Privacy Policy
Effective 7 October 2026
Tos Kafe is an app for finding coffee and drink shops in Cambodia, with reviews and shop stamp cards. You can browse shops without an account. If you create an account, we store the details you give us (email, display name, and optionally a phone number and profile photo) together with the reviews, favourites and stamp cards you add in the app.
We don't show ads, we don't sell your data, and we don't use advertising trackers. We never store your location. You can delete your account at any time.
Who we are
Tos Kafe is operated by Erik Harmsen, Siem Reap, Cambodia. For anything in this policy, email toskafe.app@gmail.com.
What we collect
Browsing without an account
You can search, filter and view coffee shops without signing in. We don't collect any personal information from you when you browse.
When you create an account
- Email address and password. Your password is handled by Google Firebase Authentication and is never visible to us.
- Display name. Shown publicly on reviews you write, and shown to a shop when it scans your QR code.
- Phone number (optional) and profile photo (optional), if you choose to add them.
- Google sign-in. If you sign in with Google, Google gives us your name, email address and a link to your Google profile photo.
- Account details we create for you: a random personal QR code used to identify you at participating shops, your account type (for example, regular user, shop owner or shop staff), and the date you signed up.
- Terms of Use. When you accept the Terms of Use, we store the date you accepted them.
While you use the app
- Reviews: the star rating and text you write, the shop it's about, and the date. A copy of your display name and profile photo is saved with each review so it can be shown alongside it.
- Favourites: the shops you save, and when you saved them.
- Blocked users: if you block another user, we store that on your account so their reviews stay hidden from you.
- Reports: if you report a review, we store your account, the review, the reason you chose and the date. We keep reports even after you delete your account, because we need them to moderate reviews.
Stamp cards
Some shops offer stamp cards in Tos Kafe. When you start a stamp card at a shop, we store: the shop, how many stamps you have collected and how many you need, the reward, the start date, the expiry date, and whether the card is complete, redeemed or expired, with those dates. When a card is full, you get a one-time reward QR code. A completed card can be redeemed for one year.
Visits
Each time a shop scans your QR code to give you stamps, we record a visit: your account, the shop, the date and time, the number of stamps given, and which shop staff account scanned it. We do not record your location for this — there is no GPS.
What shops see
When a shop owner or staff member scans your QR code, they see your display name, your profile photo (if you set one) and your stamp card progress at their shop. A shop only sees cards for its own shop.
Shop owners and staff
When you claim a shop, we store your claim request: a contact phone number or Telegram handle, any notes you add to show you own the shop, and the shop details and photos you enter.
A shop owner can invite staff by email. We store which shop a staff member works for and any open invitation. The owner and staff of a shop can see each other's display name and photo.
Phone permissions
- Location (optional, all users): if you allow location permission, the map shows your position on your phone. Tos Kafe does not store or send your location.
- Camera (shop owners and staff only): to scan customer QR codes at the counter. Camera images are not saved or sent anywhere; only the scanned code is used.
Technical data
The app uses Firebase Performance Monitoring, which sends anonymous technical data such as device model, Android version and how quickly screens load. This helps us fix slow or broken parts of the app. It does not identify you personally. We do not use Google Analytics, Crashlytics or any advertising SDKs.
How we use your information
- To run your account and show your reviews and favourites.
- To show your display name and photo next to reviews you write.
- To run your stamp cards: give you stamps when a shop scans your code, show your progress, and give you your reward.
- To let shop owners manage the shop they've claimed and the staff they've invited.
- To handle reports and blocks, and to enforce the Terms of Use.
- To keep the app working and fix problems.
We don't use your information for advertising, and we don't build profiles of you for marketing.
Where your data is stored and who processes it
Your data is stored on Google Firebase servers, primarily in Singapore. Some Google services the app relies on (sign-in and performance monitoring) may process data in other Google data centres. Google processes this data on our behalf under Google's privacy terms for Firebase.
Google Maps
The map in Tos Kafe is provided by Google Maps. When you use the map, Google's map software may send Google technical information such as crash reports, a device identifier, your IP address and how you move the map. Google handles this under its own privacy policy: policies.google.com/privacy. Tos Kafe does not receive or store this information.
Sharing
We don't sell or rent your personal information. We share it only with Google as our service provider (described above), or if we're required to by law.
Some information is shared by design:
- Your display name and profile photo appear next to reviews you write.
- When a shop scans your QR code, its owner and staff see your display name, photo and stamp card progress at that shop.
- The owner and staff of the same shop see each other's display name and photo.
- Shop details entered by shop owners are shown in the app.
How long we keep it
We keep your information for as long as you have an account. When you delete your account:
- Removed: your account and login, your profile and your profile photo.
- Removed: your favourites.
- Removed: your shop claims.
- Removed: your stamp cards, your stamp records and your visit records.
- Kept, but made anonymous: your reviews stay in the app, but your name and photo are removed and the review shows as written by "Deleted user".
- Kept: your review reports, which we need for moderation.
- Kept: if you were shop staff, records of stamps you gave stay with the shop as its record.
- If you own a shop: the shop stays listed and can be claimed again; its photos stay; its staff lose staff access.
Deletion cannot be undone.
Your choices
- Edit your details in the app under Account → Edit profile.
- Delete your account in the app under Account → Settings → Delete my account, or request it by email — see our account deletion page.
- Location and camera permissions can be switched off at any time in your phone's app settings. The map still works without location; it just won't show your position.
- Ask us for a copy of the information we hold about you, or to correct it, by emailing toskafe.app@gmail.com.
Children
Tos Kafe is not directed at children under 13 and we don't knowingly collect information from them. If you believe a child has created an account, email us and we'll delete it.
Security
Data travels between the app and our servers over encrypted connections. Access to stored data is restricted by Firebase security rules so that, for example, only you can edit your own profile and a shop can only see its own stamp cards. No system is completely secure, but we take reasonable steps to protect your information.
Changes to this policy
When we add features that use new information, we'll update this policy and change the date at the top.
Contact
Questions about privacy: toskafe.app@gmail.com