← Coffer

Privacy Policy

Last updated: 24 September 2026

Coffer is a travel journal you keep on your iPhone. We built it the way we want our own apps to work: your trips, photos, and notes stay with you. The only thing Coffer sends to us is anonymous usage statistics, which you can switch off in Settings. Place names are looked up with Apple's map services. Both are described below.

What Coffer stores about you

Your trips, keepsakes, and photos are stored on your iPhone. When you are signed into iCloud, they also sync through your own private iCloud container. We do not run a server that holds your content, and we do not show ads.

• Trips and Keepsakes — the trips you create, the souvenirs you log inside each trip (name, category, photo, location, notes, price). Stored locally via Apple's SwiftData.
• Photos you attach to a trip or keepsake — stored in the app's private storage on your iPhone (and your private iCloud, if you use it). They are resized to at most 2048 pixels, which in almost all cases also drops embedded metadata such as the GPS location a camera writes into a photo. We never upload them to a server of ours.
• Precise location — when you tap "Use current" while adding a keepsake. Your coordinates are sent to Apple's geocoding service to look up the city and country name; only that name is saved with the keepsake. Never sent to us or to analytics.
• A photo's own location — when you pick a photo for a keepsake, Coffer reads the coordinate your camera saved inside it and asks Apple's geocoder for the matching city and country, so it can suggest where that keepsake is from. Nothing is saved unless you tap the suggestion, and the coordinate itself is never stored or sent to us.
• Map pins — to place your trips and keepsakes on the Atlas, the city and country names they carry are sent to Apple's geocoding service. Nothing else about them is sent.
• Trip reminders — if you turn on "Remind me when I'm back", Coffer schedules one notification on your iPhone for the evening after the trip. It's created and delivered on the device; nothing is sent to us.
• Apple Sign-In identity — if you sign in with Apple, we store the credential identifier, your email address, and the name you provided to Apple. These live in your iPhone's Keychain and are used only to display your profile inside the app. We do not send them anywhere.

Usage statistics

Coffer uses Countly to count how the app is used: which screens and features are used, and the steps of flows like onboarding or a purchase, so we can tell what's working. Countly hosts this for us on its servers as our processor; it doesn't use the data for anything of its own. No advertising or third-party analytics networks are involved.

You can switch it off in Coffer → Profile → Privacy → "Share anonymous usage stats". When it's off, Coffer sends nothing at all.

When it's on, each request also carries basic technical details: device model, iOS and app version, language and region setting, and screen size, plus three on/off facts about this device: whether it's signed into iCloud (so photo sync can work), whether Coffer Plus is unlocked, and whether trip-reminder notifications are allowed.

• It is anonymous: we never attach your name, email, Apple ID, or any account to it, and we never put your content (trip names, keepsakes, notes, photos, or places) into it.
• Rough location only. Like any connection on the internet, a request reaches the server from your IP address. Countly uses it to estimate roughly where you are: the country and city. That estimate is often only approximate, and it is never your GPS position: Coffer doesn't send that to analytics. We also note the country in your iPhone's region setting.
• A random identifier, created by Coffer and stored only inside the app, groups one device's sessions. It is not the advertising identifier (IDFA), it is deleted with the app, and it is never used to follow you across other companies' apps or websites, so Coffer does not ask for tracking permission.
• The data is never sold or shared.

What Coffer does not do

• No ads, and no third-party advertising or marketing SDKs.
• No advertising identifier (IDFA); no cross-app or cross-site tracking.
• Your content is never sent to analytics or to any server we run.
• No data sold or shared with anyone.

iCloud sync

When you are signed into iCloud, Coffer syncs your trips, keepsakes and photos across your devices using Apple's CloudKit. The data lives in your own private iCloud container — we cannot read it. It works automatically with your iCloud account; you can stop it by signing out of iCloud or turning off iCloud Drive for Coffer in iOS Settings.

Permissions Coffer asks for

• Camera — to photograph souvenirs / scan ticket stubs.
• Photo Library — to pick existing photos.
• Location (When In Use) — only when you tap "Use current" in the keepsake form.
• Notifications — only if you turn on a trip reminder.

You can revoke any of these from Settings → Coffer on your iPhone.

Deleting your data

Open the Profile tab and tap Erase Everything to wipe every trip, keepsake, and photo — including the copies synced to your iCloud. Tap Delete Account for the same, plus removing your Sign in with Apple details and profile from the device.

Uninstalling the app removes what's stored on your iPhone, except the Sign in with Apple entry in Keychain (use Delete Account first to remove it). Your synced trips stay in your iCloud until you erase them in the app or delete Coffer's data in iOS Settings → your name → iCloud → Manage Storage.

Children

Coffer does not knowingly collect data from children under 13. The app has no social features, no chat, and no ads.

Changes

If this policy changes, the "Last updated" date above will change with it. Material changes will also be announced in the app's "What's New" section.

Contact

Privacy questions: atasaygin13@hotmail.com.