Privacy policy

• Your journal (beans, brews, ratings, notes, photos and preferences) is stored only on your phone. We have no access to it.
• There are no accounts, no ads and no tracking across apps. We don't sell data.
• Two features send data to our server, only when you use them: reading a bag label and asking the coach. The server uses that data to answer and doesn't keep it.
• To produce those answers, the server uses Claude, an AI model by Anthropic.
• Premium is paid through the App Store or Google Play. We never see your card. To know whether you have Premium and how many free coach requests you have left, the app uses an anonymous identifier, with no name or email.

Everything you log is stored in a local database inside the app: your bags (name, roaster, origin, process, roast date, weight, price, tasting notes and your notes), your brews (method, recipe, grind, time, temperature, rating, taste compass point and notes), the photos of bags and cups, your bag reviews and your preferences, including the name you choose for the greeting.

This data is not sent to us or to anyone else, except for the parts described in the next section when you use those features. Deleting the app deletes it.

Reading a bag label (when you scan or pick a photo of a bag):

• the photo of the label;
• your phone's date and the app's language;
• your usual brewing method and recipe and your grinder, so the answer can include a recipe to start with;
• your best recipes from similar bags (process, roast, origin and recipe; no names or notes).

The coach and the bag recap (only when you tap to ask):

• that bag's details as you entered them: name, origin, process, roast level and the label's notes;
• its cups: method, recipe, grind, time, temperature, rested days, rating and compass point;
• your grinder and your best recipes from other bags;
• for the recap, also your review of the bag, the flavors you marked, a summary of your previous bags, your taste preferences and the countries you've tried.

Each of these requests also carries the app's anonymous identifier (see "Purchases and subscriptions"). With it, the server checks whether you have Premium and keeps a count of how many free coach requests and how many scans that identifier has used, to apply the free requests and the usage limits. That count is the only thing it keeps: no photos, beans, cups or notes. To prevent abuse, it also counts how many requests arrive from each IP address within a minute, and deletes that count after two minutes.

Before the first of these requests, the app shows you what is sent and to whom, and asks for your permission. Nothing is sent without it. You can withdraw it at any time in Settings → Your data; the app will ask again before sending anything.

We use this data only to answer that request. Our server does not store photos or the content of requests: they are processed in memory and discarded once the answer is sent. Our technical logs record errors without the content of the request. Our hosting provider may record technical data such as IP address and request time for security and to keep the service running.

To read labels and write the coach's answers, our server sends the data above to Anthropic's API. Anthropic acts as our service provider. Under its commercial terms, Anthropic does not use data sent through its API to train its models and keeps it only for a limited time. You can read how Anthropic handles data at anthropic.com/legal/privacy.

• We don't show ads or share data with advertisers.
• We don't sell or rent data.
• We don't track you across other apps or websites.
• Today the app sends no usage analytics or crash reports. If we add them, they will be anonymous, this policy will be updated before they are turned on and you will be able to turn them off in Settings.

• Camera: to photograph a bag's label or your cup. Only used while the scanner or the camera is open.
• Photos: to pick a label photo or add a photo of a cup. The app only sees the photos you choose.
• Notifications: daily reminder, rating reminder and when a bag reaches its peak. They are scheduled on the phone and don't go through any server.

You can change these permissions at any time in your phone's settings.

A backup is a file with all your data, photos included, that the app creates on your phone. You choose where to save it (Files, iCloud Drive, AirDrop, etc.). It doesn't go through our server. Anyone who has the file can read its contents, so keep it somewhere safe.

Premium is a subscription you buy inside the app. Payment is processed by Apple (App Store) or Google (Google Play) with your Apple ID or Google account; we never receive your card details or your account's name or email.

To manage subscriptions we use RevenueCat, which acts as our service provider. The app uses an anonymous identifier, not linked to your name, email or journal: on iPhone it's a random number kept in the phone's Keychain, so it stays if you delete and reinstall the app; on Android it's the identifier the system gives the app (ANDROID_ID), which changes if you factory reset the phone. RevenueCat receives that identifier and, from the store, the details of your purchases (product, price, currency, country, dates, renewals and cancellations) to tell the app and our server whether you have Premium. You can read how RevenueCat handles data at revenuecat.com/privacy.

If you reinstall the app or switch phones, "Restore purchases" in Settings recovers your subscription from your Apple ID or Google account.

The app is not directed at children under 13 and we don't knowingly collect data from them.

Since your journal is not on our servers, you control it directly: you can edit or delete anything in the app, export it with a backup and delete it entirely by deleting the app. The only things tied to the app's anonymous identifier are your purchase history and the usage count described above; to have them deleted, write to us. Depending on where you live (for example, under the GDPR in the European Union) you have rights of access, rectification, deletion and objection; if you have any question or request, write to hello@beansip.app.

If we change how the app handles data, we will update this page and its date before the change applies. If the change is significant, the app will also tell you.

For any privacy question: hello@beansip.app.