Amiro Privacy Policy

Last updated: 2026-09-29

This policy describes what Amiro ("the App") does with your information. Amiro is built to keep your identity, avatar, and profile data on your own device — there is no Amiro account system, and no analytics or advertising SDK in the App. The only server-side processing Amiro does is limited to verifying real-money Store purchases (see "Purchases" below); nothing about your identity, avatar, or who you've shared with ever leaves your device.

Who this covers

Amiro is published by Developer's Coffee. This policy applies to the Amiro mobile app on Android and iOS. It does not cover any third-party app, website, or service you reach by tapping a link inside Amiro (for example, a link you added to your own profile).

What information the App handles

When you set up your Amiro identity, you may enter:

• Display name and username
• A short bio
• Mobile number, email address
• Social handles (X/Twitter, Instagram) and a personal website URL

All of this is stored only on your device, in a local database. It is never sent to Developer's Coffee or to any third party by the App itself.

Your avatar (body, hair, outfit, and other cosmetic choices) is also stored only on your device.

Sharing with another person

Amiro's core feature is sharing your profile with someone else, by:

• Showing them a QR code, or scanning theirs
• Tapping phones together (NFC), on Android

Before you share, you choose which fields are public. Only the fields you mark public are included in what you show or send — anything you leave private never leaves your device. The other person's phone reads that information directly from the QR code or NFC tap; it does not pass through any server Developer's Coffee operates, because none exists.

If you scan someone else's QR code or receive their NFC tap, whatever public profile information they chose to share is stored on your device, the same way your own profile is. You control that data (including deleting it) on your device.

Camera and NFC

• The App requests camera access only to scan a QR code someone shows you. No photo or video is captured, stored, or transmitted — the camera feed is used solely to detect a QR code.
• The App requests NFC access only to read an incoming tap-to-share, and (Android only) to let your phone emulate a tag so someone else can read your shared profile via NFC. No other NFC use.

Purchases

The Store lets you buy optional cosmetic items with real money through Google Play Billing. Purchases are processed by RevenueCat, which we use to verify a purchase actually happened before unlocking the item — this is the one part of Amiro that talks to a server.

What that involves:

• The App SDK sends RevenueCat a random per-install identifier (not your name, email, or anything from your Amiro profile) and the product you're buying. RevenueCat validates the purchase with Google Play and reports the result back to the App.
• RevenueCat notifies our backend (a Cloudflare Worker) when a purchase completes. We record the event — the random per-install identifier, the product bought, and the timestamp — in a Supabase database, so we can look up and restore your purchases if needed (for example, after reinstalling). This record never includes your name, email, phone number, or any other profile field, because the App never sends them.
• None of this is used for advertising, and we don't sell or share it with anyone beyond RevenueCat and Google Play, who process it to complete the purchase.

If you don't use the Store's paid items, none of this applies to you — free cosmetics unlock without any network request.

What the App does not do

• No account creation, no sign-in, no password.
• No analytics, crash reporting, or advertising SDKs.
• No network requests from the App to Developer's Coffee or anyone else, except the purchase verification described above, and only when you buy a paid Store item.
• No location data is collected.
• No data is sold or shared with third parties, other than what's described under "Purchases" above.

Your control over your data

Because everything lives on your device:

• Editing or clearing a field in your identity removes it immediately.
• Uninstalling the App removes all Amiro data stored by it, subject to your device's own OS behavior (for example, an OS-level backup you created yourself, which is outside the App's control).
• There is no Amiro account to delete, because there is no Amiro account.
• If you've made a paid purchase, we also keep a purchase record (the random per-install identifier, product, and timestamp — see "Purchases") in RevenueCat and our Supabase database. Email coffee.devloper@gmail.com to request deletion of that record; it isn't removed automatically by uninstalling, since it exists to protect your purchase across reinstalls.

Children's privacy

Amiro is not directed at children and we do not knowingly collect information from children. Since all data stays on-device and nothing is transmitted to us, we have no way to collect such information in the first place.

Changes to this policy

If Amiro's data practices change (for example, if a future version adds optional cloud backup), this policy will be updated first, and that version will describe the change clearly, including whether it is optional.

Contact

Questions about this policy: coffee.devloper@gmail.com