Privacy Policy

• App: CanMog
• Provider: Songtive SIA, a company registered in Latvia ("Songtive," "we," "us," or "our")
• Effective date: October 13, 2026
• Contact: support@canmog.com
• Website: https://canmog.com

This Privacy Policy explains what information CanMog (the "App") collects, why we collect it, who we share it with, and the choices and rights you have. We've tried to keep it short and plain. If anything is unclear, email us at support@canmog.com. Songtive SIA is the controller of the personal data described here.

On October 9, 2026, Songtive SIA took over CanMog from its original developer. Your account, collection and subscription stay as they are.

The short version

Here's the gist. The full details are below — this summary doesn't replace them.

• What we collect: your account info, whether you are 18 or older, the drinks you scan, the tier lists and collections you build, how you use the App, and basic device/diagnostic info.
• Why: to run the App, power your ranks and streaks, give users under 18 a version without caffeine numbers, fix bugs, keep things safe, and improve the experience.
• Selling your data: We never sell or share your individual, identifiable information for anyone else to use. We may share or sell anonymous, combined, de-identified trends (for example, "energy-drink scans went up 20% this month") that cannot be traced back to you.
• Age: CanMog is for people 16 and older. We don't knowingly collect data from children under 16. Users under 18 see no caffeine-intake numbers and get no streak reminders.
• Your rights: You can ask to see your data, correct it, or delete it. Email support@canmog.com.

1. Who this policy covers

This policy applies to the CanMog apps for iOS and Android and any related services we provide. It does not cover third-party services that have their own privacy policies (like Apple, Google and the caffeine-data providers we rely on). We link to those below.

2. What we collect and why

We only collect what we need to run the App and improve it. Here's the breakdown.

• Account information (examples: Email address, username/display name, profile photo, and an account ID from our sign-in/authentication provider; why we collect it: To create and secure your account, sign you in, and let you appear to friends)
• Age group (examples: Your answer to the onboarding question "I'm 18 or older" / "I'm under 18". We do not ask for your date of birth; why we collect it: To turn off caffeine-intake numbers and streak reminders for users under 18 (see Section 8))
• Your scans and logs (examples: Energy drinks you scan, product identifiers/barcodes, quantities, timestamps, and any photos you choose to attach; why we collect it: To build your collection, show your history, and power your stats)
• Your created content (examples: Tier lists, rankings, collections, and notes you make; why we collect it: To save and display the things you create)
• Gameplay / progress data (examples: Streaks, ranks, rank progression, achievements; why we collect it: To run the gamified rank system)
• Social data (examples: Friends you add, clans you join, friend comparisons, and leaderboard standing; why we collect it: To power the friends, clans, and head-to-head features (only if you use them))
• Messages & community content (examples: Direct messages, clan (group) chats, global-chat messages, and public-profile details you share; why we collect it: To deliver your messages, run the chat and community features, and keep them safe)
• Usage & activity analytics (examples: Screens viewed, features used, taps, session length, in-app events (via PostHog); why we collect it: To understand what's working, fix problems, and improve the App)
• Device & diagnostic data (examples: Device model, operating-system version, app version, language/region, crash logs, and performance data; why we collect it: To keep the App stable, diagnose crashes, and prevent abuse)
• Crowdsource submissions (examples: Corrections or new caffeine/product info you submit to our crowdsource queue; why we collect it: To improve the accuracy of the caffeine data we show everyone)
• Purchase information (examples: A confirmation that you made an in-app purchase, and what you bought; why we collect it: To deliver what you bought and provide support. Apple (App Store) or Google (Google Play) processes the payment — we do not receive your full card number.)

Camera and photos. Scanning uses your device camera to read a product or barcode. If you attach a photo to a drink, the App accesses the photo you pick. We only use the camera and photos for the features you trigger. iOS controls these permissions, and you can change them anytime in Settings.

Age group. We store your answer on your device and in your account profile at our sign-in provider (Clerk), so a new device does not ask again. We use it only to decide whether the App shows caffeine-intake numbers and sends streak reminders. The legal basis is our legitimate interest in protecting younger users, and our contract with you. We keep it while your account exists and delete it with your account. You can ask us to correct it at support@canmog.com.

Caffeine amounts. The App calculates caffeine amounts from the drinks you scan, using the product data in Section 6. CanMog is a collection game, not a caffeine or health tracker. Users under 18 do not see caffeine-intake numbers, and caffeine totals cannot be shared from the App. Earlier versions of the App asked for a daily caffeine amount during onboarding. We no longer ask for it; earlier answers stay only on your device.

Apple Health (iOS, optional). If you choose to connect Apple Health, the App reads (never writes) weight, height, date of birth, biological sex, heart rate, resting heart rate, steps, active energy and sleep, to show estimates on the caffeine-intake (Nutrition) screens. This data stays on your device: we do not send it to our servers, to analytics, or to any third party, and we never use it for advertising. Users under 18 do not see these screens. You can turn off access at any time in the Health app or in iOS Settings.

We do not ask for other sensitive information (like medical records, precise location, or government IDs), and please don't send it to us.

3. How we use your information

We use the information above to:

• Provide, maintain, and run the App and your account.
• Power your scans, collections, tier lists, ranks, streaks, and friends features.
• Show caffeine and product information (sourced from third parties — see Section 6).
• Improve the App, build new features, and understand how people use it.
• Keep the App secure, prevent fraud and abuse, and enforce our terms.
• Respond to your support requests.
• Comply with the law and protect our legal rights.

4. Do we sell or share your data?

This section matters, so we're spelling it out clearly.

What we never do

• We do not sell your individual, identifiable personal information for money.
• We do not share your individual, identifiable information with third parties (like beverage brands) for them to use on their own.
• We do not give any third party the ability to identify you from the trend data we share.

What we may do: anonymous, aggregated trends

We may create aggregated, de-identified statistics about how people use the App and what they scan — for example, "the most-scanned energy drink in [region] this month" or "average number of scans per user." We may share or sell this aggregated, anonymized trend data to third parties, such as beverage brands and market researchers.

This data is:

• Aggregated — combined across many users, never about one person.
• De-identified — stripped of information that identifies you.
• Not reversible — built so that no third party can re-identify you or single you out.

We contractually require recipients not to attempt to re-identify anyone.

Advertising

CanMog does not currently show third-party ads, and we do not use your information for cross-app or cross-context advertising. The only data we ever share or sell is the aggregated, de-identified trend data described above — which is not personal information and cannot identify you.

Other times we may disclose information

• Service providers who work for us (hosting, analytics, crash reporting, customer support) — only to do their job for us.
• Apple and Google, which process purchases.
• Legal reasons — if required by law, subpoena, or to protect rights, safety, or prevent fraud.
• Business transfers — if we're involved in a merger, acquisition, or sale of assets, your information may transfer as part of that deal (we'll notify you if so).

5. Advertising and tracking

CanMog does not currently display third-party ads, and it does not track you across other companies' apps and websites for advertising.

• We do not use Apple's Identifier for Advertisers (IDFA) for ad targeting.
• If we add advertising in the future, we'll update this policy first, and on iOS we'll request your permission through Apple's App Tracking Transparency prompt before any such tracking. You'll always be able to decline.

6. Caffeine and product data sources

The caffeine and product information shown in the App comes from third-party and crowdsourced sources, including Open Food Facts, Nutritionix, our own curated lookup table, and submissions from users in our crowdsource queue.

• When you scan or look up a product, the App may send a product identifier or barcode (not your personal identity) to these providers to retrieve information.
• These providers handle that request under their own privacy policies.
• This data may be incomplete or inaccurate and is for information only — it is not a substitute for the product label or professional medical advice. (See our Terms of Service and in-app safety notice.)

7. Third-party services we use

We rely on trusted third parties to run the App. Each has its own privacy policy:

• Apple — app distribution (App Store) and in-app purchase processing.
• Google — app distribution (Google Play), in-app purchase processing, and crash reporting (Firebase Crashlytics: crash logs, device model, operating-system and app version, and an installation identifier, used only to find and fix crashes).
• Clerk — account creation, sign-in, and authentication.
• Supabase — backend hosting and storage for your account and content.
• Cloudflare — storage and delivery of the photos you upload, and hosting of our website.
• RevenueCat — managing and validating in-app purchases and subscription status.
• PostHog — product analytics and diagnostics (screens viewed, features used, and in-app events), to help us understand usage and improve the App. Analytics events are associated with your account identifier and are not used for cross-app or cross-context advertising.
• Open Food Facts and Nutritionix — caffeine and product data.

8. Children's privacy

CanMog is for people 16 and older. It is not intended for children under 16, and we do not knowingly collect personal information from children under 16.

• If you are under 16, please do not use the App or send us any information.
• If we learn that we have collected personal information from a child under 16, we will delete that account and its data promptly.
• In the United States, the Children's Online Privacy Protection Act (COPPA) protects children under 13. In the EU, the age at which a child can consent to online services (GDPR Article 8) is between 13 and 16 depending on the country (13 in Latvia); our minimum age of 16 is at or above that age in every EU country.
• If you are a parent or guardian and believe your child under 16 has given us information, contact us at support@canmog.com and we will delete it.

Users aged 16–17. During onboarding we ask whether you are 18 or older (see Section 2). If you answer "I'm under 18", the App does not show caffeine-intake numbers (such as daily totals and the caffeine calendar) and does not send streak reminder notifications. We do not sell or share the personal information of any user (see Section 4).

9. Your privacy rights by region

Depending on where you live, you may have specific rights. We honor these rights and won't discriminate against you for using them.

California (CCPA/CPRA)

If you're a California resident, you have the right to:

• Know what personal information we collect, use, and disclose.
• Delete the personal information we hold about you.
• Correct inaccurate personal information.
• Opt out of the "sale" or "sharing" of your personal information.
• Limit the use of sensitive personal information (note: we aim not to collect sensitive personal information).
• Non-discrimination for exercising your rights.

The App is not for users under 16, and we do not "sell" or "share" the personal information of any user.

Other US states (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and more)

If you live in a US state with a comprehensive privacy law, you generally have rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of any "sale" of your data. To exercise these rights, contact us at support@canmog.com.

Europe, UK, and EEA (GDPR / UK GDPR)

If you are in the EU, UK, or EEA, you have the right to access, correct, delete, restrict, and port your data, to object to certain processing, and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority, or with ours: the Data State Inspectorate of Latvia (Datu valsts inspekcija).

We process your data under these legal bases:

• To perform our contract with you (running your account and the App).
• Your consent (where we ask for it).
• Our legitimate interests (improving the App, security, and fraud prevention), balanced against your rights.
• Legal obligations.

10. How to exercise your rights

To make any request — access, correction, deletion, or to opt out of the "sale/share" of your information — you can:

• Email us at support@canmog.com, or
• Use the in-app controls in Settings (for example, account deletion).

We will verify your request (to protect your account) and respond within the time required by the law that applies to you. You may use an authorized agent where the law allows it.

11. Data retention

We keep your personal information only as long as we need it to provide the App and for the purposes described in this policy, or as long as the law requires.

• When you delete your account, we delete or de-identify your personal information within a reasonable period, except where we must keep some records (for example, for legal, security, or accounting reasons).
• Aggregated, de-identified data is not personal information and may be kept indefinitely.

12. Data security

We use reasonable technical and organizational measures to protect your information. No method of storage or transmission is 100% secure, so we can't guarantee absolute security. Please use a strong, unique password and keep your device secure.

13. International users

We are based in Latvia, in the European Union. Some of the service providers listed in section 7 process data outside the European Economic Area, including in the United States. For those transfers we use the safeguards that the GDPR requires, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

14. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Effective date" above and notify you in the App or by other reasonable means. Your continued use of the App after an update means you accept the revised policy.

15. Contact us

Questions, requests, or concerns about your privacy?

Songtive SIA, Latvia Email: support@canmog.com Website: https://canmog.com