App privacy policy.
What the loyalty app collects, why, and how we look after it.
Last updated: 14 July 2026
This policy covers the Real Coffee loyalty app for iPhone and Android. Our website has its own privacy policy; this page is specifically about the app and your membership account. If the two ever differ, this page governs the app.
Who we are
The Real Coffee app is run by Real Bedford Coffee Limited, registered in England and Wales (company no. 15724906), registered office Argent House, 5 Goldington Road, Bedford MK40 3JY. We are the data controller and we are registered with the Information Commissioner’s Office. The app is published on the App Store and Google Play by Real Bedford FC Ltd on our behalf; Real Bedford Coffee Limited remains the data controller for everything described in this policy. For anything about your data or this policy, email hello@real-coffee.co.uk.
What we collect, and why
Your account. When you join, we collect your email address (used to sign you in by a one-time link - we do not store a password), your name, and optionally your birthday (day and month only, so we can give you a birthday treat). Legal basis: performing the loyalty programme you signed up for (contract).
Your marketing choices. At signup you can opt in to Real Coffee offers and to Real Bedford FC news. These are off unless you turn them on, and you can change them any time in the app or unsubscribe from any email. Legal basis: your consent.
Your points and rewards. We hold your membership number, your points balance and lifetime total, your tier, your cup count toward a free drink, and the vouchers you have earned or used. Points come from what you spend at the till: when you show your app at the counter, the value of your purchase is added as points and any qualifying drinks count toward your next free coffee. We record these transactions so your balance is correct and so a member of staff can reverse a mistaken scan. Legal basis: contract.
Notifications. If you allow notifications, we store a device push token so we can tell you when a reward lands or a match ticket is available. You can turn this off in the app or in your phone’s settings at any time. Legal basis: your consent.
We do not collect your location, your contacts, or your photos. The app does not need your camera - at the till, the staff scan your membership code; you do not scan anything.
Who handles it for us
A small number of trusted providers process data on our behalf, only to run the service:
Supabase stores your account and points securely and manages the sign-in link. Square is our till system; when you earn points at the counter, Square tells us the value of the sale and we credit your account - Square holds a customer record so your purchases can be matched to your membership. Mailchimp (Intuit Inc.) sends the marketing emails you have opted in to. Zaprite issues any match tickets you redeem, which needs your name and email to put the ticket in your name. Expo delivers push notifications. Vercel hosts the app’s services. Where any provider operates outside the UK, transfers are covered by recognised safeguards such as the UK extension to the EU-US Data Privacy Framework or standard contractual clauses. We do not sell your data, and we never will.
How long we keep it
We keep your account data for as long as your membership is active. If you delete your account (see below), your personal details are removed straight away. We keep a record of past transactions in an anonymised form - stripped of your name, email and any way to identify you - because we are required to keep basic financial records; those records are attached to nobody.
Deleting your account
You can delete your account at any time from inside the app: go to the You tab and choose Delete my account. This removes your name, email, birthday, marketing choices and notification tokens, cancels any unused vouchers, and signs you out permanently. You can also request deletion without opening the app at real-coffee.co.uk/delete-account.
Your rights
Under UK data protection law you can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or withdraw a consent you have given. The app has a built-in Export my data option, and you can email hello@real-coffee.co.uk for anything else. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Children
The app is intended for adults and is not directed at children under 16. We do not knowingly collect data from children.
Changes
If we change how the app handles data, we will update this page and the date at the top, and, where the change is significant, tell you in the app.