uses secure device storage. These support settings and sessions. Advertising SDKs may use device identifiers as explained below.

Services that receive information

We share information needed to deliver the features you use with the following providers:

• Quave ONE: hosts our website and backend in a US region and processes requests and operational logs. The public deployment currently has no connected account database or account-data backups. We will update this policy with the database provider and backup practices before activating hosted accounts.
• Resend: processes recipient addresses, sign-in email content and delivery information to send authentication links. See Resend’s privacy policy.
• Apple and Google: provide optional sign-in, mobile platform maps and store purchases. Opening directions shares the selected destination with your maps service. Their services have their own privacy practices: Apple and Google.
• RevenueCat: processes your app account ID, purchase records, entitlement status and device/technical information to validate memberships and restore purchases. See RevenueCat’s privacy policy.
• OpenStreetMap Foundation: supplies browser map tiles and receives network information, including your IP address and the map area requested. See OpenStreetMap’s privacy policy.
• Google AdMob: provides native app advertising and consent tools, described below.

Providers may process information in the United States and other countries where they operate. Privacy laws may differ from those where you live. We may also disclose information when required by law or reasonably necessary to protect users, investigate abuse or defend legal claims.

Advertising and privacy choices

The native app integrates Google AdMob. Current builds request test ads and request non-personalized advertising. When the SDK runs, Google may collect or share IP addresses (including approximate location derived from them), device or app identifiers, ad views and interactions, and crash/performance information for advertising, measurement, diagnostics and fraud prevention. Non-personalized advertising can still involve data collection and device storage.

The app checks Google’s consent tools before initializing ads. Where Google requires privacy options, you can reopen Ad privacy choices in the app. Available messages and choices depend on your location and the app’s release configuration. You can also manage advertising and tracking permissions in device settings. If privacy controls are unavailable, contact us at the address below.

See how Google uses information from apps that use its services and its SDK disclosures for iOS and Android. We will update these disclosures if our advertising practices change.

Your choices and privacy requests

You can decline device location access and use a ZIP code instead. Change location permission in device or browser settings. Clear browser site data or use available device/app storage controls to remove local preferences; removing local data does not delete an account or cancel a subscription.

When account services are available, review your profile and preferences in the app. To delete an account, use Profile → Account & security → Delete account, then sign in and confirm. You can also request deletion, access to a copy of your information, or corrections by emailing dev@tinytechplanet.com, including when you cannot access the app.

Account deletion removes active account records and associated contributions. Content-free comment placeholders may remain where needed to preserve other people’s replies. The process also requests RevenueCat customer deletion and revokes connected sign-in tokens. Provider processing is not necessarily immediate. If the app reports a deletion error, deletion has not been confirmed; retry or contact us.

Deleting an account does not cancel an Apple or Google subscription. Manage subscriptions through the store where you purchased them. Store transaction records and providers’ own legally required records may remain.

Depending on your residence and applicable law, you may have rights to access, correct, delete or obtain a portable copy of information, opt out of certain sharing or targeted advertising, limit certain uses of sensitive information, or appeal a decision. Email us to exercise a right or appeal; an authorized agent may contact us on your behalf. We may need to verify your identity and the agent’s authority. We respond within applicable legal deadlines and do not discriminate for exercising applicable privacy rights.

Our marketing pages do not track browsing across other websites for targeted advertising and do not change behavior in response to a browser’s Do Not Track signal. Native app advertising choices are handled through the controls described above.

How long information is kept

• Accounts and contributions: until you request deletion, unless you remove individual information sooner through available controls. Accounts do not expire solely because of inactivity.
• Hosting logs: Quave documents a 20-day retention period for access logs and application logs. Account deletion does not immediately erase these separate logs.
• Sign-in email: Resend publishes 30-day email/log retention for its Free, Pro and Scale plans and seven-day backup retention. These are provider retention periods, separate from deletion of your app account. See Resend’s retention information.
• Support and privacy requests: for as long as needed to resolve the request and document the response or meet applicable legal obligations. If records must remain for a dispute or legal requirement, we keep only what is needed for that purpose.
• Provider records: Google, Apple, RevenueCat and map providers apply their own policies to records they control. Our account-deletion request does not erase all provider logs, store records or backups immediately.

We use HTTPS and access controls to help protect information, but no system is completely secure. Do not send passwords, sign-in links or payment-card details in privacy requests.

Adults and launch availability

My Mug is intended for adults aged 18 and older, with an initial launch planned for the United States. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information so we can investigate and remove it as appropriate.

Contact and policy changes

For privacy questions, requests or appeals, contact Tiny Tech Planet dba My Mug at dev@tinytechplanet.com.

We will post updates on this page and change the effective date. For material changes, we will provide additional notice through the website, app or email as appropriate and obtain consent where required.