Privacy Policy

Effective 5 September 2026

Tos Kafe is a coffee shop discovery app for Cambodia. You can browse shops without an account. If you create an account, we store the details you give us (email, display name, and optionally a phone number and profile photo) together with the reviews and favourites you add in the app.

We don't show ads, we don't sell your data, and we don't use advertising trackers. You can delete your account at any time.

Who we are

Tos Kafe is operated by Erik Harmsen, Siem Reap, Cambodia. For anything in this policy, email toskafe.app@gmail.com.

What we collect

Browsing without an account

You can search, filter and view coffee shops without signing in. We don't collect any personal information from you when you browse.

When you create an account

Email address and password. Your password is handled by Google Firebase Authentication and is never visible to us.
Display name. Shown publicly on reviews you write.
Phone number (optional) and profile photo (optional), if you choose to add them.
Google sign-in. If you sign in with Google, Google gives us your name, email address and a link to your Google profile photo.
Account details we create for you: a random personal QR code used to identify you at participating shops, your account type (for example, regular user or shop owner), and the date you signed up.

While you use the app

Reviews: the star rating and text you write, the shop it's about, and the date. A copy of your display name and profile photo is saved with each review so it can be shown alongside it.
Favourites: the shops you save, and when you saved them.
Notifications: messages we send you inside the app, and whether you've read them.
Location: if you allow it, the app uses your phone's location to show where you are on the map. Your location is used on your phone only and is not stored on our servers.

If you register as a shop owner

When you claim a shop, we also store your claim request: a contact phone number or Telegram handle, any notes you add to show you own the shop, and the shop details and photos you enter.

Technical data

The app uses Firebase Performance Monitoring, which sends anonymous technical data such as device model, Android version and how quickly screens load. This helps us fix slow or broken parts of the app. It does not identify you personally. We do not use Google Analytics, Crashlytics or any advertising SDKs.

How we use your information

To run your account and show your reviews and favourites.
To show your display name and photo next to reviews you write.
To let shop owners manage the shop they've claimed.
To send you in-app notifications, for example when a shop claim is approved.
To keep the app working and fix problems.

We don't use your information for advertising, and we don't build profiles of you for marketing.

Where your data is stored and who processes it

Your data is stored on Google Firebase servers, primarily in Singapore. Some Google services the app relies on (sign-in and performance monitoring) may process data in other Google data centres. The map is provided by Google Maps. Google processes this data on our behalf under Google's privacy terms for Firebase.

Sharing

We don't sell or rent your personal information. We share it only with Google as our service provider (described above), or if we're required to by law.

Some information is public by design: your display name and profile photo appear next to reviews you write, and the shop details entered by shop owners are shown in the app.

How long we keep it

We keep your information for as long as you have an account. When you delete your account:

your account, profile, profile photo and login are removed;
your favourites are removed;
your reviews stay in the app but are made anonymous — your name and photo are removed and the review shows as written by "Deleted user";
if you were a shop owner, the shop listing stays in the app (it's public business information) but is no longer linked to you, and any claim requests you made are deleted.

Deletion cannot be undone.

Your choices

Edit your details in the app under Account → Edit profile.
Delete your account in the app under Account → Settings → Delete my account, or request it by email — see our account deletion page.
Location can be switched off at any time in your phone's app permissions. The map still works; it just won't show your position.
Ask us for a copy of the information we hold about you, or to correct it, by emailing toskafe.app@gmail.com.

Children

Tos Kafe is not directed at children under 13 and we don't knowingly collect information from them. If you believe a child has created an account, email us and we'll delete it.

Security

Data travels between the app and our servers over encrypted connections. Access to stored data is restricted by Firebase security rules so that, for example, only you can edit your own profile. No system is completely secure, but we take reasonable steps to protect your information.

Changes to this policy

When we add features that use new information — for example loyalty stamp cards — we'll update this policy and change the date at the top.

Contact

Questions about privacy: toskafe.app@gmail.com