BeanUp Privacy Policy
This Privacy Policy explains what personal data is processed when you use the BeanUp mobile application, why it is processed, who it may be shared with, and what rights you have. BeanUp is a social coffee platform that lets users verify and share coffee experiences, earn BeanScore, join rankings, interact with friends, and discover nearby venues.
By using BeanUp, you acknowledge that you have been informed about the data processing activities described in this policy. If you do not grant required permissions or accept required account terms, some features may not work.
1. Controller and Contact
For BeanUp, the data controller is the publisher and operator of the BeanUp application. You may contact us about privacy, personal data, account deletion, or data rights requests at:
Email: info@skylotus.tech
2. Data We Process
Depending on the features you use, BeanUp may process:
- Account and identity data: user ID, email address, username, display name, profile image, and legal acceptance records.
- Profile and social data: BeanScore, badges, ranks, friendships, follows, reactions, comments, saved posts, sharing activity, and leaderboard information.
- Coffee verification data: coffee photos, photo URLs, image hashes, verification results, fraud-risk signals, and scoring records.
- Location data: approximate or precise location, latitude, longitude, city, nearby venue information, and venue distance during verification.
- Device and security data: device signals, session data, IP address, app version, operating system, crash logs, rate limit records, and abuse-risk signals.
- Notification data: push notification permission, device notification identifiers, delivery records, and click interactions.
- Analytics and usage data: in-app events, screen views, feature usage, performance data, and crash diagnostics.
- Business and venue request data: venue suggestions, venue ownership or claim requests, contact phone, and review records.
3. Why We Use Data
We process personal data to:
- Create accounts, authenticate users, and manage profiles.
- Verify coffee photos and operate BeanScore, badge, and rank systems.
- Show nearby venues and provide map, radar, leaderboard, and feed features.
- Prevent fake photos, reused images, fake location, spam, harassment, and fraudulent use.
- Provide friendship, comments, reactions, feed, and social notification features.
- Send push notifications and manage notification preferences.
- Measure app performance, diagnose errors, and improve the service.
- Comply with legal obligations and respond to user requests.
4. Camera, Photos, and AI Verification
BeanUp requests camera access for coffee verification. Coffee photos may be processed to determine whether the coffee was captured in a real environment, prevent duplicate photo use, detect screenshots or printed-photo fraud, and calculate BeanScore. We may store the photo, an optimized copy, a public photo URL, verification results, and an image hash.
Photos may be sent to AI verification providers for fraud and content analysis. This analysis supports automated verification decisions. Suspicious activity may lead to rejected verification, point correction, account restriction, or account suspension.
5. Location Data
If you grant location permission, BeanUp uses location data to show nearby coffee venues, calculate venue distance during coffee verification, power map, heatmap, and Coffee Radar features, and reduce fake-location risk.
You can manage Coffee Radar visibility and precise-location sharing in profile privacy settings. When Coffee Radar is disabled, you are not included in radar density counts.
6. Push Notifications
If you allow notifications, BeanUp may send push notifications for friendships, comments, reactions, coffee verification, missions, rankings, and re-engagement reminders. You can disable notifications at any time from your device settings.
7. Sharing and Third-Party Providers
BeanUp does not sell personal data. Data may be shared with third-party service providers only as needed for app operation, security, analytics, crash reporting, notifications, storage, authentication, AI verification, and legal compliance.
Providers used or potentially used by BeanUp include:
- Supabase: authentication, database, storage, and edge function infrastructure.
- OneSignal: push notification delivery and notification interactions.
- Firebase Crashlytics: crash, error, and performance diagnostics.
- PostHog: product analytics and app usage events.
- OpenAI or similar AI providers: coffee photo verification and abuse analysis.
- Expo and mobile platform providers: runtime, permissions, and distribution infrastructure.
These providers may process data under their own privacy policies and their contractual relationship with us. We may also share data with competent authorities when required by law, court order, regulatory request, or to protect our rights and users.
8. Retention
Personal data is kept for as long as necessary for the purposes described in this policy. Account data is generally kept while your account is active. Coffee verification, scoring, security, and abuse records may be retained for reasonable periods to preserve service integrity, rankings, dispute handling, and legal compliance.
When you delete your account or request deletion, personal data linked to your account is deleted, anonymized, or made inaccessible except for records that must be retained for legal, security, or legitimate operational reasons.
9. Public Content
Your username, profile information, coffee posts, photo URLs, points, badges, comments, and rankings may be visible to other users through BeanUp's social features. You should avoid sharing sensitive personal information in public content.
10. Security
BeanUp uses access controls, authorization, secure storage, abuse detection, rate limits, error monitoring, and other technical and administrative measures to protect personal data. However, no internet transmission or electronic storage method is completely secure.
11. Children's Privacy
BeanUp is not directed to children under 13. If you believe personal data belonging to a child under 13 has been processed, please contact us. After review, the relevant data will be deleted or made inaccessible where appropriate.
12. Your Rights
Depending on your location and applicable law, including the Turkish Personal Data Protection Law No. 6698, you may have rights to:
- Learn whether your personal data is being processed.
- Request information about processing activities.
- Learn the processing purpose and whether data is used accordingly.
- Know third parties to whom data is transferred domestically or internationally.
- Request correction of incomplete or inaccurate data.
- Request deletion or destruction where legal conditions are met.
- Request notification of correction or deletion to third parties receiving the data.
- Object to results produced solely through automated systems.
- Request compensation if unlawful processing causes damage.
To exercise these rights, contact us by email. Depending on your request, we may ask for additional information to verify your identity.
13. Account Deletion
You may delete your BeanUp account from the account or profile settings inside the app, or you may send an account deletion request to our support email. Please include the email address linked to your account. After deletion, your account and related personal data are deleted or anonymized except for legally or security-required records.
14. International Transfers
The infrastructure, analytics, notification, crash reporting, and AI providers we use may operate servers or processing centers in different countries. Your personal data may therefore be transferred outside Turkey or your country of residence where necessary to provide the service, with appropriate safeguards under applicable law.
15. Changes to This Policy
This Privacy Policy may be updated from time to time. If material changes are made, we may notify users in the app, on the website, or by other appropriate means. The latest version will be published on this page.
Note: This policy is prepared according to the current technical behavior of the BeanUp application. Before publishing, verify the controller details, support email address, and any company legal name or address with the real publisher information.