Privacy Policy

Last updated: January 3, 2026

Introduction

MyCuppa ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website and services.

Information We Collect

Information You Provide

Account information (name, email address) when you sign up
Profile information you choose to provide
Communications when you contact us

Automatically Collected Information

Usage data and analytics
Device and browser information
IP address and location data
Cookies and similar technologies

How We Use Your Information

We use the collected information to:

Provide, maintain, and improve our services
Communicate with you about updates and features
Respond to your requests and support needs
Analyze usage patterns to enhance user experience
Protect against fraud and abuse

Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Service providers who assist in our operations
Legal authorities when required by law
Third parties with your explicit consent

Third-Party Services

MyCuppa uses the following third-party services to provide our features. Each service has its own privacy policy:

Supabase

We use Supabase for authentication, database storage, and backend services. Your account data and app content are stored securely on Supabase servers.

OneSignal

We use OneSignal for push notifications (optional). If you enable notifications, OneSignal will process your device token and notification preferences.

AI Service Providers

We use multiple AI providers (OpenAI, Anthropic, and Groq) to power our AI chat features. Your chat messages are sent to these providers for processing. We do not store chat messages permanently on our servers, but chat history is stored locally on your device.

OpenAI Privacy: https://openai.com/privacy
Anthropic Privacy: https://www.anthropic.com/privacy
Groq Privacy: https://groq.com/privacy-policy

Your Rights

You have the right to:

Access your personal data
Correct inaccurate information
Request deletion of your data
Opt-out of marketing communications
Export your data in a portable format

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Data Retention

We retain your personal data as follows:

Account Data: Retained while your account is active and for 30 days after account deletion
Chat Messages: Stored locally on your device; not retained on our servers beyond the AI processing request
Usage Analytics: Aggregated and anonymized data retained for up to 24 months for service improvement
Crash Reports: Retained for 90 days for debugging purposes

You can request deletion of your data at any time by contacting us or deleting your account through the app.

iOS App Permissions

The MyCuppa iOS app may request the following permissions to provide features:

Face ID / Touch ID (Biometric Authentication)

Used to secure your app with biometric authentication. This is optional and can be enabled in app settings. We do not store or transmit your biometric data—it remains on your device and is managed by iOS.

Push Notifications

Used to send you updates about new content, features, and important announcements. You can enable or disable notifications in the app settings or iOS Settings. Notification preferences are managed through OneSignal.

Local Storage

The app stores chat history, user preferences, and cached content locally on your device to provide offline functionality and faster performance.

Mobile App Privacy Labels (iOS)

In accordance with Apple App Store requirements, MyCuppa collects the following data types:

Data Linked to You

Contact Info: Email address (for account creation and authentication)
User Content: Chat messages (sent to AI providers for processing)
Identifiers: User ID (for account management)

Data Not Linked to You

Usage Data: App interactions and feature usage (anonymized analytics)
Diagnostics: Crash reports and performance data

Data Used to Track You

MyCuppa does not track you across apps and websites owned by other companies.

Regional Privacy Rights

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to say no to the sale of personal information
Right to delete personal information
Right to non-discrimination for exercising CCPA rights

We do not sell your personal information. To exercise your rights, contact us at support@mycuppa.io.

European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent

To exercise your rights, contact us at support@mycuppa.io. We will respond within 30 days.

Cookies

We use cookies and similar tracking technologies to improve your experience. You can control cookie preferences through your browser settings.

Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this privacy policy or wish to exercise your privacy rights, please contact us at:

Email: support@mycuppa.io
Website: https://mycuppa.io/contact