Privacy Policy

• Account: email address, display name, optional avatar image.
• Social graph: the friends you add and the groups you create or join.
• Location: your device's approximate longitude/latitude while you have an active group session open and have granted location permission.
• Activity: groups you create, votes you cast on coffee shop suggestions, and meetup outcomes.
• Communications: emails we send you (sign-in, password reset, welcome, and similar transactional messages) and our delivery logs.
• Technical: standard server logs (IP address, user agent, timestamp) used for security and abuse prevention.

• To operate the Service: authenticate you, compute the midpoint between group members, surface coffee shops, and sync votes in real time.
• To send transactional emails you'd reasonably expect from an account on a service like this.
• To keep the Service safe (preventing abuse, rate limiting, debugging).
• To comply with our legal obligations.

Your live location is shared only with members of the same active group, and only while you have the app open and have granted location permission. We do not sell location data, and we do not use it for advertising. You can revoke location access at any time in your browser settings.

We share data with:

• Other members of the same group, limited to your display name, avatar, and live location while a session is active.
• Service providers we rely on to run the Service, including our hosting and database provider (Lovable Cloud / Supabase), our map provider (Mapbox), and our email delivery provider. They process data on our behalf under their own terms.
• Authorities when required by valid legal process.

We do not sell your personal information.

We use browser storage to keep you signed in and to remember preferences such as theme (light/dark), date format, and distance units. We do not use advertising cookies or third-party cross-site trackers.

We keep account data for as long as your account is active. When you delete your account, we delete or anonymize your profile, group memberships, and votes within a reasonable period, except where we are required to retain certain records (for example, email delivery logs for abuse prevention) for a limited time.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information (you can edit your profile in-app).
• Delete your account and associated data.
• Object to or restrict certain processing.
• Unsubscribe from non-essential email at any time using the link in any such email or via the in-app unsubscribe page.

To exercise any of these rights, email hello@halfwaylatte.com.

Halfway Latte is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Our service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards (for example, standard contractual clauses) to protect that data.

We use TLS for data in transit, row-level security in our database, and least-privilege access for our infrastructure. No system is perfectly secure; if you discover a vulnerability, please disclose it responsibly to hello@halfwaylatte.com.

We may update this Privacy Policy. Material changes will be communicated through the Service or by email. The "last updated" date below always reflects the current version.

Privacy questions or requests? Email hello@halfwaylatte.com.