Privacybeleid

I. Introduction

Coffi respects your privacy and is committed to protecting personal information in compliance with applicable laws. This Privacy Policy explains what information is collected through the Coffi app and related services, how it is used and shared, and what choices you have regarding your data.

The controller responsible for your personal data is Coffi, Inc., a Delaware corporation, 10 Wendeller Street, South Boston, MA 02127, United States (“Coffi,” “we,” “us”). We have not appointed a representative in the European Union or the United Kingdom; if you are located in the EU, EEA or UK, please direct any privacy inquiry or request directly to us at info@coffi.com and we will handle it as required by the data protection laws that apply to you.

By using the Coffi application or services, you acknowledge reading and understanding this Privacy Policy. If you disagree with these practices, do not use the app. The policy may be updated periodically, and continued use after changes constitutes acceptance.

II. Information We Collect

Account and Profile Information

When creating a Coffi account, we collect your first name, last name, username, and email address. Optional information includes profile pictures, country and city location, bio, and social media links. User profile attributes like global rank or community status are maintained.

User-Generated Content

Any content voluntarily created and shared on Coffi — including coffee ratings, reviews, posts, comments, photos, or media — is collected and stored as User-Generated Content (UGC). This content may be visible to other users or the public, so avoid including information you wish to keep private.

Payment Information

For purchases or financial transactions, necessary payment information is collected. Coffi uses trusted third-party payment processors and does not store your full credit or debit card numbers on our systems. We may retain payment tokens or the last four digits for record-keeping.

Usage and Technical Information

Coffi automatically collects device type, operating system, app version, IP address, device identifiers, and usage logs. This includes features accessed, pages viewed, access times, and usage statistics. We use this to understand engagement, troubleshoot issues, improve services, and infer preferences for personalization.

Communications with Us

Information provided when contacting support or communicating via email or in-app chat is collected. This includes name, contact info, and message content used to respond to inquiries and provide customer support. Records may be kept for internal training and quality assurance.

Information from Future Features

As Coffi evolves, new features may involve collecting additional personal information. Users will be informed and the Privacy Policy updated if necessary. For instance, linking social media accounts or sharing content on other platforms may provide information from third-party services.

Personal and Non-Personal Information

Personal Information can identify you; Non-Personal Information cannot. Information you provide includes name, email, city/location, profile details, tasting notes, and other inputs. Automatic collection occurs through cookies and tracking technologies.

Automatic Collection

The website and mobile app automatically collect technical and usage data including referring URLs, browser type, device operating system, IP address, pages or screens viewed, access dates/times, clicks, and other usage statistics. Cookies, web beacons, and similar technologies gather this information. Data helps understand navigation, enable site features, and remember preferences for personalization.

Analytics Information

Aggregate data on popular features or page visit frequency helps improve functionality. The Coffi mobile application does not use browser cookies but may use built-in identifiers and analytics tools. Anonymous performance and usage data is collected via device identifiers or analytics SDKs, not linked to identity.

Attribution and Advertising Measurement (Mobile App)

To measure which marketing campaigns bring users to Coffi, the mobile app uses attribution services: AppsFlyer (install attribution) and, where you arrived via a Reddit campaign, a server-side integration with Reddit’s conversion measurement (including a Reddit click identifier from the link you tapped). On iOS, your device’s advertising identifier (IDFA) is accessed only if you allow tracking in the App Tracking Transparency prompt; on Android, the advertising ID may be used subject to your device settings. If you decline the tracking prompt, attribution runs without your advertising identifier. We may associate attribution data (for example, the campaign that brought you to Coffi) with your account to measure sign-ups and purchases resulting from our marketing.

Attribution and Advertising Measurement (Website)

On the Coffi website, the same measurement happens only if you consent to advertising cookies in our consent banner (see Section VI). If you do, we use the Reddit Pixel and Reddit’s Conversions API to understand which ads bring people to Coffi and which of those visits lead to a purchase.

When you arrive from a Reddit ad, the link carries a Reddit click identifier (rdt_cid). With your consent this identifier, along with a first-party Reddit pixel cookie (_rdt_uuid), is stored in your browser and carried through to checkout so a completed order can be matched back to the ad you clicked. Because our checkout is hosted by Shopify on a different domain, the purchase itself is reported to Reddit from our servers rather than from your browser.

The information sent to Reddit for a purchase consists of: the click identifier and pixel cookie value; the order value, currency, item count and the products ordered; and, as matching signals, an irreversibly hashed (SHA-256) form of your email address, your Coffi account identifier and your IP address, plus your browser user-agent. We do not send Reddit your name, postal address, or payment details. Browsing events (page views, product views, adding to cart) are sent by the pixel in your browser, again only with your consent.

If you decline advertising cookies, no Reddit pixel is loaded, no Reddit identifiers are stored on your device, and no purchase events are sent to Reddit.

Children’s Data

Coffi does not knowingly collect personal data from children under 13. If inadvertently collected, such information will be deleted per applicable laws.

III. How We Use Your Information

Providing and Improving the Service

Personal information operates Coffi and provides its features. Account information creates and maintains accounts; profile information displays identity. Data analyzes user interaction to improve experience, fix bugs, and develop new features.

Personalized Recommendations

A core Coffi feature is providing personalized coffee recommendations and taste profiles by analyzing interactions like ratings and content creation. The personalization algorithm relies on coffee-related data and UGC, not sensitive demographic details. Recommendations are based on taste preferences and activity rather than age, gender, or ethnicity.

Communicating with You

Contact information sends important communications regarding the service, including customer support responses, transaction confirmations, account updates, and important change notifications. Announcements about new features, newsletters, or promotions are sent if you agreed to such communications. You can opt out as described below.

Marketing and Promotional Uses

Information sends marketing and promotional content about Coffi offerings, such as special offers, newsletters, or events, consistent with applicable law and preferences. If subscribed to updates, email is used for Coffi news. Opportunities to unsubscribe or opt out are always provided. Public content like great coffee photos or reviews may be used in external marketing or social media either with consent or as allowed by law to promote Coffi’s community and services.

Providing Feedback to Coffee Roasters

Ratings, reviews, and coffee assessments help coffee roasters understand consumer perception. If reviewing coffee from roasters using Coffi’s roaster panel, reviews are available to that roaster through their panel with your public Coffi username. Full name or profile photo are not shared with roasters, allowing them to gain customer feedback insights while your identity remains private beyond username.

Processing Payments and Orders

Personal and payment information processes transactions and provides purchased products or services. Information is sent to payment processors to complete payment and may be used for shipping physical products. Purchase information maintains proper business records.

Marketplace Purchases

When you purchase coffee through the Coffi Marketplace, your checkout and payment are processed by Shopify (Shopify Inc. and its affiliates), which handles your payment card data as a payment processor — Coffi does not store your full card details. To fulfill your order, we share your name, delivery address, and the contents of your shipment with the roastery that prepares and ships your order. Roasters receive this information solely to fulfill your order (including customs declarations where required for cross-border shipments) and are not permitted to use it for their own marketing. We retain order records (products, amounts, delivery country, order status) to provide customer support, process refunds and withdrawals, and meet our legal (including tax) record-keeping obligations.

Ensuring Safety, Security, and Legal Compliance

Data keeps Coffi safe and secure by detecting and preventing fraud, abuse, or Terms of Service violations. Personal information enforces agreements or complies with legal obligations, such as financial reporting laws or lawful authority requests.

Use for Research and Analytics

Aggregated and anonymized data — not identifying you personally — understands trends and user preferences. This analyzes how user segments use Coffi and how effective certain features or campaigns are. Aggregated data may be used for academic or marketing research to advance coffee preference and community behavior knowledge without identifying individual users.

Usage Limitation: Personal information is used only for described purposes and will not be used incompatibly without consent. If processing data for undescribed purposes, users are notified and permission is sought if required.

IV. Sharing and Disclosure of Information

Coffi does not sell or rent personal information to third parties for marketing purposes. Information is shared only in limited circumstances with appropriate safeguards.

Service Providers and Vendors

Information is shared with third-party service providers performing services to help operate the business and app, including cloud hosting providers, analytics providers, and payment processors. Service providers receive only necessary information and are contractually obligated to protect data, using it only for providing services to Coffi.

Advertising Platforms (with Consent)

Where you have consented to advertising cookies on our website (or allowed tracking in the mobile app), limited information is shared with the advertising platform we use, currently Reddit, solely to measure the effectiveness of our own campaigns. This includes the Reddit click identifier and pixel cookie value, the value, currency and contents of an order, and irreversibly hashed (SHA-256) matching signals such as your email address, Coffi account identifier and IP address. See Section II for the full description. This sharing does not occur if you decline advertising cookies, and we do not sell personal information.

Business Partners (with Consent)

If Coffi partners with another company for co-branded services or promotions and you participate, information may be shared with the business partner with your consent. Clear communication occurs at data collection point with choice to proceed. Personal data is not shared with third parties for independent marketing or advertising without opt-in consent.

Legal Requirements and Safety

Information may be disclosed if required by law or legal process, or if good-faith belief exists that such action is necessary to comply with applicable laws, regulations, or legal requests (subpoena, court order), or respond to emergencies. Information may be shared when necessary to protect Coffi, users, or others’ rights, property, or safety, including exchanging information with other companies for fraud protection and credit risk reduction.

Corporate Transactions

If Coffi merges, acquires, becomes bankrupt, reorganizes, or sells all or portion of assets, information may transfer to the successor entity or purchaser. Any successor entity is bound by terms consistent with this Privacy Policy. Users are notified of ownership changes or personal data use changes via email or prominent in-app notice, along with resulting choices.

Verified Roasters (User Reviews)

If leaving a rating or review for coffee from roasters using Coffi’s roaster panel, that roaster views feedback through their panel interface. They see review content and your Coffi username, but not full name or profile photo. This limited sharing helps roasters understand consumer perception while protecting personal identity beyond username.

Other Users and the Public

Some information is shared with other Coffi users or the public through your own actions. Creating a Coffi profile makes certain profile information visible to other users, including username, profile photo, bio, coffee preferences, and posted content. User-generated content posted on Coffi is accessible by other users and may be publicly visible if Coffi allows public access. This sharing is inherent in Coffi as a social application.

Public Content Note: Any publicly shared information can be viewed, used, or shared by others and is not subject to private data privacy protections.

Aggregated or De-Identified Information

Information aggregated or anonymized so it does not identify you personally may be shared. Examples include reports or infographics showing overall usage trends without revealing personal details. Such information may be shared with partners, media, or the general public for marketing or research purposes. Care ensures data cannot trace back to individual users.

Limitation: Personal information is not shared with third parties unless consent or direction is provided. If future data sharing for new purposes becomes necessary, the Policy is updated and permission sought as required.

V. User-Generated Content and Public Use of Content

Coffi is a platform where users share coffee experiences and content. Contributing content — posting reviews, photos, comments, or other material — is considered User-Generated Content (UGC) and may be visible to others.

Ownership and Rights

You retain UGC ownership, but grant Coffi certain rights to use content for operating and promoting services. Understanding how UGC may be used is important.

Public Display

Content posted on Coffi (coffee reviews, tasting notes, photos, forum comments) is typically visible to other Coffi users and sometimes publicly visible to anyone (featured on public websites or marketing material). Your profile name, avatar, global rank, and other profile info associate with posted content, allowing others to know authorship. Discretion in sharing personal details in posted content is encouraged, as information you publish in UGC is not private and can be viewed or used by others.

License to Coffi

By uploading or posting UGC on Coffi, you grant us a non-exclusive, worldwide, royalty-free license to use, copy, store, modify, distribute, display, and create derivative works from content as needed. This allows hosting content on servers, displaying it to other users, and reproducing it in promotional materials. Coffi does not claim UGC ownership; you simply give permission for these uses without further approval. This license is necessary for operating the Coffi app (showing posts to others or including them in feeds technically requires copying and transmitting them).

Use in Marketing and Promotion

Coffi may use your publicly shared content for our own marketing and promotional purposes, consistent with applicable laws. Great user photos or coffee review excerpts might feature on social media, websites, or promotional material highlighting Coffi’s user community. When using UGC, personal identifiers are removed/anonymized or credit is given as the creator, per agreement. Photos are not used in advertisements without obscuring identity or attributing content to you (using username or display name). Content is never sold to third parties, and marketing use represents the community and service without commercial exploitation beyond platform context.

Compliance and Moderation

All UGC must comply with Terms of Service and community guidelines. Coffi reserves the right to monitor, review, remove, or restrict violating content. This involves automated filtering or human moderation of flagged posts containing prohibited material. When content is removed for policy violation, or when you delete content or account, public display ceases. Removed content may persist in backup copies for a period, and if content was shared by others, complete removal from all online locations cannot always be guaranteed. Certain content may be retained as required by law or legitimate business purposes (keeping violation evidence demonstrating action taken).

Summary

Any Coffi content contribution can be seen by others. Expression of coffee passion is encouraged, with understanding of content use. Contact regarding specific content usage concerns is welcome for discussion or clarification. Posting content indicates you have rights to share it and accept these use terms.

VI. Cookies, Analytics, and Tracking Technologies

Use of Cookies on the Coffi Website

The Coffi website uses cookies and similar tracking technologies to enhance experience, analyze usage, and ensure proper operation. A cookie is a small text file placed on your computer or device by web browser at visited site request. Cookies allow recognizing your browser or device and storing information like user preferences or login status for next visits.

Types of Cookies We Use

Strictly Necessary Cookies: Essential for website correct function, enabling core features like security, network management, and accessibility. Examples include authentication, keeping you logged in across pages, or remembering shopping cart items. Without these, requested services (maintaining account login or submitting forms) cannot be provided. Generally first-party cookies set by Coffi, often not requiring prior consent in many jurisdictions because necessary for site operation.

Functional (Preferences) Cookies: Allow the website remembering your choices and providing enhanced, more personalized features. Examples include remembering region or language preference, display settings, or customizations like dismissed notifications or seen tutorials. While not strictly necessary, these make experience smoother and more convenient.

Analytics (Performance) Cookies: Collect information about website visitor use to understand usage patterns and improve services. These gather aggregated, anonymous statistics about site traffic and interactions — most frequently visited pages, time spent on each page, clicked links, and encountered error messages. Importantly, analytics cookies data does not directly identify you; typically received and analyzed in aggregate form. Information enhances website performance (optimizing page load times and navigation) and fixes bugs or improves content and layout. Trusted third-party analytics services sometimes help perform analysis. Third-party analytics cookies are only for Coffi’s purposes analyzing and improving the platform, not allowing analytics providers using your data for other purposes.

Advertising (Marketing) Cookies: Used to measure the effectiveness of our advertising — specifically, which ads brought a visitor to Coffi and whether that visit led to a purchase. These are set by the Reddit Pixel and are only ever loaded if you separately consent to advertising in our consent banner. Accepting analytics does not enable them. They involve sharing data with Reddit, an advertising platform, as described in Section II (“Attribution and Advertising Measurement (Website)”) and Section IV. We do not sell your personal information, and we do not use these cookies to build advertising profiles for other companies.

Why We Use Cookies

Cookies help ensure the website works securely and as intended, remember your settings, and help us understand and improve user behavior on the site. Strictly necessary cookies keep you logged in moving through secure areas; functional cookies remember preferred app themes or completed tutorials; analytics cookies tell us which webpage features are frequently used. Using cookies this way allows continuously improving Coffi and tailoring it to user needs while keeping service reliable and user-friendly.

Other Tracking Technologies

In addition to cookies, web beacons (pixel tags) and similar tracking technologies may be employed on the website or in email communications. Web beacons are tiny graphic images or code snippets functioning similarly to cookies, allowing counting users visiting certain pages or opening emails, or understanding usage patterns. Local storage or session storage on your browser may be used for certain features. All technologies are used per this Privacy Policy — any not strictly necessary for service may only be used with consent where legally required.

Cookies and Consent

Coffi is committed to privacy-compliant cookie use. On your first visit, the Coffi website shows a consent banner covering two separate purposes — analytics and advertising — with three choices:

Accept all — the analytics services we use (Google Analytics 4 and Mixpanel) are loaded, and the Reddit Pixel is loaded for advertising measurement as described in Section II.

Analytics only — analytics services are loaded, but no advertising cookies are set, no Reddit pixel loads, and no data is shared with any advertising platform, including for purchases you make.

Decline — neither analytics nor advertising services are loaded, and none of their cookies are set.

Strictly necessary cookies and local storage (for example your login session, your shopping cart, and your shipping-country selection) are always active because the site cannot function without them; they are not affected by these choices.

One technical note, in the interest of full transparency: if you arrive from a Reddit ad, the Reddit click identifier in the link is held temporarily in your browser’s memory while the page is open, before you have made a consent choice. This is because the identifier is only present in the landing address and is lost as soon as you navigate. It is not written to your device and is not transmitted to anyone unless you consent to advertising. If you decline, or simply leave, it is discarded.

Your decisions are stored in your browser’s local storage and remembered on future visits, so you are not asked again. You can change your choice at any time using the link below, which brings the consent banner back:

Change your cookie choice

Coffi’s use of cookies and trackers is transparent and controlled by you: analytics and advertising each run only with your separate consent, and you can withdraw either at any time.

Mobile App Analytics

Within the Coffi mobile app, third-party analytics tools help understand app use and improve performance. These tools collect information about app usage, including accessed features, device type and operating system, session information (use frequency and duration), and general location (city or region — not exact GPS coordinates). This information solely fixes issues, learns about useful features, and improves the app. Importantly, this data does not include your name or contact information and is not used to identify you personally.

No Cross-App Tracking or Behavioral Ads

Analytics data from the app is not used to track you across other apps or websites. Information collected in Coffi’s app stays with Coffi — not combined with data from other companies’ apps and not used to build behavioral advertising profiles. Analytics information is used in aggregate to improve our services.

This is separate from the campaign measurement described above: the limited attribution data covered in “Attribution and Advertising Measurement” is shared with our attribution and advertising partners, but only to measure the performance of our own campaigns — never to let those partners target you on behalf of other advertisers, and never as a sale of your personal information.

Your Choices

Some control over app analytics and tracking exists on your devices. Most smartphones offer settings to limit or disable app tracking and analytics. You can disable ad tracking or reset your device’s advertising identifier and adjust app permissions like location access in device privacy settings. While the app does not use analytics data for advertising, using these settings controls data collection. Device privacy options are reviewed if you want limiting usage data collection.

VII. Data Security

Coffi takes personal information security seriously, implementing reasonable and industry-standard security measures to protect data from unauthorized access, alteration, disclosure, or destruction. Technical, administrative, and physical safeguards appropriate to information sensitivity are employed. Examples include encryption protecting data transmissions (HTTPS for data in transit), restricting personal data access to authorized personnel, and employing firewalls and monitoring against intrusions.

However, no method of transmission over the internet or electronic storage is completely secure. While striving to protect personal information, Coffi cannot guarantee absolute security. You play a part protecting information. Keep account credentials (username and password) confidential and secure. Suspect unauthorized account access or security breach? Notify Coffi immediately. The company continues reviewing and enhancing security practices as new technologies and best practices emerge, helping ensure data is as safe as possible.

VIII. Data Retention

Personal information is retained only for as long as necessary to fulfill outlined Privacy Policy purposes, unless longer retention is required or permitted by law. Account information is kept while your account is active and for a reasonable period thereafter if you decide returning to Coffi. Certain information may be retained longer if needed for legitimate business purposes (record-keeping, account recovery, audits) or legal obligation compliance (maintaining transaction records for tax and accounting).

When personal information is no longer necessary for collection purposes, it is either deleted or anonymized so it cannot associate with you. For instance, deleting your Coffi account results in deleting or anonymizing associated profile personal data, except data required or permitted by law to keep (payment transaction records or dispute resolution or agreement enforcement data).

User-Generated Content Note: Posted content may persist after account deletion if shared or re-posted by others, or stored in backup archives. Commercially reasonable efforts remove or dissociate content from your identity upon account deletion.

IX. Your Rights and Choices

Your Rights

Depending on location and applicable privacy laws, certain personal information rights may exist regarding information Coffi holds. These rights may include:

• Access: Request a copy of personal data collected and obtain collection processing information.
• Correction: Ask for inaccurate or incomplete personal information correction or updating.
• Deletion: Request personal information deletion, sometimes called “right to be forgotten.” Deletion requests are honored as required by applicable law. Certain information may require retention for legal reasons or internal business purposes.
• Objection to Processing: Object to certain data processing types, such as direct marketing processing or legitimate interests-based processing.
• Restriction of Processing: Ask us to suspend some personal information processing, for instance if you want accuracy verification.
• Data Portability: Where law provides, obtain personal data in structured, commonly used, machine-readable format, with that information transmission to another service provider.
• Withdrawal of Consent: If processing any personal information based on your consent, withdraw consent at any time. Coffi then stops consent-based processing.

To exercise these rights, contact Coffi using the Contact Us section information. Legitimate requests receive responses within law-required timeframes. We may request certain information verifying identity before fulfilling requests, ensuring incorrect person data is not disclosed or erased.

Opt-Out Choices

Coffi provides choices to opt out of or customize various data uses. You can unsubscribe from marketing emails, decline or accept cookies as you see fit, and control certain app and browser-based data collection.

Profile Settings

Accessing and updating much profile information directly through the Coffi app is possible (editing display name, bio, profile picture, etc.). Keeping information up-to-date is encouraged. Wishing to change non-editable information? Contact Coffi for assistance.

Email and Marketing Communications

If subscribed to newsletters, promotional emails, or other marketing communications, opt out at any time. Each marketing email includes an “unsubscribe” link in the footer. Marketing communication opt-out can also be done by adjusting account preferences or contacting Coffi directly. Note that even with promotional message opt-out, transactional or administrative emails may be sent (account issues, password resets, or terms or Privacy Policy updates).

Push Notifications

With consent, Coffi may send push notifications or alerts to your mobile device. Control these by adjusting device or in-app settings to disable or limit Coffi push notifications.

Cookie Preferences on Our Website

Control non-essential cookies on the Coffi website is possible. First visit allows choice via cookie consent banner. Later, you can manage cookie preferences at any time. A mechanism exists on the site for reviewing and modifying consent choices. Withdrawing consent or declining cookies will not affect Coffi site access — core services remain available even rejecting non-essential cookies. However, disabling certain functional cookies may result in some features not remembering custom settings.

Browser Settings for Cookies

In addition to on-site controls, manage cookies through your own web browser settings. Most web browsers allow blocking or deleting cookies at your discretion. Refer to your browser’s help documentation for specific instructions, as steps vary by browser.

Note: Configuring your browser to reject all cookies includes strictly necessary cookies — which may result in some site parts not functioning properly. Therefore, granular cookie controls are recommended rather than all-site cookie disabling.

Opt-Out of Analytics

If preferring not to be included in web analytics tracking, disable analytics cookies via described methods (cookie banner or browser settings). Analytics data does not identify individual users, but your choice to opt out of these measurements is respected. Additionally, some third-party analytics providers offer their own opt-out mechanisms. Simply disabling analytics cookies through our cookie preferences or your browser effectively opts you out.

Opt-Out of Advertising Measurement

Advertising measurement is off unless you turn it on. Choosing Analytics only or Decline in the consent banner means no Reddit pixel loads, no advertising identifiers are stored, and no data about your visits or purchases is shared with Reddit. You can withdraw a previously given consent at any time through the cookie-preferences link in Section VI; from that point forward no further advertising data is collected or shared, and stored Reddit identifiers are cleared from your browser.

You can additionally control ad personalization within your Reddit account settings, independently of Coffi.

“Do Not Track” Signals

Some web browsers offer “Do Not Track” (DNT) settings or Global Privacy Control signals enabling tracking preference indication across websites. Currently, no universal standard exists for responding to DNT signals, and consequently, our website may not respond to every Do Not Track signal it receives. However, direct cookie controls are provided, and advertising measurement is off unless you explicitly consent to it, making cookie consent tools or browser settings the primary website tracking control methods. In jurisdictions recognizing Global Privacy Control signals, such signals are honored where applicable. Note that Coffi does not sell personal information. Regulatory DNT/GPC guidance is continuously monitored, with practice adjustments if uniform response standards emerge or law requires.

Mobile App Data Choices

Coffi mobile app users have choices since cookies are not used — tracking choices revolve around other data collection. If the app requests certain permissions (location access, camera access), you can grant or deny those permissions through device settings at any time. Many mobile devices allow resetting or limiting ad identifiers reducing different-app tracking. While the app does not serve ads or use ad trackers, adjusting device privacy settings can reinforce cross-app preferences. Of course, you also have app uninstalling options if no longer wishing to use it, or contacting Coffi to request account/data deletion.

Summary

Coffi enables you to opt out of or customize various data uses. You can unsubscribe from marketing emails, decline or accept cookies as you see fit, and control certain app and browser-based data collection. Coffi strives to make these choices clear and accessible. Having questions or help adjusting preferences? Reach out using provided contact information. Exercising these choices or rights will not result in discrimination, with commitment to honoring your privacy decisions per all applicable laws, including GDPR, CCPA, and other international privacy regulations.

X. Children’s Privacy

Coffi is not intended for children under the age of 13, and personal information from children under 13 is not knowingly collected. If you are under 13, do not use Coffi or provide any information about yourself. This includes not registering for an account, not creating a profile, and not posting any personal data or content.

If it becomes apparent that personal information has been collected from a child under 13 without verified parental consent, that information will be promptly deleted. Are you a parent or guardian discovering your child under 13 created a Coffi account or provided personal information? Alert Coffi as soon as possible for appropriate action.

For certain jurisdiction users, age thresholds may be higher (for instance, 16 in some regions). Applicable age restrictions in those locations are adhered to. Coffi does not intentionally target or market the app to minors.

XI. International Data Transfers

Coffi is a service accessible by worldwide users. The company is based in the United States, and collected data will likely be stored and processed on servers located in the United States and/or other countries. This means your personal information may be transferred to, and maintained on, computers or systems located outside of your state, province, or country, including in jurisdictions where the data protection laws may differ from those of your home jurisdiction.

If located in the European Economic Area (EEA), United Kingdom, or another region with data collection and use laws differing from U.S. law, note that information, including personal data, may transfer to a country and jurisdiction not having the same data protection laws as yours. In such cases, appropriate safeguards ensure your personal data protection. For EEA users, for example, approved contractual data transfer clauses (Standard Contractual Clauses) or other legal mechanisms may be relied upon ensuring information protection. By using Coffi or providing information to us, you explicitly consent to the transfer of your data to other countries as described in this policy, and to the processing of your data in those countries.

Regardless of data processing location, Coffi treats it securely and per this Privacy Policy. Coffi’s security measures globally apply to held data. International data practice questions? Contact Coffi.

XII. Changes to This Privacy Policy

Coffi may update or revise this Privacy Policy periodically to reflect practice changes, technologies, legal requirements, or other operational reasons. If changes are made, the updated Privacy Policy is posted on this page and the “Last Updated” date at the top is updated accordingly. Periodic policy reviews are encouraged to stay informed about information protection.

For significant changes, more prominent notice may be provided or consent sought, as law requires. For instance, Coffi might notify you via email or in-app notification if making substantial changes to personal data collection or use. By continuing to use Coffi after changes become effective, you agree to the revised Policy.

XIII. Contact Us

Your privacy feedback and questions matter. Questions, concerns, or requests regarding this Privacy Policy or personal information handling? Contact Coffi at: info@coffi.com, or by mail at Coffi, Inc., 10 Wendeller Street, South Boston, MA 02127, United States.

Coffi will do its best to respond promptly to your inquiry and address any issues or concerns. Preferring mail contact or needing additional contact options? Refer to the official Coffi website for the most current privacy matter contact information.

Thank you for reading our Privacy Policy. We appreciate your trust in Coffi and are committed to safeguarding your personal data as you explore and share your coffee love with our community!