Privacy Policy

1. Introduction

Roasters Technologies ("we", "us", or "our") respects your privacy. This Privacy Policy describes how we collect, use, and protect your personal data when you use our mobile application, Caff Count (the "App").

We operate in accordance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Data Controller: Roasters Technologies SRL, Str. Meteor, nr. 15-17, ap. 31 Cluj Napoca, Cluj, 400492 Romania

Email: calmcup.app@gmail.com

2. Information We Collect

We collect data to provide the tapering service and improve the App. This data falls into the following categories:

2.1 Personal Identification Information

• Account Data: If you create an account, we may collect your name, email address, and password.
• Apple ID: If you sign in via "Sign in with Apple," we receive an anonymized ID and your email (unless you choose to hide it).

2.2 Health & Usage Data (Special Category Data)

To generate your personalized tapering plan, we collect:

• Caffeine Logs: Types of drinks (e.g., Latte, Espresso), volume, and frequency.
• Mood & Symptom Tracking: Logs regarding anxiety, irritability, sleep quality, and energy levels.
• Goals: Your desire to "Quit" or "Reduce" and your target dates.

2.3 Technical & Device Data

• Device Information: Device model, OS version, time zone, and language settings.
• Usage Analytics: Which screens you visit, how long you spend in the App, and crash reports (via tools like Firebase or Sentry).

2.4 Financial Data

• Transactions: We do not store your credit card or bank details. All subscriptions are processed directly by Apple (App Store). We only receive a "receipt token" indicating if a subscription is active or expired.
• Savings Calculator: Data entered into the "Money Saved" calculator is processed locally on your device or associated with your profile for tracking purposes only.

3. How We Use Your Data

We use your data for the following specific purposes:

4. Data Storage and Transfers

• Location: Our primary servers and databases are hosted by third-party cloud providers (e.g., Google Cloud Platform / AWS) which may be located within the European Union (EU) or the United States.
• International Transfers: If we transfer data outside the European Economic Area (EEA), we ensure it is protected by appropriate safeguards, such as the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) approved by the European Commission.

5. Sharing Your Information

We do not sell your personal data. We only share data with trusted third parties strictly necessary to operate the App:

1. Cloud Infrastructure: To host the App’s database and backend services.
2. Analytics Providers: To understand aggregate user behavior (data is anonymized where possible).
3. Legal Authorities: If required by law (e.g., a court order or subpoena).

No HealthKit Integration: We do not currently integrate with Apple HealthKit. If this changes in the future, this policy will be updated to reflect specific HealthKit privacy standards.

6. Your Rights (GDPR)

If you are located in the EU/EEA, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct inaccurate data (e.g., wrong email).
• Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of your account and data.
• Right to Restriction: Request we pause processing your data.
• Right to Data Portability: Request your data in a structured, machine-readable format (CSV/JSON).
• Right to Withdraw Consent: You can stop logging data at any time or delete your account.

To exercise these rights, email us at calmcup.app@gmail.com. We will respond within 30 days.

7. California Privacy Rights (CCPA/CPRA)

For residents of California:

• Right to Know: You may request details about the categories of personal information we collect and the sources.
• Right to Delete: You may request the deletion of your personal information.
• Non-Discrimination: We will not discriminate against you (e.g., by denying service) for exercising your privacy rights.
• "Do Not Sell My Info": We do not sell your personal information to third parties for monetary consideration.

8. Data Retention

We retain your personal data only as long as your account is active or as needed to provide you with the Services.

• If you delete your account: We will delete your personal data (logs, name, email) from our active databases immediately, though backups may be retained for up to 30 days for disaster recovery before being overwritten.

9. Security

We implement industry-standard security measures (encryption in transit via TLS/SSL and encryption at rest) to protect your data. However, no method of transmission over the Internet is 100% secure.

10. Children's Privacy

• EU/EEA: We do not knowingly collect data from children under 16 without parental consent.
• US: We do not knowingly collect data from children under 13. If we discover that a child has provided us with personal data without parental consent, we will delete it immediately.

11. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact: