Privacy Policy

Last updated: 1 September 2026

Cupd. (“Cupd.”, “we”, “us” or “our”) is a social coffee app that lets you capture, rate and share coffees, discover cafés and connect with friends.

This Privacy Policy explains what personal information we collect when you use Cupd., why we use it, how it may be shared, how long we keep it and the rights you have over your information.

1. Information we collect

Account information

When you create a Cupd. account, we may collect:

• your email address;
• your username;
• your profile information;
• your profile photograph; and
• authentication and account information required to operate your account.

Your password is handled securely through our authentication systems and is not visible to other Cupd. users.

Content you post

When you create a Cupd., we may collect and store coffee photographs, optional selfie photographs, captions, coffee ratings, drink information, the café associated with your Cupd., the date and time of your post, and other information you choose to include.

Cupd. is a social service. Content you choose to post may be visible to other users according to the features and privacy settings available within the app.

Social activity

We process information about how you interact with other Cupd. users, including friend requests and friendships, reactions, comments, notifications and interactions with Cupd. posts.

Café and location information

Cupd. uses location-related information to help you discover cafés and attach cafés to your Cupd. posts.

If you give Cupd. permission to access your device location, we may process your approximate or precise location, depending on the permission you grant and your device settings, to provide features such as nearby café discovery.

Granting location access does not automatically make your device location publicly visible to other Cupd. users. Information about cafés may also be obtained from third-party place and mapping services.

Device and notification information

If you enable push notifications, we may process a push notification token associated with your device so that Cupd. can send you notifications about relevant activity, such as reactions, comments or friend requests.

Technical information

We and the service providers that help us operate Cupd. may process limited technical information necessary to provide, secure and maintain the service, including authentication information, request information, timestamps and security logs.

2. How we use your information

We use personal information to create and manage your account; authenticate and protect your account; display profiles and Cupd. posts; provide friendships, comments and reactions; provide café discovery and location-based features; send relevant notifications; provide password reset and account management; operate, maintain and improve Cupd.; prevent and investigate misuse or security incidents; and comply with applicable legal obligations.

3. Our lawful bases

Contract — where processing is necessary to provide Cupd. and its core functionality to you.

Legitimate interests — where necessary for legitimate interests such as maintaining the security, reliability and integrity of Cupd., provided those interests are not overridden by your rights and interests.

Consent — where we ask for consent for optional permissions or other processing that requires it. You can withdraw device permissions through your device settings.

Legal obligation — where processing is necessary for us to comply with applicable law.

4. Who we share information with

We do not sell your personal information.

We use trusted third-party service providers to help us operate Cupd., including providers of cloud hosting and data storage, account authentication, backend infrastructure, location and place information, push notifications, and technical and security services.

These providers may process personal information where necessary to provide their services to Cupd. We may also disclose information where required by law, where reasonably necessary to protect Cupd., our users or others, or in connection with a business reorganisation or transfer, subject to applicable law.

5. International data transfers

Some of the service providers used to operate Cupd. may process or store information outside the United Kingdom. Where UK data protection law requires safeguards for an international transfer, appropriate lawful transfer mechanisms or safeguards will be used.

6. How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including operating Cupd., maintaining security and complying with legal obligations.

Information associated with an active account will generally be retained while that account remains active. When you delete your Cupd. account, your account and associated user content are removed from our active systems, subject to information that we are legally required or permitted to retain. Some information may remain temporarily within backups or technical systems until those systems are overwritten or the applicable retention period expires.

7. Account deletion

You can initiate deletion of your Cupd. account from within the app. Deleting your account removes your account and associated personal content from our active systems, including your Cupd. posts, uploaded photographs, comments, reactions, friendships and related account information, subject to information we are legally required or permitted to retain.

Account deletion is permanent and cannot normally be reversed.

8. Your rights

Depending on the circumstances, UK data protection law may give you rights to request access, correction, deletion, restriction, objection, data portability, withdrawal of consent, and to complain about how your personal information has been handled.

To exercise a privacy right, contact support@cupd.co.uk. We may need to verify your identity before completing certain requests.

9. Photos and user-generated content

Cupd. allows users to upload photographs, captions, comments and other content. You should only upload content that you have the right to share. Information you choose to post through Cupd.'s social features may be visible to and interacted with by other users.

We may remove content or restrict accounts where reasonably necessary to protect users, enforce our Terms or comply with legal obligations.

10. Location permissions

Cupd. may request access to your device location to provide nearby café and location-based functionality. You can refuse or later disable location permission through your device settings. Some location-based features may not work correctly if location access is disabled.

11. Camera and photos

Cupd. may request access to your device camera or photo library so you can capture or select photographs for Cupd. posts or your profile. Cupd. accesses these features according to the permissions you grant through your device.

12. Push notifications

If you allow notifications, Cupd. may send push notifications about relevant activity. You can disable push notifications at any time through your device notification settings.

13. Security

We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse or alteration. However, no internet service or electronic storage system can be guaranteed to be completely secure.

14. Children

Cupd. is not intended for children under 13. If we become aware that we have collected personal information from a child under the applicable minimum age without appropriate authorisation, we will take appropriate steps to remove it.

15. Changes to this Privacy Policy

We may update this Privacy Policy as Cupd. develops or where legal or regulatory requirements change. Where changes are material, we will take appropriate steps to bring them to users' attention.

16. Contact us

Cupd.
support@cupd.co.uk

17. Complaints

If you are in the United Kingdom and are unhappy with how we handle your personal information, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

We would appreciate the opportunity to address your concern first, but you are not required to contact us before making a complaint to the ICO.