myCup — Privacy Policy

Last updated: 20 July 2026

This policy describes what the myCup iOS app collects, why, and who it is shared with. It covers the app and the API that serves it. If anything here is unclear, write to [email protected].

Using the app without an account

You can browse the map, the venue list, venue details, photos and reviews without signing in. No account is created and no personal details are collected for browsing.

Location

The app asks for location access “While Using the App”. Your coordinates are sent to our server with the search request so it can find venues within a radius and sort them by distance.

Coordinates are used only to answer that request. They are not written to our database, not recorded in logs, not attached to your account, and not used to build any history or profile of your movements.

If you decline location access, the app still works — the map simply starts from the centre of Baku instead of your position.

If you create an account

Signing in is only needed to save favorites and write reviews. It uses Sign in with Apple or Google Sign-In; we never see or handle your password. From the provider we receive and store:

• Your email address (if you choose to share it)
• Your display name and profile picture URL, if provided
• A permanent identifier issued by Apple or Google, used to recognise you on your next sign-in

Apple lets you hide your real address with its private relay. If you use it, that relay address is all we receive.

Once signed in we also store:

• The venues you add to favorites
• The ratings and reviews you write, shown publicly with your name

Push notifications

If you allow notifications, the app registers a device token with Firebase Cloud Messaging and stores it along with your platform, app version and language. This is used to send campaign notifications about venues. The token is deleted when it stops being valid, and you can turn notifications off in iOS Settings at any time.

Who else is involved

The app relies on a small number of external services. Each receives only what it needs to do its job:

• Apple and Google — sign-in. They confirm your identity to us and follow their own privacy policies.
• Firebase Cloud Messaging (Google) — delivers push notifications to your device.
• Cloudinary — hosts venue photos. Loading an image reveals your IP address to Cloudinary, as with any image on the internet.
• Apple Maps and Google Maps — render the map. Map interactions are handled by the map provider under its own policy.

We do not sell your data, and we do not use advertising or analytics trackers.

Deleting your account

You can delete your account from the Profile screen in the app. This removes your profile, favorites and the link between your reviews and you. Your device token is unlinked so notifications stop.

Children

myCup is not directed at children under 13 and we do not knowingly collect data from them.

Changes to this policy

If this policy changes, the date at the top will change with it. Material changes will be announced in the app.