The short version
- We collect what the app needs to work: your account, your profile, the visits you log and your friends list.
- Your logs and reviews are private. Only friends you've approved can see them.
- Your location is used to find shops near you and is never stored.
- There are no ads, no tracking and no analytics in Odo, and we never sell your information.
- You can delete your account, and everything in it, from inside the app at any time.
1. Who we are
Odo is a mobile app that shows which specialty coffee shops meet an objective quality standard. It is operated by [the legal name of the person or company that runs Odo], based in [country]. In this policy, "we" and "us" mean that operator. This policy covers the Odo app for iPhone and Android and this website.
2. What we collect
Your account. Your email address, and how you signed in: with your email and a password, with Apple, or with Google. If you use email, your password is stored only in hashed form by our authentication provider; we can never see it. If you use Apple or Google, we receive the email address, and the name and profile photo where that provider shares them. With Apple you can choose "Hide My Email", in which case we only see a relay address.
Your profile. A display name (up to 50 characters), a unique username, and a profile photo if you add one.
Your logs. Each visit you log: the shop, the date of the visit, your Odo-Meter rating from 1 to 10, and a written review if you add one.
Friends, blocks and reports. The friend requests you send and receive and whether they were accepted, the people you block, and any report you make about another user (the reason you choose and any details you write).
Notifications. If you allow notifications, a push token that identifies your device to the notification service, and which kinds of notification you've turned on or off.
Location. If you allow it, your phone's location while you're using the app, to find certified shops near you. Your location is sent with the search and used only to work out which shops are within your radius. It is not stored, not linked to your account and never collected in the background. If you don't allow location, you can search by city instead.
Camera and photos. Only if you choose to take or pick a profile photo. Only the photo you choose is uploaded; we don't access the rest of your library.
Technical information. Like any online service, the providers that host Odo keep standard server logs (such as IP addresses, request times and errors) to keep the service running and secure.
What we don't collect. Odo contains no advertising, analytics or tracking tools. We don't build a profile of you for marketing, and we don't track you across other apps or websites.
3. How we use it
- To run your account and sign you in.
- To show you certified shops, nearby or in the city you search.
- To save your logs and show them to you and to the friends you've approved.
- To calculate each shop's public Odo-Meter average (see below).
- To let people find you by username and send you friend requests.
- To send push notifications you've allowed: a new friend request, an accepted request, and a friend logging a visit. You can turn each kind off in the app.
- To send account emails, such as a welcome email when you sign up and password-reset emails you ask for.
- To review reports, act on abuse and keep Odo safe.
We don't use your information for advertising, we don't sell it, and Odo has no AI features: your information is not used to train AI models.
4. Who can see what
- Anyone signed in to Odo can find you by username and see your username and profile photo. Profile photos are stored so they can be shown to other users; anyone with a photo's direct link can open it.
- Friends you've approved also see your display name and your logs and reviews. Either of you can remove the friendship at any time.
- Everyone can see each certified shop's Odo-Meter average and the number of ratings behind it. This is an average of ratings from the past 365 days, shown only once a shop has 10 or more. It never shows who rated, and individual logs are never public.
- People you block can't find you or send you friend requests, and blocking ends any friendship between you. They aren't told they've been blocked.
- The Odo team can see reports you make and the account they're about, so we can act on them.
5. Service providers
We use a small number of providers to run Odo. They process information only on our behalf, to provide their service:
- Supabase: our database, sign-in and file storage (your account, profile, photo, logs and friends).
- Google Cloud: hosts our server, which sends notifications and emails. Our database backups are also stored there.
- Expo: delivers push notifications to your device, and delivers app updates.
- Resend: sends our emails.
- Apple and Google: if you choose to sign in with them. Their own privacy policies apply to your Apple or Google account.
- Cloudflare: hosts this website.
Shop details such as opening hours and websites come from Google Places. None of your information is sent to Google for this. When you tap Get Directions, the shop's address opens in Apple Maps or Google Maps, and their privacy policies apply from there.
We may also share information if the law requires it, or to protect the safety of our users or the public.
6. How long we keep it, and deleting it
We keep your information for as long as you have an account. You can edit or delete any log at any time, and change your profile whenever you like.
You can delete your account in the app: Profile › Edit Profile › Delete account. This immediately and permanently deletes your account, your profile and photo, your logs and reviews, your friendships, blocks and reports, your notification settings and your devices' push tokens. Your ratings stop counting towards shops' averages. If you can't get into the app, email us and we'll do it for you. See the account deletion page for details.
Copies in our database backups are deleted as those backups expire, within [number] days.
7. Security
All connections to Odo are encrypted. Access to the database is enforced row by row: the app can only read your own information and what your friends have shared with you. Our service keys are kept on our servers and are never in the app. No system is perfectly secure, but we work to protect your information and to collect as little as we can.
8. Children
Odo is not meant for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has an account, contact us and we'll delete it.
9. Your rights
You can see and correct your profile and logs in the app, and delete your account at any time. You can also email us to ask for a copy of the information we hold about you, or to ask any question about it. Depending on where you live (for example in the EU, the UK or California), you may have further rights, such as to object to or restrict how we use your information, or to complain to your local data protection authority. We'll respond to any request within the time the law requires. We don't sell or "share" personal information as California law defines it.
10. Where your information is stored
Our providers store and process information in [the United States]. If you use Odo from elsewhere, your information is transferred there, with the safeguards our providers offer for international transfers.
11. Changes to this policy
If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect.
12. Contact
Questions about your privacy, or a request about your information: email [email protected].