1. Who we are
GrabMe is a trading name of Simplyvending Ltd, a company registered in England and Wales (company number 17446723), registered office: 4th Floor Office, 205 Regent Street, London W1B 4HB. We run automated coffee machines in London and the GrabMe mobile app used to buy and redeem drinks at them. Simplyvending Ltd is the data controller. Contact: support@grabme.coffee.
2. What we collect
- Phone number: to create your account and sign you in with a one-time SMS code.
- Drinks, passes and rewards: what you buy or redeem, your pass status and your free-cup balance, so the service works.
- Payment details: handled by our payment provider. We never see or store your full card number.
- Device data: app version, device type and, if you allow notifications, a push-notification token. We use these to fix problems, prevent abuse (for example, a QR code being used twice) and send the notifications you've agreed to.
- Website data: our hosting provider processes basic technical data (IP address, browser, pages requested) to deliver this website.
3. What we don't do
- We don't sell or rent your data.
- We don't use advertising trackers or build third-party analytics profiles.
- We don't track your precise location. The app shows where machines are. It does not record where you are.
4. Why we use it (legal bases)
To provide the service you signed up for (contract), to keep the service secure and prevent fraud (legitimate interests), to send optional notifications (consent, which you can turn off at any time in your phone settings), and to keep tax and accounting records (legal obligation).
5. Service providers
We use providers for hosting (Vercel and our UK/EU servers), SMS delivery, payments and push notifications (Apple and Google, via Expo). They process data only to provide their service to us.
6. How long we keep it
We keep your data while your account is active. If you delete your account, we remove your personal data within 30 days, except records the law requires us to keep (for example, payment records for tax).
7. Your rights
Under UK GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to its use, and withdraw consent. Email support@grabme.coffee. We reply within 30 days. You can also complain to the UK Information Commissioner's Office (ico.org.uk). To delete your account, see Delete your account.
8. Children
GrabMe is not intended for children under 13, and we do not knowingly collect their data.
9. Changes
If this policy changes in a meaningful way, we'll tell you in the app. The current version is always at grabme.coffee/privacy.
Back to GrabMe