Privacy Policy

Last updated: October 19, 2026

This Privacy Policy explains how the Cafe Journal mobile app for iOS and Android (the "App") and the website cafejournalapp.com (together, the "Service") collect, use, share and protect your information. The Service is developed and operated by Christopher Enriquez, an individual developer based in the Philippines ("we", "us" or "our"), who is the controller of your personal information. If you have any questions, contact us at cafejournalapp@gmail.com.

Contents

1. Information we collect
2. How we use information
3. How we share information
4. Advertising and tracking
5. Device permissions
6. Data retention
7. Deleting your account and data
8. Your privacy rights
9. Security
10. International transfers
11. Children's privacy
12. Changes to this policy
13. Contact us

1. Information we collect

a. Information you give us

• Account information. You sign in with Apple (iPhone) or Google (iPhone and Android). We receive a unique account identifier and your email address. If you use Apple's "Hide My Email", we receive a private relay address instead of your real email. If you sign in with Google, Google also shares your name and profile picture link; these are stored with your account but are not shown in the App or used for anything else. We never receive your Apple or Google password.
• Journal content. What you choose to add to your journal: visit dates, cafe names, cafe locations you type in, cafe logos, who you were with (including any names you type), your mood, drinks and prices, ratings, notes, your journal name, cover designs, and the photos, stickers and text you place on a page. Please only add details about other people that they would be comfortable with.
• Photos. Only the photos you pick to add to a page or cover. They are resized and compressed on your device before they are uploaded.
• Support messages. If you email us, we receive your email address and whatever you include in your message.

b. Information collected automatically

• Purchase information. If you subscribe to Cafe Journal Premium, the App Store or Google Play processes the payment. We and our subscription provider, RevenueCat, receive the product purchased, price, currency, transaction identifiers, purchase and renewal dates and subscription status, linked to your account, plus basic device information (such as device model, operating system version and IP address). We never receive or store your card or bank details.
• Advertising data (free plan only). Google AdMob collects your IP address (and an approximate location derived from it), device and operating system information, ad interactions (such as impressions and taps) and diagnostic information about ad performance. Where you allow it, it also collects your device's advertising identifier (IDFA on iOS, Advertising ID on Android). See Advertising and tracking.
• Technical data. Our hosting providers keep standard server logs (such as IP address, request time and error information) for security and troubleshooting.

c. Information we do not collect

We do not collect your precise (GPS) location, contacts, camera or microphone input, health or fitness data, browsing history, or data from other apps. The App does not use analytics or crash-reporting tools that track you. The App only reads the photos you select or view in its photo picker, and only the photos you add to your journal are uploaded. There are no public profiles, feeds or messaging, and other users cannot see your journal.

2. How we use information

• To create and secure your account and sign you in.
• To store your journal and sync it across devices where you sign in.
• To provide Premium features, verify your subscription, restore purchases and show your payment history.
• To show ads to free-plan users and measure how they perform.
• To respond to your questions and support requests.
• To keep the Service secure, prevent fraud and abuse, and fix bugs.
• To comply with legal obligations.

We do not sell your personal information. We do not use your journal content or photos for advertising, and we do not use them to train artificial intelligence models.

Legal bases. Where laws such as the EU/UK GDPR or the Philippine Data Privacy Act of 2012 require a legal basis, we process your information to perform our contract with you (providing the App), with your consent (personalized ads and tracking, which you can withdraw at any time), for our legitimate interests (keeping the Service secure, fixing bugs and improving it), and to comply with the law.

3. How we share information

We share information only with the service providers below, which process it on our behalf to run the App. We require them, by contract and through their own published policies, to protect your information with the same or equal protection as described in this policy, and to use it only to provide their services.

We may also disclose information (a) if required by law, court order or a valid government request; (b) to protect the rights, safety or property of our users, the public or us; or (c) to a successor if the App is transferred, in which case this policy will continue to apply to your information.

Sharing you choose. When you tap Share, the App creates an image of your journal page on your device and opens your phone's share sheet. What you share, and with whom, is up to you; once shared, it is governed by the app or service you shared it with.

4. Advertising and tracking

The free version of Cafe Journal shows ads served by Google AdMob. Premium subscribers see no ads, and no ads are requested for them.

• iPhone. Before ads start, the App shows Apple's App Tracking Transparency prompt. If you choose "Ask App Not to Track", your advertising identifier is not shared and you'll see non-personalized ads. You can change this anytime in Settings › Privacy & Security › Tracking.
• Android. You can delete your Advertising ID or opt out of personalized ads in your device settings (Settings › Google › Ads, or Settings › Privacy › Ads).
• EEA, UK and Switzerland. The App shows Google's consent form before any ads are requested and respects your choice. You can change it later from the same form.

You'll see the same number of ads whether or not you allow tracking. Apart from ads as described here, we do not track you across other companies' apps or websites. Learn how Google uses this data at policies.google.com/technologies/partner-sites.

5. Device permissions

• Photos. Used only so you can pick photos for your journal pages and cover, including a grid of recent photos in the App's photo picker. On iPhone you can allow access to selected photos only. Photos are read on your device, and only the ones you add are uploaded. The App never edits or deletes anything in your photo library. You can change this permission anytime in your device settings.
• Tracking (iPhone only). Used only for ads, as described above. Declining doesn't affect any other feature.

6. Data retention

7. Deleting your account and data

You can delete your Cafe Journal account at any time, directly in the App:

1. Open Cafe Journal and open the menu (☰).
2. Tap Account, then Delete account, and confirm.

This permanently deletes your account, journal entries, covers, photos and images, and payment history. It can't be undone. If you can't access the App, you can request deletion on our website.

Note: deleting your account does not cancel an active subscription. Cancel it in your App Store or Google Play subscription settings to stop future charges.

8. Your privacy rights

Depending on where you live (for example under the Philippine Data Privacy Act of 2012, the EU/UK GDPR, or California privacy law), you may have the right to:

• be informed about and access the personal information we hold about you, and get a copy of it;
• correct inaccurate information (most of it you can edit directly in the App);
• delete your information;
• object to or restrict certain processing, or withdraw your consent;
• receive your data in a portable format;
• lodge a complaint with a data protection authority, such as the Philippines' National Privacy Commission or your local authority.

To make a request, email us at cafejournalapp@gmail.com. We'll respond within 30 days and may need to confirm the request comes from your account first. We won't treat you differently for exercising your rights.

California residents: we do not sell personal information. Showing personalized ads on the free plan may count as "sharing" under California law; you can opt out using the device settings in section 4 or by subscribing to Premium.

9. Security

All data is encrypted in transit (HTTPS/TLS) and stored with providers that encrypt data at rest. Database access rules ensure only your signed-in account can read or change your journal. Photos are kept in private storage and can only be viewed through short-lived, signed links issued to your account. No method of transmission or storage is 100% secure, but we work hard to protect your information and will notify you and the relevant authorities of a data breach where the law requires.

10. International transfers

Our service providers may process your information outside your country, including in the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

11. Children's privacy

Cafe Journal is not directed to children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We'll post the new version on this page and update the date above, and for material changes we'll let you know in the App before they take effect.

13. Contact us

Christopher Enriquez (Cafe Journal)
Philippines
Email: cafejournalapp@gmail.com