Last updated: September 28, 2026
Who we are
Chacha (“the app”) is a matcha check-in and discovery app operated by Scott Martin, Mexico City. Contact: support@matchacha.app.
Data we collect
- Account data: email address, display name, username (via Supabase Auth; Apple Sign-In users may use Apple's private relay email).
- Content you create: check-ins, ratings, taste profiles, reviews, comments, photos, saved places, shelf items, and place–matcha identifications.
- Location: used while the app is open to find matcha places near you. Search requests can include your search text and the map coordinates you choose or permit the app to use. We store coordinates of places you interact with. Operational request logs may also retain request parameters. We do not collect background location or track your movements when the app is closed.
- Push token: if you enable notifications, an Expo push token is stored to deliver enabled social notifications, café updates, streak reminders, and weekly digests.
- Optional café claim data: if you ask to verify your relationship to a café, we store your role, business contact email, optional business phone, and the evidence you provide. This material is private to authorized reviewers; the public place page shows only whether a claim is approved.
- Diagnostics: Sentry processes crash reports, app/device metadata, and reliability information. Our configuration removes user identity and request details from Sentry error events. Operational server logs are separate and may include IP addresses and request metadata.
- Google Maps: the Android Maps SDK collects request/device metadata, IP addresses, crash information, and a Maps-specific pseudonymous identifier. It may collect map interactions such as pan and zoom. Google uses this information to operate and improve its services. The app's product-analytics toggle does not disable Google Maps or crash diagnostics.
- Anonymous product analytics: coarse feature events such as searches, place views, saves, check-in completion, and upload timing. We do not send account details, search text, coordinates, reviews, comments, photo URLs, or tokens. A random installation value is anonymized by our API before TelemetryDeck processes it in the European Union. We also keep anonymous session summaries to measure feature usage and completion; these are not linked to your account and expire after 30 days without activity, with cleanup on the next analytics event or dashboard request. You can disable this at any time under Privacy in the app's Settings; it is available before signing in.
What we don't do
No advertising SDKs, no sale of personal data, no background location tracking.
Sharing & visibility
- Public check-ins, ratings, and your profile (name, username, avatar) are visible to other users. Private check-ins are visible only to you.
- Infrastructure providers process data on our behalf: Supabase (authentication, database, photo storage), Railway (API hosting), Sentry (crash diagnostics), Expo (push notifications), TelemetryDeck (anonymous product analytics), Vercel (this website).
- Google Maps Platform provides maps and place search. Place photos and reviews labeled “via Google” are provided by Google Maps and remain Google's content; we do not store them. Google processes related requests under its Privacy Policy.
- An approved café claim displays a public verified badge. Claim contact details, evidence, operator notes, and rejected or revoked claim history are not public.
Affiliate links
As an Amazon Associate I earn from qualifying purchases. Affiliate links never affect scores or rankings — those come only from community check-ins.
Your rights
- Delete your account any time in the app: Profile → Settings → Delete Account. This permanently removes your account and all associated data, including from our authentication provider. If you cannot access the app, follow the public account-deletion instructions.
- Report content and block users directly in the app; reports are reviewed promptly.
- For data questions or export requests, email support@matchacha.app.