Aroamr is a community that rates coffee. To do that we need an account for you, and the ratings you leave are meant to be read by other people. This page sets out exactly what that means for your information.
The short version. Your username, avatar, ratings, comments and photos are public inside the app. Your email address, mobile number and real name are not — we use them to run your account and nothing else. We don't sell your data, we don't run ads, and we don't use third-party analytics or tracking.
On this page
Aroamr is operated by [LEGAL ENTITY NAME, ABN XX XXX XXX XXX] of Melbourne, Victoria, Australia. In this policy, "we", "us" and "our" mean that entity, and "the app" means the Aroamr mobile app and the aroamr.app website.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
| What | Why we need it |
|---|---|
| Email address | Signing in, confirming your account, resetting your password, and essential service messages. |
| Password | Authentication. It is stored as a cryptographic hash. Nobody at Aroamr can read it. |
| Username | Identifies you to other members. This one is public. |
| First and last name | Account administration and verifying it is you if you contact us. Not shown to other members. |
| Mobile number | An alternative way to recover your account if you lose access to your email. Not shown to other members. |
| Date you accepted the Terms | A record that you agreed to them. |
With your permission, the app reads your device's location while you are using it so it can show cafes near you and sort them by distance. Your coordinates are sent to Google Places to run that search.
We do not store your location. It is held in the app's memory while the app is open and discarded afterwards. It is never attached to your ratings, and we never track you in the background. If you decline the permission, the app still works — you search by suburb or place name instead.
No advertising identifiers. No third-party analytics or tracking SDKs. No behavioural profiling. No payment details — the app is free and we do not take payments.
This matters more than anything else on this page, so it is worth being blunt about it.
Public to anyone using the app: your username, your profile picture, your ratings and scores, your comments, the photos you attach, and your contribution level.
Not shown to other members: your email address, your mobile number, and your first and last name.
Photos you upload are stored in a publicly readable location so the app can display them quickly. Anyone with the direct link to an image file can open it, including people who are not Aroamr members. Do not photograph anything you would not want seen publicly — people in the background, documents, your own address, or anything else private.
We do not sell personal information, and we do not disclose it for anyone else's marketing. We use a small number of service providers to run the app:
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Our database, authentication and file storage | All account information, ratings, comments and photos |
| Google (Places and Maps) | Cafe listings, addresses and map display | Your approximate location or search terms at the moment you search. Not your identity. |
| Apple App Store / Google Play | Distributing the app | Whatever the platform collects under its own privacy policy. We receive only aggregate download figures. |
| An SMS provider | Delivering account recovery codes | Your mobile number and the code, at the moment you request one |
We will also disclose information where the law requires it, or where it is reasonably necessary to investigate suspected unlawful activity or to protect someone's safety.
If the business is ever sold or restructured, personal information may transfer with it. You would be told before that happened.
Our service providers operate data centres outside Australia, so your information is likely to be stored or processed overseas, including in [CONFIRM REGION — e.g. Singapore and the United States]. We take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles, but once information is held overseas it may be subject to that country's laws.
No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
We keep your information while your account is open. When you delete your account we remove your personal details; see below for what happens to your ratings.
You can edit your profile, your ratings and your photos in the app at any time. Deleting a rating removes its photos too.
You may also ask us to:
One honest caveat on deletion: a cafe's score is built from many people's answers, and removing one person's contribution retrospectively would distort the record for everyone else. So unless you ask us to remove them, your ratings may remain in the app in anonymised form, with no username, no profile picture and nothing linking them to you. If you want your ratings and comments removed as well, say so and we will remove them.
We respond to these requests within 30 days and do not charge for them. We may need to verify your identity first.
Aroamr is not intended for children. You must be at least 16 to create an account. If we learn that we hold personal information about someone under 16, we will delete it.
We will update this page as the app changes. The date at the top shows the current version. If a change materially affects how we handle your information, we will tell you in the app before it takes effect.
For any privacy question, request or complaint, email privacy@aroamr.app.
We will acknowledge your complaint within 5 business days and give you a written response within 30 days. If you are not satisfied with how we have handled it, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.
