Privacy Policy

FieldNote Coffee is the entity responsible for the personal information described in this policy. You can reach our privacy contact at info@fieldnotecoffee.com.au. We are a small Australian operator; we choose to comply with the APPs regardless of turnover.

We collect only what we need to run the app:

• Account details. Email address, password (stored hashed by our authentication provider), display name and handle.
• Profile details you choose to add. Phone number, suburb or postcode, profile photo, social handles, coffee preferences and discovery goals.
• Your FieldNotes. Café visits, ratings, tasting notes, tags, photos, saved cafés, trail progress and passport achievements.
• Location information. Your approximate device location if you allow it, and the suburbs or postcodes you search. Location is used to show nearby cafés and is not used to track you in the background.
• Payment information. If you buy FieldNote+ or a café placement, Stripe collects and processes your card details. We never see or store your full card number; we keep a record of the transaction, plan and status.
• Café business information. If you claim a café, the business name, contact email and phone you give us.
• Legal acceptance records. The documents you accept or acknowledge, the version of each one and when you accepted it.
• Technical and usage data. Device and browser type, IP address, pages viewed, and error reports, used for security, troubleshooting and improving the app.

We do not collect sensitive information (such as health or political views) and ask that you do not include it in your notes. You may browse public pages without an account.

We use your personal information to create and secure your account, show you cafés and recommendations, save your journal and passport progress, process payments and memberships, run café owner tools and paid placements, respond to your messages, detect misuse, and meet our legal obligations. We do not use your information for unrelated purposes without your consent.

We do not sell your personal information, and we do not disclose it to advertisers for their own marketing.

We send account and transactional emails. Sign-up confirmation, password resets, receipts, membership changes and important service notices. These are necessary to provide the service.

Promotional email is optional and separate. We send it only where you have opted in, and you can withdraw that consent at any time in Profile, then Legal & Privacy. Every commercial message identifies FieldNote Coffee, includes our contact details and carries a working unsubscribe link that we action within five business days, as required by the Spam Act 2003 (Cth). We do not make telemarketing calls; if that ever changes we will wash our lists against the Do Not Call Register.

We disclose personal information only to service providers who help us run FieldNote:

• Supabase. Database, authentication and photo storage.
• Stripe. Payment processing for FieldNote+ and café placements.
• Google Maps Platform. Maps, café listings and place searches. Your search terms and approximate map location are sent to Google to return results.
• Email delivery provider. To send the emails described above.

We may also disclose information where required by Australian law, to enforce our Terms, or to protect someone's safety.

Content you post publicly, such as a café tag suggestion or a shared card, is visible to others. Your private FieldNotes are visible only to you unless you share them.

Our providers may store, process, transfer or back up your information on servers outside Australia. By using FieldNote you consent to this overseas handling. We take reasonable steps to use providers with recognised security and privacy practices, but overseas recipients may not be bound by the APPs.

Data is transmitted over HTTPS and access to your records is protected by row-level security so other users cannot read your journal or account. Photos are held in private storage and served through short-lived links. Only the people who need it can access production data.

We keep your information while your account is open. If you delete your account, your profile, journal entries and photos are deleted, except records we must keep to meet legal, tax or fraud-prevention obligations, such as payment records. No system is perfectly secure; if a data breach is likely to cause you serious harm we will notify you and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.

You can view and correct most of your information in the Profile tab, and delete your account there at any time. You may also ask us for a copy of the personal information we hold about you by emailing info@fieldnotecoffee.com.au. We will respond within 30 days and will not charge you for a reasonable request.

FieldNote is intended for people aged 13 and over. If we learn we have collected the personal information of a child under 13 without parental consent, we will delete it.

If you think we have mishandled your personal information, email info@fieldnotecoffee.com.au with the details. We will acknowledge within five business days and aim to resolve the matter within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

We may update this policy. Material changes will be announced in the app before they take effect, and the version and date shown with this document will change.