CofifyPrivacy policy
This policy explains what the Cofify iPhone app and this website do with personal data, why, and what you can do about it. It is written for the General Data Protection Regulation (GDPR), article 13.
In short
- You can browse Cofify without an account.
- An account holds your email address, your name, what you save, and the reports and photos you send.
- Your location stays on your iPhone.
- No ads, no sale of data, no tracking across apps or websites, no third-party analytics.
- You can download your data or delete your account in the app, under Profile.
Who is responsible
Cofify is run by David Campero Maña, Amsterdam, the Netherlands. He is the controller of your personal data. Write to privacy@cofify.app about anything in this policy. Cofify has no data protection officer; your message reaches the person responsible.
Using Cofify without an account
The app downloads the guide (venues, menus, photos) from our servers. Like any server, they see the IP address your request comes from. Our hosting provider keeps these request logs for a short time (one day on our current plan) to run and secure the service. We do not use them to find out who you are.
Your recent searches are stored on your iPhone only.
Location
If you allow it, the app uses your location to centre the map and show how far away venues are. This happens on your iPhone. Your location is never sent to Cofify. When you ask for directions, the app opens Apple Maps with the venue’s location, not yours.
With an account
You need an account to save venues and to send reports or photos. You sign in with Apple or with Google. We keep:
Account and profile
- Your email address, as given by Apple or Google. With Apple you can choose to share a private relay address instead.
- An account number, which sign-in service you used, when you joined and when you last signed in.
- Your name: what Apple or Google passes on when you first sign in, or what you enter yourself (first and last name).
- If you choose to add them: a phone number and its country, and a profile picture. We use the phone number only to contact you about something you reported.
- Which version of this policy you saw when you signed up, and when. Whether Performance diagnostics is on, and when you last changed it.
Your profile picture is stored so that anyone who has its exact web address can open it. The app shows it to you; our team can see it too. We do not publish it anywhere.
Saved venues
Which venues you saved, and when, so your list is the same on every iPhone you sign in on.
Reports
When you report a problem with a venue, send feedback or report a bug, we keep: what the report is about (the venue, a category, the part of the app), your message, and our reply. Each report also carries the app version, the iOS version, the iPhone model and your language and region setting, so we can reproduce a problem. Our team sees your name and email address next to the report, so we can reply. Please do not put personal details in a message that we do not need.
Photos
You can send photos of a venue. Before upload, the app removes the photo’s embedded data, such as its GPS position and camera details. We keep the photo, which venue and which shot it is, and where it stands in review. A photo waiting for review is private: only you and our team can see it. If we approve it, it appears on the venue’s page for everyone, without your name or anything else that identifies you. If we decline it, we delete the image and keep the decision so you can read it under My reports.
Signing in and security
While you are signed in, our hosting provider keeps the IP address and app details of each sign-in session, to keep your account secure. They go when the session ends or when you delete your account. Our servers limit how many reports and photos one account can send per hour, to stop abuse.
Why we use your data, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Your account and profile, saved venues, handling your reports and photos, replying to you | Performing our agreement with you (the terms of use), art. 6(1)(b) |
| Showing approved photos on venue pages | Performing our agreement with you, art. 6(1)(b) |
| Performance diagnostics kept on your iPhone | Your consent, art. 6(1)(a); you can switch it off at any time |
| Request logs, sign-in sessions, abuse limits, keeping records of deleted accounts | Our legitimate interest in a secure, working service, art. 6(1)(f) |
| Answering emails, including privacy requests | Our legitimate interest in answering you, art. 6(1)(f); for rights requests, our legal obligation, art. 6(1)(c) |
You do not have to give us any data to browse. Without an account you cannot save venues or send reports or photos.
Performance diagnostics
In the app, Profile has a switch called Performance diagnostics. Off by default. When on, this iPhone keeps Apple’s performance reports about Cofify. They are not sent to us.
These reports come from Apple’s MetricKit and can contain the device and app build, crash details and how long screens took. The app keeps at most 20 of them, for at most seven days. Turning the switch off, signing out or deleting your account clears them. We store only the position of the switch with your account, as a record of your choice. This switch does not control the diagnostics iOS itself shares with Apple; that is in your iPhone settings.
Where your data is stored
Your account data, saved venues, reports and photos are stored with Supabase in the European Union, in Frankfurt, Germany.
Who receives your data
- Supabase hosts our database, sign-in and file storage, as our processor.
- Cloudflare serves this website and forwards email sent to @cofify.app addresses, as our processor.
- Google hosts the mailbox those emails are forwarded to. If you sign in with Google, Google confirms who you are and passes us your email address and name.
- Apple distributes the app through the App Store, provides Sign in with Apple, and draws the map and gives directions (MapKit and Apple Maps). To draw the map, your iPhone requests map images from Apple.
Apple and Google handle sign-in, the App Store and maps under their own privacy policies. Inside Cofify, only the team that runs it can see account data, through an internal tool. We share data with authorities only when the law requires it. We never sell your data.
Transfers outside the EU
Supabase, Cloudflare, Apple and Google are companies with operations in the United States. Where one of them can access personal data from outside the European Economic Area, the transfer is protected by its certification under the EU–US Data Privacy Framework, or by the European Commission’s Standard Contractual Clauses. Write to us for more information.
How long we keep it
- Account, profile and saved venues: until you delete your account. Deletion erases them at once.
- Reports: they stay after you delete your account, without your name or email. The message text stays as you wrote it, so ask us if it contains personal details you want removed. Closed reports are detached from your account automatically after 24 months.
- Photos: approved photos stay on the venue page after you delete your account, without any link to you. Photos still waiting for review lose the link to you and are discarded, not published. You can ask us to remove any photo you sent.
- Profile picture: when you change or remove your picture, the earlier image file is deleted. Deleting your account deletes your picture as well. If you find a picture of yours still online, write to us and we will delete it.
- Sign-in sessions: until you sign out, the session expires, or you delete your account.
- Request logs: one day on our current hosting plan.
- If we delete an account ourselves (at your request or for abuse): we keep a record of the email address, name and reason, to show that the deletion happened.
- Emails: as long as needed to deal with your question or request.
- Performance diagnostics: on your iPhone, at most seven days.
Your rights
You have the right to:
- Access your data and receive it in a portable format: in the app, use Profile → Download my data. You get one file with your account, profile, saved venues, reports and photos.
- Correct it: change your name, phone number and picture under Profile → Edit profile, and your email address in the app.
- Erase it: use Profile → Delete account. See How long we keep it for what remains.
- Withdraw consent at any time, by switching off Performance diagnostics. This does not affect what happened before.
- Restrict how we use your data, or object to use based on our legitimate interest.
For anything the app cannot do, write to privacy@cofify.app. We answer within one month. We may ask you to write from your account’s email address, so we know the request is yours.
You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live.
Age
You must be 16 or older to create an account (Dutch GDPR Implementation Act, article 5). If you believe someone younger has an account, tell us and we will delete it.
No ads, no tracking
Cofify shows no ads, does not sell or rent personal data, and does not track you across other companies’ apps or websites. The app contains no third-party analytics or advertising code and does not use the advertising identifier.
This website
cofify.app sets no cookies and uses no analytics or trackers. It loads no fonts or scripts from other sites. Cloudflare serves the pages and, to do that and to protect the site from attacks, processes your IP address and technical details of your request. This is based on our legitimate interest in a working, secure website, art. 6(1)(f).
Changes to this policy
When we change this policy, we publish the new version here with a new date. If a change affects what we collect or how we use it, we will tell you in the app or by email before it applies.