Privacy Policy

• Account data — your email address and sign-in identity, handled by our authentication provider Clerk. Signing in with Google shares your Google account email with us.
• Profile data — the username, display name, and profile photo (avatar) you choose. Your username, display name, and avatar are visible to other signed-in users.
• Your coffee content — the brews, beans, setups, grinders, defaults, notes, scores, and photos you log in the app. Photos are stored in private cloud storage and are only served through short-lived signed links.
• Location data — if you attach a location to a brew, we collect the precise GPS coordinates from your device and, when you pick a named café or place, its name, address, and place identifier. Location is optional and only captured when you add it. See section 5 below.
• Social activity — who you follow and who follows you, the brews you like, and any content or users you report or block.
• AI gear images — when you use the optional feature to generate a stylized image of your grinder or setup, the photo you provide is sent to our AI provider (OpenAI) to produce the image.
• Notifications — in-app notifications (for example a new follower or a like) record who triggered them and what they relate to.
• Purchase data — your subscription or purchase status (product, trial/renewal state, expiry), processed by Apple and RevenueCat. We never see or store your payment card details; Apple handles all payment processing.
• Waitlist — if you join the waitlist on koffeelab.app, we collect your email address to notify you and send a welcome email (via Loops).
• Website analytics — anonymous page-view analytics on koffeelab.app via Vercel Analytics. No advertising trackers.
• Communication — emails you send us, feedback you submit through the app, and the address we use to send you a welcome or service email.

We use your data solely to run Koffeelab: authenticate you, store and sync your coffee logs across devices, show your public profile and public brews to other users, power the map and social feed, generate the AI gear images you request, deliver in-app notifications, handle reports and keep the community safe, verify your Koffeelab Pro entitlement, respond to support requests, and send essential service emails. We do not sell your data, and we do not use it for third-party advertising.

• Community catalog — when you create a bean, setup, or grinder, an anonymous snapshot of its text details (and image, if any) may be published to the shared community catalog so other users can add it to their own lists. Catalog entries carry no account information and cannot be traced back to you.
• Public profile — your username, display name, and avatar are visible to other signed-in users, who can follow you and view your public brews.
• Public brews — brews are private by default. If you mark a brew public, other signed-in users can view it, including its photos, and — when the brew is linked to a named place — its location, shown as a café name, address, and a map centered on the coordinates. Marking a brew with a location public shares that location.

We rely on a set of processors to operate the service: Clerk (authentication), Apple and RevenueCat (purchases and subscriptions), Neon (database), Cloudflare (photo storage), Mapbox (maps and place search), OpenAI (AI gear image generation), Notion (feedback and moderation records), Railway and Vercel (hosting), and Resend and Loops (service and waitlist emails). Each receives only the data needed for its function.

Location is optional and collected per brew, only when you choose to attach it. When you do, the precise GPS coordinates from your device are sent to our servers, along with the name, address, and identifier of any named place you select. For brews you mark public that are linked to a named place, this location is shown to other signed-in users and on the map; the location of private brews is visible only to you. You can leave the location off a brew, or delete the brew, to remove it.

When you report content or a user, or block someone, we store that information to operate moderation and keep the community safe. A report may include your identity, the content or user reported, and your reason, and may be recorded in our moderation tooling (Notion). We may retain reports to enforce these terms and comply with the law, even after the reported content is removed.

Your data is kept for as long as your account exists. Deleting your account removes your logs, photos, location data, profile, social connections, and entitlement record from our systems; previously published anonymous catalog snapshots remain, as they contain no personal data, and moderation or support records may be retained where needed to comply with the law or enforce our terms. To request account deletion or a copy of your data, email emillykkeg@gmail.com.

If you are in the EU/EEA, the GDPR gives you the right to access, correct, export, and delete your personal data (including your profile, location data, and social activity), to restrict or object to processing, and to lodge a complaint with your local supervisory authority (in Denmark: Datatilsynet). We process your data to perform our contract with you (running the app) and on our legitimate interest in keeping the service secure.

Koffeelab is not directed at children under 13, and we do not knowingly collect data from them.

We may update this policy as the service evolves. Material changes will be announced in the app or by email, and the effective date above will be updated.

Questions about this policy or your data: emillykkeg@gmail.com.