Data Collection and Storage

Your account and profile, your FieldNotes, ratings, tags and photos, saved cafés and trail progress, café claims and listing details if you run a café, membership and payment status, and a record of the legal documents you have accepted.

Supabase provides our database, authentication and photo storage. Stripe processes payments and holds your card details; we never see your full card number. Google Maps Platform returns café and map results. Our email provider delivers account and requested emails.

Our providers may store or back up information on servers outside Australia. Our Privacy Policy sets out the consequences of that overseas handling under Australian Privacy Principle 8.

Everything travels over HTTPS. Row-level security means another member cannot read your journal, saved cafés or account. Photos sit in private storage and are shown through short-lived links. Payment and membership status can only be changed by a confirmed payment, not from a member's own device.

We keep your information while your account is open. When you delete your account we delete your profile, notes and photos, and retain only what the law requires us to keep, such as payment and tax records. See Account Deletion and Data Retention for the detail.