Starbucks
- The documents do not say whether your data trains AI.
- The documents do not say whether your data is used for ads.
- The documents do not say whether your data is sold or shared.
- The documents do not say who can read your content.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
These pages do not list what Starbucks collects from you.
Read the exact line
Privacy policy
“Starbucks Corporation commits to resolve DPF Principles-related complaints about our collection and use of your personal information.”
Training
They mention using personal information under EU transfer rules, but not everyday app uses.
Read the exact line
Privacy policy
“Starbucks Corporation commits to resolve DPF Principles-related complaints about our collection and use of your personal information.”
Sharing
They can give personal data to governments and stay when agents process EU data.
Read the exact line
Privacy policy
“In certain situations, Starbucks Corporation may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.”
Kept
The documents do not say how long they keep your information.
Read the exact line
Privacy policy
“Starbucks Corporation remains under the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles if an agent of Starbucks Corporation processes personal information in a manner inconsistent with the EU-U.S. DPF Principles”
Controls
EU, UK, and Swiss people can email privacy@starbucks.com about DPF complaints.
Read the exact line
Privacy policy
“EU and UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact Starbucks Corporation at privacy@starbucks.com.”
Fine print
You cannot sue as a class.
No exact line could be verified.
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Email DPF-related privacy complaints (EU/UK/Swiss)
privacy@starbucks.com
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
You give up joining other customers in a .
Read the exact line
Terms of service
“To the fullest extent allowable by applicable law, you and we agree that each may bring claims against the other only in your or our individual capacity and not as a plaintiff or class member in any purported class, collective, consolidated, private attorney general, or representative proceeding.”
For example, if many people were overcharged the same way, you could not join them in one lawsuit.
If lots of similar claims are filed together.
Read the exact line
Terms of service
“If 25 or more similar Disputes (including yours) are asserted against Starbucks by the same or coordinated counsel or are otherwise coordinated (“Multiple Case Filing”), the resolution of your Dispute might be delayed and ultimately proceed in court.”
For example, if a lawyer files many similar app-billing cases, yours might wait through staged batches before anything happens.
They can hand over personal data when governments lawfully ask, including for security or police reasons.
Read the exact line
Privacy policy
“In certain situations, Starbucks Corporation may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.”
For example, a law-enforcement request could lead them to share account-related personal data.
People in the EU, UK, and Switzerland can email a privacy address about how EU-transfer data is handled.
Read the exact line
Privacy policy
“EU and UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact Starbucks Corporation at privacy@starbucks.com.”
For example, a customer in France could email privacy@starbucks.com about DPF-related data use.
Small claims court is still allowed if the case stays there.
Read the exact line
Terms of service
“except that either of us may take a Dispute to small claims court so long as it isn’t removed or appealed to a court of general .”
For example.
For some EU, UK, and Swiss data, Starbucks says it stays responsible if a vendor mishandles it, unless it proves it was not at fault.
Read the exact line
Privacy policy
“Starbucks Corporation remains under the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles if an agent of Starbucks Corporation processes personal information in a manner inconsistent with the EU-U.S. DPF Principles”
For example, if a processor in the U.S. mishandles EU customer data, Starbucks says it can still be under DPF rules.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- governing law
- Which country's or state's laws are used to settle any dispute, no matter where you live. For example, a user in Ohio may find the terms are judged under California law.
How we got here · grade F · score 19/100 · 15 of 15 policy answers backed by a verified quote · 14 not stated
What does the app collect beyond what it needs to work?
Not stated in the documents.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Not stated in the documents.
Do they sell or share your data, and can you opt out?
Not stated in the documents.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Not stated in the documents.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
Not stated in the documents.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
Neither excerpt includes a last-updated date or a full notice of how the privacy rules change.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 510 words at a college level (Flesch reading ease 46.6); the terms are 2,293 words at a college graduate level.
