Privacy Policy — No. I Mean Good Coffee. (NIMGC)

Effective date: 2026-07-22 Last updated: 2026-07-22 Controller: Overwatch Data Services, LLC, 167 Seth Ln, Barboursville, WV 25504, USA Contact: hello@nimgc.com

1. Who we are

No. I Mean Good Coffee. ("NIMGC", "we", "us") is a mobile application that helps people find specialty coffee shops and roasters. This Privacy Policy explains what personal information we collect when you use the NIMGC app, how we use it, who we share it with, and what rights you have.

2. Information we collect

We collect the following categories of information:

2.1 Information you provide directly

Account information: email address and password (hashed and stored by our authentication provider).
Profile information: first name, last name, self-selected industry categories (e.g., "Cafe Owner", "Barista"), and an optional profile photo.
User-generated content: shops you submit, photos you upload (shop photos, check-in photos, avatars), reviews, comments, check-in posts, invitation codes you issue, and any notes you include when reporting content or submitting ownership claims.
Invitation metadata: the email address of a person you invite so we can pre-fill your email draft (the invitation is sent through your own email client — we do not send it on your behalf).
Communications: messages you send to us through hello@nimgc.com.

2.2 Information collected automatically

Approximate and precise location: when you grant "While using the app" location permission, we read your device coordinates to center the map, sort nearby shops by distance, and verify proximity when you check in at a shop. We do not track your location in the background.
Device and usage information: operating system version, device model, app version, crash diagnostics, and interaction events (e.g., which screens you visit). This is used for stability and product improvement only.
Session and authentication tokens: stored locally on your device and sent to our authentication provider to keep you signed in.

2.3 Information from third parties

Authentication metadata from Supabase Auth (sign-up timestamps, email confirmation status).
Map tiles and geocoding from Apple Maps (iOS) or Google Maps (Android). Your coarse coordinates are transmitted to these providers when you use the map.

We do not knowingly collect information from children (see section 9).

3. How we use your information

We use your information to:

Create and maintain your account, sign you in, and keep you signed in.
Show you specialty-coffee shops near you and sort search results by distance.
Let you submit shops, upload photos, leave reviews, post check-ins, favorite shops, and interact with other members.
Run the invitation-code system that gates contributor access.
Enforce our Terms of Service and Community Guidelines, including reviewing content reports and acting on violations.
Respond to your support requests.
Comply with legal obligations (e.g., responding to lawful requests from authorities).
Diagnose and fix bugs.

We do not sell your personal information. We do not use your information for cross-site advertising or targeted ads.

4. Legal bases for processing (EU / UK users)

If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal bases under the GDPR / UK GDPR are:

Contract (Art. 6(1)(b)): providing the NIMGC service to you.
Legitimate interest (Art. 6(1)(f)): security, fraud prevention, product improvement, enforcing our terms.
Legal obligation (Art. 6(1)(c)): responding to lawful requests and retaining records required by law.
Consent (Art. 6(1)(a)): where we ask explicitly (e.g., location permission).

5. How your content is shared

Public by design: your display name, profile photo, self-selected categories, submitted shops, shop photos, reviews, comments, and check-in posts are visible to other signed-in NIMGC users. Treat this content as public.
Visible only to you or admins: your email, follow requests you send, blocks you make, invitation codes you issue, favorites, and reports you file.
Third-party processors: we share data with service providers who process it on our behalf:
- Supabase, Inc. — database, authentication, file storage. See Supabase Privacy Policy.
- Expo (Expo Application Services) — app distribution and build infrastructure. See Expo Privacy Policy.
- Apple Inc. and Google LLC — map tiles, geocoding, and platform services when you use the app on their OS.
Legal requests: we disclose information when compelled by valid legal process, or to protect the rights, property, or safety of NIMGC, our users, or the public.
Business transfers: if NIMGC is acquired or merged, your information may be transferred to the successor entity subject to this Privacy Policy.

We do not share your data with advertising networks, data brokers, or analytics services beyond what is strictly needed to operate the app.

6. Location data

We request foreground location permission only ("While Using the App"). We never run location updates in the background.
Location is used to: center the map on your position, sort shops by distance, and verify you are physically at a shop when you post a check-in.
When you post a check-in, we store the GPS coordinates of the check-in with the post so moderators can verify authenticity. You can delete your check-ins at any time.
You can revoke location permission at any time in your device Settings. The map and distance features will degrade gracefully.

7. Data retention

Account data is retained for the life of your account.
User-generated content is retained until you delete it or we remove it for a policy violation.
Content reports are retained for 24 months for audit and safety purposes, even after the reported content is removed.
Server logs and crash diagnostics are retained for 90 days.
Deleted accounts: when you delete your account, we permanently remove your profile, avatar, favorites, follows, blocks, and invitation codes from our live systems within 30 days. Your shop submissions and check-in posts are either anonymized or deleted depending on your deletion preference. Backups may retain information for up to 30 days before being overwritten.

8. Your rights

Depending on where you live, you may have the following rights:

Access: request a copy of the personal information we hold about you.
Correction: ask us to fix inaccurate data.
Deletion: delete your account (in-app: Profile → Delete account) or request deletion by emailing hello@nimgc.com.
Portability: request an export of your data in a machine-readable format.
Object / restrict: object to or restrict certain processing.
Withdraw consent: revoke permissions (e.g., location) at any time.
Complain: lodge a complaint with your local data protection authority.
California residents (CCPA/CPRA): request disclosure of categories and specific pieces of information collected, request deletion, and opt out of sale or sharing (we do not sell or share personal information for cross-context behavioral advertising).

To exercise any of these rights, email hello@nimgc.com. We will respond within 30 days.

9. Children's privacy

NIMGC is not directed to children under 13 (or the local equivalent, e.g., under 16 in parts of the EU). We do not knowingly collect personal information from children below those ages. If you are a parent or guardian and believe your child has created a NIMGC account, email hello@nimgc.com and we will delete the account.

10. Security

We use industry-standard safeguards to protect your information:

Passwords are hashed using bcrypt by our authentication provider.
Data in transit is encrypted with TLS.
Row-level security is enforced on every database table.
Access to production systems is restricted to authorized personnel.

No system is perfectly secure. If you discover a vulnerability, please email hello@nimgc.com with the subject line "Security".

11. International transfers

Your information may be stored and processed in the United States or other countries where our service providers operate. When we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses.

12. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

13. Third-party links

The app may contain links to external websites (e.g., a shop's own website). We are not responsible for the privacy practices of those sites.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you in-app before the changes take effect and update the "Last updated" date above. Continued use of NIMGC after changes take effect constitutes acceptance of the updated policy.

15. Contact

Questions, requests, or complaints:

Email: hello@nimgc.com
Postal: Overwatch Data Services, LLC, 167 Seth Ln, Barboursville, WV 25504, USA