Legal
Privacy Policy
Last updated: 28 June 2026
Matcha Story (“we”, “us”) helps you discover matcha cafés and log every cup. This policy explains what we collect, why, and the choices you have. We collect only what the app needs to work, and you can permanently delete your account and data at any time.
Information we collect
Account & identity
To sign you in, we collect a phone number (verified by a one-time SMS code) or, if you choose, your Google account details (name, email address, and profile photo, as provided by Google sign-in). You may also set a display name and avatar.
Your tastings & photos
When you log a matcha, we store the details you enter — the café, drink, your star rating, and flavour notes — and any photo you choose to attach from your camera or photo library. These are tied to your account so your journal and palate are available across sessions.
Location
If you grant permission, we use your device location while you use the app to show how far nearby cafés are from you. This is processed on your device to calculate distances; we do not need your location to use the rest of the app, and you can decline or revoke the permission at any time in your device settings.
Device & diagnostic data
To keep the app stable, we collect crash reports and error diagnostics (such as device model, operating system version, and technical details about an error) through our error-reporting provider. This helps us find and fix problems.
How we use your information
- To create and secure your account and sign you in.
- To save your tastings, photos, and palate profile, and show them back to you.
- To recommend drinks and show nearby cafés.
- To diagnose crashes, fix bugs, and improve the app.
- To communicate with you about your account or support requests.
We do not sell your personal information, and we do not use it for third-party advertising.
Service providers we share with
We use a small number of trusted providers to run the app. They process data only to provide their service to us:
- Supabase — authentication, database, and photo storage (our backend).
- Google — Google sign-in, when you choose to use it.
- An SMS provider — to send your one-time sign-in code.
- Mapbox — to display café maps.
- Sentry — crash and error reporting.
We may also disclose information if required by law, or to protect the rights, safety, and security of our users and our service.
Data retention & deletion
We keep your information for as long as your account is active. You can permanently delete your account at any time from Settings → Delete account in the app. Deleting your account erases your profile, tastings, and photos from our systems; this action is irreversible. You can also contact us to request deletion.
Security
We use industry-standard measures — including encryption in transit and access controls — to protect your information. No method of transmission or storage is completely secure, but we work to safeguard your data.
Children
Matcha Story is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.
Your choices & rights
Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to certain processing. You can exercise the core of these directly in the app (edit your profile, delete your account) or by contacting us at the address below.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app.
Contact us
Questions about this policy or your data? Email hello@matchastory.app.