Privacy Policy

Coffeepass (Pty) Ltd (“CoffeePass”, “we”, “us”, or “our”) operates the CoffeePass membership platform and the mycoffeepass.app website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

We process personal information in line with South Africa’s Protection of Personal Information Act, 2013 (POPIA), and applicable data-protection laws in the markets where we operate. By using CoffeePass, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not access or use our services.

Responsible party: Coffeepass (Pty) Ltd, registration number 2026/273656/07, a private company registered in the Republic of South Africa.
Information Officer (POPIA): contactable at support@mycoffeepass.app.

We may collect the following types of information:

• —Account information: your name, email address, and authentication credentials when you create an account or join the waitlist.
• —Profile information: an optional profile photo you choose to upload.
• —Location information: with your permission, your device location, used to show nearby participating cafés and distances. You can disable this at any time in your device settings.
• —Usage information: cafés you view and save, membership redemptions, your tier, and in-app activity.
• —Device information: device type, operating system, app version, unique identifiers, and push-notification tokens.
• —Payment information: subscriptions are billed by the Apple App Store or Google Play. We do not collect or store your full payment-card details; we receive subscription status and transaction identifiers to activate and manage your membership.
• —Communication data: information you provide when you contact us or respond to our communications.

We use the information we collect to:

• —Provide, maintain, and improve the CoffeePass platform and membership services
• —Process your membership, tier, and redemptions, and manage your account
• —Show nearby cafés and location-based features where you have granted permission
• —Send you service updates and, where you have consented, product information
• —Respond to your enquiries and provide customer support
• —Understand how members use our platform to improve the experience
• —Detect, prevent, and address fraud, abuse, and security issues
• —Comply with applicable legal obligations

We do not sell your personal information. We may share it in the following limited circumstances:

• —Service providers: trusted providers who process information on our behalf under data-processing agreements, including Google Firebase (authentication, database, storage, analytics, and push messaging), RevenueCat (subscription management), the Apple App Store and Google Play (payment processing), Google Maps Platform (maps and place data), and app-delivery and notification services.
• —Café partners: a café sees only what is needed to honour a redemption at the point of use. Beyond individual redemptions, cafés receive only aggregated, anonymised usage data unless you expressly consent otherwise.
• —Legal requirements: where required by law, or to protect the rights, property, or safety of CoffeePass, our members, or others.
• —Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

Some of our providers process information outside South Africa. Where we transfer personal information across borders, we take the steps required by POPIA and other applicable law to ensure it receives an adequate level of protection, including provider commitments and contractual safeguards.

We retain your personal information for as long as your account is active or as needed to provide our services. After you close your account, we retain information only as long as necessary to meet legal, tax, and accounting obligations, to resolve disputes, and to prevent fraud and abuse, after which it is deleted or anonymised. Transactional records are typically retained for five years to meet financial-record requirements; other data is deleted within 30 days of account closure unless a longer period is legally required. You may request deletion at any time by contacting us at support@mycoffeepass.app.

Depending on your jurisdiction, you may have the right to:

• —Access the personal information we hold about you
• —Request correction of inaccurate or incomplete information
• —Request deletion of your personal information
• —Object to or restrict the processing of your information
• —Withdraw consent where processing is based on consent, including for location and marketing

To exercise any of these rights, please contact us at support@mycoffeepass.app. In South Africa you may also lodge a complaint with the Information Regulator at inforeg@justice.gov.za. Many rights can be exercised directly in the app — for example, editing your profile, deleting your account, or disabling location access.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

The CoffeePass service is not directed to, and is not intended for, children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it.

Our website uses cookies and similar technologies, and our app uses analytics tools (see Information Sharing), to operate and improve our services and understand usage. You can control cookies through your browser preferences and limit ad tracking through your device settings. Disabling certain cookies may affect the functionality of our services.

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the “Last updated” date at the top of this policy and, where appropriate, by notifying you directly. Your continued use of CoffeePass following any changes constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, or wish to reach our Information Officer, please contact us at:

Coffeepass (Pty) Ltd (registration number 2026/273656/07)
support@mycoffeepass.app