Privacy Policy

BrewScout ("we", "our", or "the app") is committed to protecting your privacy. This Privacy Policy explains what information is accessed when you use the app, how it is used, and your rights — including rights under the California Consumer Privacy Act (CCPA), the California Online Privacy Protection Act (CalOPPA), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and Quebec's Act respecting the protection of personal information in the private sector (Law 25).

Information Accessed by the App

Location Data (On-Device Only)

BrewScout requests access to your device's location to find coffee shops near you. Your location coordinates are:

• Precise coordinates are sent to the Google Places API and OpenStreetMap Overpass API to find nearby cafes
• Cached locally on your device for faster app loading and offline use
• Never sent to any server owned or operated by BrewScout
• Never stored in any database we control

Favorites and Cached Data (On-Device Only)

When you save a coffee shop as a favorite or the app caches nearby shop data, this information is stored exclusively on your device using local storage (AsyncStorage). This data never leaves your device and is not accessible to us.

Third-Party Services

BrewScout uses one third-party API service that receives data from your device:

Google Places API

When you view a coffee shop's detail page, the app sends a request to the Google Places API containing:

• The shop's approximate location (latitude and longitude)
• The shop's name

This is used to retrieve photos, ratings, reviews, phone numbers, websites, and opening hours for that shop. This data is displayed in the app and not stored by us. Google's use of this data is governed by the Google Privacy Policy.

OpenStreetMap (Overpass API)

The app queries the OpenStreetMap Overpass API with your approximate location to find nearby cafes. OpenStreetMap is a community-driven open data project. See the OpenStreetMap Foundation Privacy Policy.

Information We Do NOT Collect

BrewScout does not operate any servers, databases, or analytics platforms. We do not collect, store, sell, or transmit:

• Your name, email address, or phone number
• Account credentials (the app has no user accounts or login)
• Location history or movement patterns
• Usage analytics or behavioral tracking data
• Advertising identifiers or device fingerprints
• Cookies or tracking pixels
• Any data from other apps on your device

Data Sharing and Sale

We do not sell, rent, trade, or share any personal information with third parties. Because we do not collect personal information, there is no data to share. The only data transmitted from your device is your precise location coordinates, sent directly to Google Places API and OpenStreetMap to find nearby coffee shops.

California Privacy Rights (CCPA / CalOPPA)

Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information. Because BrewScout does not collect, store, or sell any personal information, most CCPA provisions do not apply. However, for transparency:

• Right to Know: You have the right to know what personal data is collected. BrewScout collects no personal data.
• Right to Delete: You can delete all locally stored data by clearing the app's data in your device settings or by uninstalling the app.
• Right to Opt-Out of Sale: We do not sell personal information. There is nothing to opt out of.
• Right to Non-Discrimination: We do not discriminate against users who exercise their privacy rights.

CalOPPA Compliance

In accordance with the California Online Privacy Protection Act (CalOPPA):

• This privacy policy is accessible from within the app and from the app's store listing
• You will be notified of any changes to this policy on this page
• You can visit this page at any time to review the current policy
• The effective date is listed at the bottom of this page

Do Not Track

BrewScout does not track users in any way. We honor Do Not Track signals by default because we have no tracking mechanisms to disable. The app functions identically regardless of your browser or device's Do Not Track setting.

Canadian Privacy Rights (PIPEDA / Quebec Law 25)

Federal Privacy Law (PIPEDA)

If you are a Canadian resident, the Personal Information Protection and Electronic Documents Act (PIPEDA) governs how private-sector organizations collect, use, and disclose personal information. Because BrewScout does not collect, store, or sell any personal information, most PIPEDA provisions do not apply. For transparency:

• Accountability: BrewScout takes responsibility for the limited data that passes through the app. The only data transmitted from your device is your location coordinates, sent directly to Google Places API and OpenStreetMap.
• Identifying Purposes: Location data is used solely to find nearby independent coffee shops. It is not used for any other purpose.
• Consent: Your consent to location access is requested by your device's operating system before the app can access it. You may withdraw consent at any time in your device settings.
• Limiting Collection: We collect no personal information beyond what is strictly necessary for the app to function.
• Right of Access: You have the right to request access to any personal information we hold about you. Because we hold none, there is nothing to provide.
• Challenging Compliance: You may direct privacy-related questions or complaints to us at brewscout.reports@gmail.com. You also have the right to contact the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

Quebec Privacy Law (Law 25 / Bill 64)

Quebec's Act respecting the protection of personal information in the private sector (Law 25) imposes additional requirements for Quebec residents. In compliance with Law 25:

• No Personal Information Collected: BrewScout does not collect, store, or use personal information as defined under Law 25.
• No Profiling: The app does not create profiles of individuals, does not use automated decision-making, and does not track behavior over time.
• Data Minimization: Only the minimum data required for the app to function (your location, sent to third-party APIs) is used.
• Third-Party Services: Location data is shared with Google Places API and OpenStreetMap solely to return nearby coffee shop results. These services have their own privacy policies linked in the Third-Party Services section above.
• Right to Withdraw Consent: You may withdraw location permission at any time via your device settings.
• Privacy by Design: BrewScout is built with privacy as a default — no accounts, no tracking, no servers, and no data retention.
• Contact and Complaints: Privacy inquiries may be directed to brewscout.reports@gmail.com. Quebec residents may also contact the Commission d'accès à l'information (CAI) at cai.gouv.qc.ca.

Email Reports

If you choose to report an issue or suggest a shop using the in-app report feature, the app opens your device's default email client with a pre-filled draft addressed to [email protected]. This email is sent through your own email account, not through any system we operate. We only receive the information you voluntarily choose to send. You can edit or delete the draft before sending.

Children's Privacy

BrewScout does not knowingly collect any personal information from anyone, including children under the age of 13. The app does not require any personal information to function and does not have user accounts or registration.

Data Security

Since all user data is stored locally on your device and we do not operate servers or databases, the security of your data depends on your device's own security measures (such as screen lock, encryption, and OS updates). We recommend keeping your device software up to date.

Your Choices and Controls

• Location Permission: You can deny or revoke location permission at any time in your device's Settings. The app will use cached data if available.
• Favorites: You can remove any saved favorite from within the app at any time.
• Cached Data: You can clear all cached data by clearing the app's storage in your device settings.
• Uninstall: Removing the app from your device permanently deletes all locally stored data including favorites and cache.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated effective date. We encourage you to review this page periodically. Continued use of the app after changes constitutes acceptance of the updated policy.