Deutsche Version unten
Last updated: October 6, 2026
Kaffa does not use accounts, advertising or tracking. Your drink entries (drink, amount, caffeine and time), your own drinks, your quick-add buttons, your daily limit, caffeine cutoff, bedtime, sleep threshold, half-life and your other settings are stored exclusively on your devices, as are the days on which you opened the app (for good days and streaks). Caffeine levels, sleep-ready times, trends, levels and awards are calculated on your device from your own entries. iPhone and Apple Watch exchange data directly via Apple's WatchConnectivity framework. Apart from the anonymous usage statistics described below, no data is transmitted to servers operated by me.
If you grant permission, the caffeine amount of each drink you log is saved in Apple Health (dietary caffeine). The app only writes caffeine data and does not read any Health data. Health data remains on your devices and is not shared.
To improve the app, Kaffa counts a few anonymous events (e.g. "onboarding started", "paywall shown", "drink logged", "purchase completed"). Only the app, the app version, the event and the date are stored, where applicable with a short value (e.g. the answer chosen during onboarding or whether a drink was logged on iPhone or Apple Watch); no identifiers and no drinks or caffeine amounts; nothing is stored on your device for this purpose and no identifiers are read from it. The statistics are stored by Supabase (Supabase Pte. Ltd.) as a processor in a database in Frankfurt (EU). Requests pass through Cloudflare, Inc. (USA), which technically processes your IP address. Supabase keeps technical server logs including the IP address with Google LLC (USA) and deletes them after 1 day; the IP address is not stored in the statistics. Transfers to the USA are based on the EU adequacy decision for the EU-U.S. Data Privacy Framework (Cloudflare and Google are certified) and on the Standard Contractual Clauses in the Supabase Data Processing Addendum. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving the app). The statistics contain no personal data and are kept as long as they are needed for evaluation.
Purchases are processed by Apple. To verify and restore purchases, the app uses RevenueCat (RevenueCat, Inc., USA). RevenueCat receives an anonymous user identifier, purchase data and technical data such as app version and IP address. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Data transfers to the USA are safeguarded by the EU Standard Contractual Clauses. Further information: RevenueCat Privacy Policy.
If you have enabled "Share with App Developers" on your device, Apple may provide me with anonymous crash reports. If you contact me by email, your email address and message are used solely to respond to your request (Art. 6(1)(f) GDPR) and are deleted once no longer required.
You have the right to access, rectification, erasure, restriction of processing and data portability, the right to object, and the right to lodge a complaint with a supervisory authority (Art. 15–21 and 77 GDPR).
For questions: Serkan Kaya, [email protected]
Stand: 6. Oktober 2026