Privacy Policy

Data we collect

• Account: name, email address, bcrypt-hashed password, sign-up date, free-trial state, email-verified status.
• Coffee logs: bean name, roaster, drink type, rating (1–10), notes, brew parameters (dose, ratio, milk), location label (free-text only — no GPS), date and time you logged it.
• Photos and short videos you choose to upload: bean-bag photos, cup/latte-art photos, optional extra photos and a short video per cup.
• Bean library: any beans you add, including roaster details, country, roast level, flavor notes, weight tracking, freshness dates.
• Cafés and cups: any cafés you log (name, address, ratings) and reusable cups you save.
• Partnerships: identity of any partner you connect with and which categories (beans, cafés, cups, stats) you share.
• Push subscription tokens: only created when you explicitly tap “Enable” on the notifications prompt.
• Aggregate usage counters: per-feature monthly counts (e.g. how many cup-photo AI ratings you used) so we can enforce quotas.

Data we do not collect

• No GPS or precise location.
• No device identifiers, advertising IDs, or fingerprinting.
• No third-party advertising, retargeting, or marketing trackers.
• No microphone, motion, contacts, or calendar access.

How your data is used

• To render your personal coffee dashboard, charts, and partner-shared views.
• To run AI features you explicitly invoke (latte-art rating, bean-bag photo regeneration, café-screenshot import). The first time you use each AI feature, you see a one-time disclosure and must tap “Continue”.
• To send transactional emails (verification on signup, password resets).
• To send push notifications you opted into (incoming requests, low-stock alerts, freshness reminders).

We do not sell, lease, or share your data with anyone for advertising or marketing purposes.

Third-party services

The following providers process your data on our behalf, only as needed to operate the App:

• Supabase (US-West) — PostgreSQL database and photo/video storage. All access uses HTTPS and signed URLs.
• Vercel (US-East) — application hosting and serverless function execution.
• OpenAI — GPT-4o Vision processes cup photos when you tap the “AI rate” button. Per OpenAI's API data-usage policy, API inputs are not used to train OpenAI's models and are not retained beyond what's needed to return your result.
• Google Gemini — processes bean-bag photos when you tap “Regenerate photo”. Per Google's API data-usage policy for paid tiers, inputs are not used to train Google's models.
• Google Custom Search + Places — fetches bag images from public web search and café autocomplete results.
• Resend — sends transactional emails (verification, password reset, feedback notifications).
• Apple Push Notification Service — delivers push notifications on iOS when you opt in.

Data retention & deletion

You can permanently delete your account at any time from Settings → Account → Delete my account. On confirmation we delete:

• Your user record, sessions, password hash, and email-verification + reset tokens.
• All your coffee logs, beans (your own — not shared catalog beans), cafés, cups, partnership records, push subscriptions, and feedback.
• All photos and videos you uploaded, removed from Supabase Storage.

Deletion is immediate and irreversible. There is no soft-delete or recovery window.

Children

The App is rated 4+ but is not designed for children. We don't knowingly collect data from children under 13.

Changes

If we change this policy in a way that affects how your existing data is used, we'll notify you in-app before the change takes effect.