Libut Café home

Privacy policy

Effective 12 October 2026. First published 11 October 2026.

In short: Libut Café has no ads, and an account is optional. Your location and caffeine diary stay on your phone; so do your saved cafés and private notes, unless you sign in to sync them. The app counts anonymous taps (which cafés are opened, which directions are used) to show what’s popular; you can turn that off in About. Otherwise Libut Café only receives what you choose to send it: a suggestion, a correction, a claim or a freedom wall post. The map is provided by Mapbox, which receives anonymised location and usage data, and you can turn that off too.

Libut Café is a café guide for Zamboanga City, Philippines, run by Raiyan Asaral (“Libut Café”, “we”). This policy covers the Libut Café app for iPhone and Android, and this website.

What stays on your phone

  • Your location. If you allow it, Libut Café uses it to sort cafés by distance, to show you on the map, and to check that you’re at a café before you write on its freedom wall. Libut Café works this out on your phone and never sends your location to its own servers or stores it. You can use Libut Café without allowing location.
  • Saved cafés and private notes. Only you can see them. They aren’t sent anywhere.
  • Your caffeine diary: the drinks you log, your caffeine settings, and what the caffeine widget shows. It’s a diary on your phone, not sent anywhere.
  • Postcards. When you make a postcard, the photo you take or pick is used on your phone only. It leaves your phone only if you share the postcard, and then it goes wherever you send it.
  • Wall memory. The notes you’ve written (so you can see yours while one waits for a check), notes you’ve hidden, and cafés you’ve reported closed.
  • Settings and a copy of the café list, with photos, so Libut Café works with no signal.

Deleting the app deletes all of this.

Anonymous usage counts

Unless you turn it off, the app counts a few kinds of taps, so we can see which cafés, events and features people use, work out which cafés are popular, and count how often a Featured card is seen and tapped. The welcome screen tells you this the first time you open the app. What’s counted:

  • opening and leaving the app;
  • opening a café’s page, its menu or an event, and where you opened it from (Discover, the map, search and so on);
  • seeing or tapping a Featured card;
  • choosing a directions app, or tapping Messenger, Instagram, Text or Call on a café;
  • saving or unsaving a café, turning on a filter, and how many results a search found (not what you searched for);
  • sharing a postcard (which café and design), and sending a wall note (which café, and whether it went up or waited for a check).

Each count comes with the app version and basic details of the phone: its general model (such as “iPhone”, never your phone’s name), its system version, screen size, language and time zone, and whether it’s on Wi-Fi or mobile data.

The counts never include your location, anything you type (search words, wall notes, names, messages), your private notes or caffeine diary, the photos you pick for a postcard, or your phone’s advertising ID. The app doesn’t record your screen. Each install gets a random ID that isn’t linked to your name, an account, your phone number or your phone; deleting the app resets it. Your IP address isn’t stored.

To turn it off: About → “Share anonymous usage”. It takes effect straight away, and while it’s off nothing is sent at all.

What you send us

When you suggest a café, report wrong information, report a café as closed, or claim a café you own, Libut Café sends us:

  • your message, and what kind of report it is;
  • which café it’s about, if any;
  • a contact (email, phone number or social handle), only if you enter one. A claim needs one, so we can check it’s your café.

Nothing else about you or your phone is attached. We use these messages to keep listings right, to verify café owners, and to reply when you’ve asked us to. Reports can’t be read back through the app.

If you email us, we get your email address and whatever you write.

A café’s details that we publish (name, hours, menu, photos, public contact details) are about the café, not about you.

Notes on café walls

Each café has a freedom wall. A note you leave there is public: anyone using Libut Café can read it. When you post a note, Libut Café sends:

  • the note’s text (up to 280 characters);
  • the name you typed, if you typed one (you can leave it blank);
  • which café it’s for, and the time;
  • a random ID for the note, made on your phone so the app can show you your own notes. It isn’t linked to you or your phone on our side.

Your location is not sent: the “are you at the café?” check happens on your phone. Before a note goes up, our server checks it against a word list and for phone numbers, emails, links and @handles; a note that matches waits until we’ve looked at it.

If you report a note, Libut Café sends which note it is and the reason you pick or type. Nothing about you is attached. A note reported three times is hidden until we’ve checked it. We may remove any note, and a café’s verified owner can ask us to hide a note on their café’s wall.

Please don’t put anything personal in a note: yours or anyone else’s.

Permissions

Every permission is optional and asked for only when you use the feature that needs it.

PermissionUsed forLeaves your phone?
Location, while using the appSorting cafés by distance, showing you on the map, the at-the-café check for wallsNot to Libut Café. Mapbox, see below.
CameraTaking a photo for a postcardOnly if you share the postcard
PhotosPicking one of your photos for a postcardOnly if you share the postcard
Motion (iPhone)Keeping the coffee in the caffeine cup level as you tilt the phoneNo

If you make an account

An account is optional: everything above works without one. If you sign in, Libut Café keeps:

  • your email address, to sign you in (with a link or code we email you; no password);
  • your saved cafés and private notes, so they’re the same on any phone. Notes stay private: only you can read them;
  • the cafés you mark “I was here”, with the date and whether your phone confirmed you were at the café. Your location itself is never sent; the check happens on your phone. Visits are private;
  • if you claim a café you own: what you told us to verify it, and the changes you make to its hours, contact details, closures, menus, photos and events.

Your caffeine diary, your location and the anonymous usage counts are never linked to your account. You can delete your account in the app (Saved → your account → Delete account); that deletes everything above from our servers. What’s on your phone stays until you delete the app.

Who else is involved

  • Supabase hosts Libut Café’s café database, photos, the reports you send and wall notes. Its servers are in Sydney, Australia. Like any web server, it sees your phone’s IP address when the app loads cafés or sends something, as part of its normal server logs. Supabase privacy policy.
  • Mapbox provides the map. When you open the map, Mapbox receives usage and diagnostic data, and, if you’ve allowed location, anonymised location data, with a random identifier that isn’t linked to you. Mapbox uses it to run and improve its maps. To turn this off, tap the ⓘ on the map and choose “Mapbox Telemetry”. Mapbox privacy policy.
  • Resend sends the sign-in emails, so it receives your email address when you sign in. Resend privacy policy.
  • PostHog receives the anonymous usage counts, unless you’ve turned them off, on its servers in the United States. PostHog privacy policy.
  • Directions open in Google Maps, Waze or Apple Maps, whichever you pick, with the café’s position only. From then on that app’s own privacy policy applies.
  • Sharing. Postcards and café links go through your phone’s share sheet to the app you choose.
  • Cloudflare serves this website, counts its visits (see This website) and passes email sent to libutcafe@raiyanasaral.com on to our inbox, which Google hosts.

We don’t sell data, share it with advertisers, or track you across other apps and websites.

How long we keep things

  • Reports, suggestions and claims: until they’re handled, and deleted within 12 months.
  • Wall notes: on the wall until they’re removed. A removed note stays in our database, out of sight, until we delete it; ask us and we will (see Delete your data).
  • Anonymous usage counts: 12 months, then deleted.
  • Things on your phone: until you delete them or the app.

Your rights

Under the Philippine Data Privacy Act of 2012, you can ask to see, correct or delete anything you’ve sent us. Email libutcafe@raiyanasaral.com with roughly when you sent it and what it said (we don’t know who you are otherwise), and we’ll reply within 15 days. You can also complain to the National Privacy Commission.

Children

Libut Café is a general-audience guide and isn’t aimed at children under 13. If a child has sent us a message with contact details, or written something personal on a wall, email us and we’ll delete it.

This website

libutcafe.raiyanasaral.com uses Cloudflare Web Analytics to count visits. It sets no cookies and doesn’t track you across other websites. It records the page you opened, the site that sent you here, your browser, device type and country, and how quickly the page loaded. The site has no other analytics, and no third-party fonts. Cloudflare, which serves it, sees your IP address like any web host.

Changes

If this policy changes, we’ll update the date above and say what changed here. If a change means Libut Café collects something new, the app will tell you first.

  • 12 October 2026: added anonymous usage counts, the freedom wall, private notes and the caffeine diary; optional accounts (sign-in by email, synced saved cafés and notes, “I was here”, café owner tools). This website now counts visits with Cloudflare Web Analytics.
  • 11 October 2026: first version.

Questions: libutcafe@raiyanasaral.com