Privacy Policy

Template: this document is a draft template and has not yet been reviewed by a qualified lawyer. It must be legally reviewed before the TeaTok app is launched.

Last updated: [TODO: date]

1. Who we are

TEAFAIRY LIMITED (company number 17464103, registered office [TODO: registered office address]) is the data controller for the Tea Fairy website and the TeaTok app. Contact: hello@teafairyworld.co.uk.

2. Data we collect

• Account data: name, email, Sign in with Apple identifier, profile photo.
• Content you post: brewing check-ins, photos, reviews and comments.
• Purchase data: order, shipping address and contact details for physical goods (card details are processed by Stripe, not stored by us); course purchase records from Apple.
• Technical data: device, app version, crash logs and basic usage analytics.
• Safety data: reports and blocks you make or receive.

3. Why we use it (UK GDPR lawful bases)

• To provide the app and fulfil orders — contract.
• To keep the community safe, moderate content and prevent fraud — legitimate interests and legal obligation.
• To send marketing emails — consent, which you can withdraw at any time.
• To keep tax and accounting records — legal obligation.

4. Who we share it with

Service providers acting for us, such as hosting/database (e.g. Supabase), payment processing (Stripe), in-app purchases (Apple, RevenueCat), app build and delivery (Expo), and couriers for deliveries. We do not sell your personal data. [TODO: confirm final processor list]

5. International transfers

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the UK International Data Transfer Agreement/Addendum.

6. Retention

We keep account data while your account is active. When you delete your account we delete or anonymise your personal data and content, except where we must keep records (e.g. order and tax records) for legal reasons. [TODO: confirm retention periods]

7. Account deletion

You can delete your account in the app (Profile → Settings → Delete account) or by emailing us.

8. Your rights

Under UK GDPR you may request access, correction, deletion, restriction, portability, and object to processing, and withdraw consent. You can complain to the Information Commissioner’s Office (ico.org.uk).

9. Children

TeaTok is not intended for children under [TODO: minimum age, e.g. 13/18].

10. Changes

We will post updates on this page and notify you of significant changes in the app.