The CaféLoop Privacy Policy
Last updated: April 2026
The CaféLoop ("we," "our," or "the app") is a campus event discovery and study-matching app built for University of California, Riverside students. We take your privacy seriously. This policy explains what data we collect, how it is used, and how it is protected.
What We Collect
We collect only the minimum data required to operate the app:
Email Address — your @ucr.edu email, used for authentication User ID — a Firebase-generated identifier linked to your account Device Token — used to deliver push notifications for matches and events Zone Activity Signals — temporary signals when you select an intent (e.g., Study or Chill) to enable matching
What We Do Not Collect
We do not collect or store:
Names or profile information Photos, videos, or media Contacts or address book data Browsing or search history Advertising identifiers Any data for advertising or marketing purposes
Location data is used on-device only for campus zone detection and is not stored or transmitted by us. We do not sell your data to third parties — ever.
How We Use Your Data
We use collected data strictly for core app functionality:
Your email verifies that you are a UCR student Your User ID links your account to app activity Your device token enables push notifications Zone activity signals allow temporary matching with nearby users
We do not use your data beyond these purposes.
Tracking and Advertising
We do not track you. We do not display ads, use advertising SDKs, or share data with advertisers or data brokers. None of the data we collect is used for tracking as defined by Apple's App Tracking Transparency framework.
Third-Party Services
We use the following third-party services:
Google Firebase — for authentication, database, and push notifications OpenStreetMap — for map display
Firebase processes data on our behalf to support app functionality. We do not use Firebase data for advertising or analytics purposes. OpenStreetMap does not receive any personal user data from our app.
Data Retention and Deletion
Zone activity signals expire automatically Match records are retained only temporarily and are not used for tracking or long-term storage Authentication data persists while your account is active You may delete your account and all associated data at any time using the "Delete Account" option within the app. This removes your user profile, device tokens, and zone signals permanently. You may also request deletion by contacting us at the email below.
Children's Privacy
The CaféLoop is intended for university students. We do not knowingly collect data from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.
Changes to This Policy
We may update this policy from time to time. If we make material changes, the updated policy will be posted at this URL with a new "Last updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.
Security
We take reasonable measures to protect your data:
Verification codes are hashed using SHA-256 Firestore security rules restrict access to authenticated users All network communication is encrypted using HTTPS/TLS
Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us. California residents may have additional rights under the CCPA, including the right to know what data is collected and the right to request deletion.
Contact
If you have questions about this policy, contact us at: hello@thecafeloop.com
© 2026 The CaféLoop. All rights reserved. Built for UCR students, by a UCR student.The CaféLoop Privacy Policy
Last updated: April 2026
The CaféLoop ("we," "our," or "the app") is a campus event discovery and study-matching app built for University of California, Riverside students. We take your privacy seriously. This policy explains what data we collect, how it is used, and how it is protected.
What We Collect
We collect only the minimum data required to operate the app:
Email Address — your @ucr.edu email, used for authentication User ID — a Firebase-generated identifier linked to your account Device Token — used to deliver push notifications for matches and events Zone Activity Signals — temporary signals when you select an intent (e.g., Study or Chill) to enable matching
What We Do Not Collect
We do not collect or store:
Names or profile information Photos, videos, or media Contacts or address book data Browsing or search history Advertising identifiers Any data for advertising or marketing purposes
Location data is used on-device only for campus zone detection and is not stored or transmitted by us. We do not sell your data to third parties — ever.
How We Use Your Data
We use collected data strictly for core app functionality:
Your email verifies that you are a UCR student Your User ID links your account to app activity Your device token enables push notifications Zone activity signals allow temporary matching with nearby users
We do not use your data beyond these purposes.
Tracking and Advertising
We do not track you. We do not display ads, use advertising SDKs, or share data with advertisers or data brokers. None of the data we collect is used for tracking as defined by Apple's App Tracking Transparency framework.
Third-Party Services
We use the following third-party services:
Google Firebase — for authentication, database, and push notifications OpenStreetMap — for map display
Firebase processes data on our behalf to support app functionality. We do not use Firebase data for advertising or analytics purposes. OpenStreetMap does not receive any personal user data from our app.
Data Retention and Deletion
Zone activity signals expire automatically Match records are retained only temporarily and are not used for tracking or long-term storage Authentication data persists while your account is active You may delete your account and all associated data at any time using the "Delete Account" option within the app. This removes your user profile, device tokens, and zone signals permanently. You may also request deletion by contacting us at the email below.
Children's Privacy
The CaféLoop is intended for university students. We do not knowingly collect data from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.
Changes to This Policy
We may update this policy from time to time. If we make material changes, the updated policy will be posted at this URL with a new "Last updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.
Security
We take reasonable measures to protect your data:
Verification codes are hashed using SHA-256 Firestore security rules restrict access to authenticated users All network communication is encrypted using HTTPS/TLS
Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us. California residents may have additional rights under the CCPA, including the right to know what data is collected and the right to request deletion.
Contact
If you have questions about this policy, contact us at: hello@thecafeloop.com
© 2026 The CaféLoop. All rights reserved. Built for UCR students, by a UCR student.The CaféLoop Privacy Policy
Last updated: April 2026
The CaféLoop ("we," "our," or "the app") is a campus event discovery and study-matching app built for University of California, Riverside students. We take your privacy seriously. This policy explains what data we collect, how it is used, and how it is protected.
What We Collect
We collect only the minimum data required to operate the app:
Email Address — your @ucr.edu email, used for authentication User ID — a Firebase-generated identifier linked to your account Device Token — used to deliver push notifications for matches and events Zone Activity Signals — temporary signals when you select an intent (e.g., Study or Chill) to enable matching
What We Do Not Collect
We do not collect or store:
Names or profile information Photos, videos, or media Contacts or address book data Browsing or search history Advertising identifiers Any data for advertising or marketing purposes
Location data is used on-device only for campus zone detection and is not stored or transmitted by us. We do not sell your data to third parties — ever.
How We Use Your Data
We use collected data strictly for core app functionality:
Your email verifies that you are a UCR student Your User ID links your account to app activity Your device token enables push notifications Zone activity signals allow temporary matching with nearby users
We do not use your data beyond these purposes.
Tracking and Advertising
We do not track you. We do not display ads, use advertising SDKs, or share data with advertisers or data brokers. None of the data we collect is used for tracking as defined by Apple's App Tracking Transparency framework.
Third-Party Services
We use the following third-party services:
Google Firebase — for authentication, database, and push notifications OpenStreetMap — for map display
Firebase processes data on our behalf to support app functionality. We do not use Firebase data for advertising or analytics purposes. OpenStreetMap does not receive any personal user data from our app.
Data Retention and Deletion
Zone activity signals expire automatically Match records are retained only temporarily and are not used for tracking or long-term storage Authentication data persists while your account is active You may delete your account and all associated data at any time using the "Delete Account" option within the app. This removes your user profile, device tokens, and zone signals permanently. You may also request deletion by contacting us at the email below.
Children's Privacy
The CaféLoop is intended for university students. We do not knowingly collect data from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.
Changes to This Policy
We may update this policy from time to time. If we make material changes, the updated policy will be posted at this URL with a new "Last updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.
Security
We take reasonable measures to protect your data:
Verification codes are hashed using SHA-256 Firestore security rules restrict access to authenticated users All network communication is encrypted using HTTPS/TLS
Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us. California residents may have additional rights under the CCPA, including the right to know what data is collected and the right to request deletion.
Contact
If you have questions about this policy, contact us at: hello@thecafeloop.com
© 2026 The CaféLoop. All rights reserved. Built for UCR students, by a UCR student.The CaféLoop Privacy Policy
Last updated: April 2026
The CaféLoop ("we," "our," or "the app") is a campus event discovery and study-matching app built for University of California, Riverside students. We take your privacy seriously. This policy explains what data we collect, how it is used, and how it is protected.
What We Collect
We collect only the minimum data required to operate the app:
Email Address — your @ucr.edu email, used for authentication User ID — a Firebase-generated identifier linked to your account Device Token — used to deliver push notifications for matches and events Zone Activity Signals — temporary signals when you select an intent (e.g., Study or Chill) to enable matching
What We Do Not Collect
We do not collect or store:
Names or profile information Photos, videos, or media Contacts or address book data Browsing or search history Advertising identifiers Any data for advertising or marketing purposes
Location data is used on-device only for campus zone detection and is not stored or transmitted by us. We do not sell your data to third parties — ever.
How We Use Your Data
We use collected data strictly for core app functionality:
Your email verifies that you are a UCR student Your User ID links your account to app activity Your device token enables push notifications Zone activity signals allow temporary matching with nearby users
We do not use your data beyond these purposes.
Tracking and Advertising
We do not track you. We do not display ads, use advertising SDKs, or share data with advertisers or data brokers. None of the data we collect is used for tracking as defined by Apple's App Tracking Transparency framework.
Third-Party Services
We use the following third-party services:
Google Firebase — for authentication, database, and push notifications OpenStreetMap — for map display
Firebase processes data on our behalf to support app functionality. We do not use Firebase data for advertising or analytics purposes. OpenStreetMap does not receive any personal user data from our app.
Data Retention and Deletion
Zone activity signals expire automatically Match records are retained only temporarily and are not used for tracking or long-term storage Authentication data persists while your account is active You may delete your account and all associated data at any time using the "Delete Account" option within the app. This removes your user profile, device tokens, and zone signals permanently. You may also request deletion by contacting us at the email below.
Children's Privacy
The CaféLoop is intended for university students. We do not knowingly collect data from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.
Changes to This Policy
We may update this policy from time to time. If we make material changes, the updated policy will be posted at this URL with a new "Last updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.
Security
We take reasonable measures to protect your data:
Verification codes are hashed using SHA-256 Firestore security rules restrict access to authenticated users All network communication is encrypted using HTTPS/TLS
Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us. California residents may have additional rights under the CCPA, including the right to know what data is collected and the right to request deletion.
Contact
If you have questions about this policy, contact us at: hello@thecafeloop.com
© 2026 The CaféLoop. All rights reserved.