Privacy

Hosted Beta stores account, collection, Hunt List, achievement, ranking, and submitted unknown-can barcode photos needed to review product requests. Collector usernames, avatars, status, favorites, selected look, discovered-can walls and earned badges are public collector displays. Private logs, Hunt Lists, receipts, wallet transactions and account/session data are not part of public profiles. Receipts are retired; prior receipt records are retained for audit and do not drive new progression. Only a cropped barcode image is kept on your device for an optional can request. If you consent and send the request, that crop or your selected barcode photo is uploaded for catalog review. Other scanner frames are discarded. Limited first-party interaction events help us measure scans, reveals, Hunt use, notification choices and beta updates; they do not change rewards. Feedback stores your description plus app/Android version, device model, screen and selected skin. No password, session token, unrelated device content or automatic screenshot is attached. You may optionally attach front and back label photos to an unknown-can request. On-device text reading can suggest editable brand, flavor and package size; it does not verify a product or barcode. Those private review photos are uploaded only after your explicit confirmation, are available only to authorized catalog reviewers, and are removed with account deletion. Failed uploads retain private pending copies on your device so you can retry. Hosted account, session and collection data, and barcode photos you choose to submit, are processed on Caffeine Club's production service hosted by Render. Data retained in historical backups and by service providers remains subject to the retention and deletion practices described here; migration does not mean all historical copies or provider logs have been immediately erased. Signed-in Android installations (Google Play and legacy APK) use Firebase Cloud Messaging to obtain and register a device notification token, including when Android notification permission is denied. Android permission and your notification preferences control notification display and delivery eligibility; they do not prevent token registration. Recovery codes are stored as hashes, never sent by email; losing both your password and saved codes is not recoverable from a username alone. Account deletion removes live private data and public profile, retaining a minimal deletion marker containing the internal account ID and deletion date; encrypted historical backups retain copies for up to30days and deletions must be reapplied before restore. If you choose to add a recovery email, we store that address and send verification and password-reset messages through our dedicated Gmail sender. Recovery enrollment is optional and separate from the iOS waitlist. Reports about an identified can also include its catalog and artwork reference, not a photo attachment. Firebase and ML Kit process installation, application and diagnostic information under their SDK data-disclosure documentation; on-device barcode recognition does not mean those SDKs process no data. The optional iOS waitlist stores your email and signup date only to notify you about iOS availability. It does not create an app account or enroll you in unrelated marketing. Message @caffeineclubapp to request removal from the waitlist. Waitlist emails are not public. Beta builds beginning with code48 include account recovery and deletion controls. Confirmed deletion removes account-scoped caches and newly account-scoped temporary photos/share files on that device. Older unowned cache files cannot safely be attributed and expire through device cache handling; PNGs you explicitly saved to your gallery remain under your control. Check the download page for the current build version. Code55 adds optional recovery-email controls. The app reports current delivery availability; saved recovery codes remain a fallback. Adding or changing an address requires the current password and mailbox verification. Recovery email is private account-security data, not a marketing subscription or public profile field; it is removed with account deletion. Verification/reset tokens expire after30minutes and are single-use; only their hashes and delivery metadata are stored. A confirmed password reset revokes old sessions and device registrations without deleting collection or rewards. Never send passwords or reset links to support. When Gmail recovery delivery is enabled, the Gmail API sends account-security messages from the dedicated Caffeine Club mailbox using only the gmail.send permission. We do not read Gmail inboxes. Google processes recipient addresses and message contents for delivery. Sender authorization credentials are held in protected local or managed secret storage, not public profiles or app downloads. Google API information is used only for this account-security service, not advertising or sale, in accordance with the Google API Services User Data Policy, including its Limited Use requirements. Optional can reactions are private account preferences, synced only to your own signed-in account and removed with account deletion. Reactions do not change rewards or automatically select favorites. Up to four cans you explicitly pin to your public collector profile are public; private reactions are not included in other collectors' views, leaderboards, share cards or notifications. If you separately choose to contribute a public can rating, that explicit choice contributes to aggregate can-rating counts without displaying your identity. Earlier private reactions are never published or included automatically. You can change or clear your public rating; account deletion removes it. When first-rating rewards are enabled, the first new public rating of a collected can earns 5 Caffeine Power, equally for every reaction. Edits, clearing and re-rating do not earn another reward; historical ratings are not backfilled. Rating remains optional. Public ratings do not change collection ownership or favorites; earned Caffeine Power contributes to existing Power totals and rankings. Counts respect existing account visibility, test-account and viewer-block filters. Collection activity is not a medically validated measure of caffeine consumption. A scan does not prove that you drank a can; collecting never requires increasing consumption. See /responsibility. Optional Hunt store search processes the city or ZIP you enter to find mapped store candidates around an approximate area center. It does not request device GPS or add that area to your collector profile or gameplay history. The app may retain your entry as screen state; normal infrastructure request metadata may be processed. Directions and retailer links open external services under their own policies. The separate public OSM/Census directory and its attribution/export contain no Caffeine Club account or collection data. When you explicitly accept Community Rules at /community, we store the rules version, content hash and acceptance time for your account. An app update, login or sync is not acceptance by existing users. Collector reports store the reporting account, reported collector, selected reason, optional description and private review history. Block selections are private account-linked preferences used for signed-in presentation; they do not remove content from the public internet or change underlying ranks, collections or rewards. Safety records linked to a deleted reporting or reported account are removed from the live database; existing encrypted-backup retention still applies.

Android users can download the beta.

On iPhone? Download on the App Store. Free · iOS17 or later.

Want to test upcoming updates? Join the optional TestFlight beta.

Collector safety · Community Rules · Contact support