Last updated: July 11, 2026
Who we are
Chacha (“the app”) is a matcha check-in and discovery app operated by Scott Martin, Mexico City. Contact: support@matchacha.app.
Data we collect
- Account data: email address, display name, username (via Supabase Auth; Apple Sign-In users may use Apple's private relay email).
- Content you create: check-ins, ratings, taste profiles, reviews, comments, photos, saved places, shelf items, and place–matcha identifications.
- Location: used while the app is open to find matcha places near you. We store only the coordinates of places you interact with — never a trail of your movements.
- Push token: if you enable notifications, an Expo push token is stored to deliver enabled social notifications, café updates, streak reminders, and weekly digests.
- Optional café claim data: if you ask to verify your relationship to a café, we store your role, business contact email, optional business phone, and the evidence you provide. This material is private to authorized reviewers; the public place page shows only whether a claim is approved.
- Anonymous product analytics: coarse feature events such as searches, place views, saves, check-in completion, and upload timing. We do not send account details, search text, coordinates, reviews, comments, photo URLs, or tokens. A random installation value is anonymized by our API before TelemetryDeck processes it in the European Union. You can disable this at any time under Privacy in the app's Settings; it is available before signing in.
What we don't do
No advertising SDKs, no sale of personal data, no background location tracking.
Sharing & visibility
- Public check-ins, ratings, and your profile (name, username, avatar) are visible to other users. Private check-ins are visible only to you.
- Infrastructure providers process data on our behalf: Supabase (authentication, database, photo storage), Railway (API hosting), Google Maps Platform (maps and place search), Expo (push notifications), TelemetryDeck (anonymous product analytics), Vercel (this website).
- Place photos and reviews labeled “via Google” are provided by Google Maps and remain Google's content; we do not store them. Google processes related requests under its Privacy Policy.
- An approved café claim displays a public verified badge. Claim contact details, evidence, operator notes, and rejected or revoked claim history are not public.
Affiliate links
As an Amazon Associate I earn from qualifying purchases. Affiliate links never affect scores or rankings — those come only from community check-ins.
Your rights
- Delete your account any time in the app: Profile → Settings → Delete Account. This permanently removes your account and all associated data, including from our authentication provider. If you cannot access the app, follow the public account-deletion instructions.
- Report content and block users directly in the app; reports are reviewed promptly.
- For data questions or export requests, email support@matchacha.app.