Privacy Policy

CUPPERLØG is a coffee diary built by a tiny independent team. This policy explains what information the app handles while you record your coffee journey, and the short version is: your diary belongs to you, most of it never leaves your device, and we don't run analytics, ads, or trackers.

1. Information we collect

Account credentials. A Cupperlog account is required to use the diary. We store your username, a contact email address, and your display name to manage account access and keep your diary secure.

Profile details. Your display name, @handle, an optional profile photo (resized to a small thumbnail on your device before it is stored), and an optional home city (which you can type yourself or have suggested on your device — see section 3) are saved with your profile, and are synced to our cloud while you are signed in.

Journal & sensory data. Your cupping notes, coffee details, calendar entries, ratings, and diary-board layouts make up your personal diary.

Visual media. Photos you attach to diary boards or upload for group tasting events are hosted on our cloud infrastructure so they display across devices.

Tasting events. When you join a table, the other people at it can see the display name and colour you chose for that event and, as the host reveals them, your answers — including anything you type in a describe round. Images the host adds to questions are stored on our cloud and reachable by anyone who has their link. Your profile photo and home city are never shown to other users.

Push tokens. If you allow notifications on iOS or Android, a device push token linked to your account is stored so we can deliver them (see section 3).

2. Local vs. cloud storage

Local-first. Your diary lives in your device's local storage first, so once you are signed in, writing and reading entries works even offline. Features that involve other people or the cloud (sync, group events, AI scanning) need an internet connection.

Cloud synchronization. When you are signed in and online, your entries, profile, and saved collections are backed up to our secure cloud database (powered by Supabase, hosted in Sydney, Australia).

3. Device permissions

The app asks for a system permission only when you choose to allow it — from the one-time setup card shown the first time you open the diary, or the first time you use a feature that needs it, and you can revoke any of them at any time in your operating system settings:

Camera & Photo Library. Used to photograph coffee packages for label scanning, attach photos to your diary boards, and read event join codes.

Location (optional, approximate). Only when you tap the location button (the compass icon) while editing your profile, the app reads your device's approximate location once and reduces it on your device to your nearest city, using a built-in list of cities. For the profile city, your coordinates never leave your device — only the resulting city name (for example “Melbourne, AU”) is saved to your profile. It is never read automatically, and you can always skip it and type your city by hand instead. Separately, when you start a new diary entry and you have already allowed location access, the app reads your approximate location once to pre-fill the day’s weather — it never shows a permission prompt by itself, and a tap on the weather icon always overrides it. It rounds the location on your device to about 11 km, and sends only that rounded point to our server, which asks MET Norway (the Norwegian Meteorological Institute) for the local forecast and returns a simple sunny / cloudy / rainy value. The rounded point is used only to answer that request and is never stored. Weather data by MET Norway, CC BY 4.0.

Notifications (optional). On iOS and Android, when you are signed in the app asks the system for permission to send push notifications — for example to tell you a group tasting's results are ready. If you allow it, a device push token linked to your account is stored in our cloud database so those notifications can reach your device; the token is removed when your account is deleted. Declining simply means no notifications — everything else works the same, and you can change your mind any time in your system settings. If you turn on the daily reminder in Settings, that notification is scheduled by the app on your device itself — nothing about it is sent to us or anyone else.

4. AI label scanning

When you choose to scan a coffee package, the photo is sent over an encrypted connection to our server and forwarded to Anthropic's Claude API, which reads the label and returns the coffee's details as text. The photo is used only to answer that scan; it is not used to train AI models. We do keep the text read from the label, linked to your account, so scanning keeps getting better — it is never shown to other people, and it is deleted when you delete your account. Scanning is entirely optional — you can always type the details yourself, and when scanning is unavailable an on-device reader is used instead. The coffee facts read from a label — roaster, coffee name, origin, variety, process, altitude, producer and the printed tasting notes — may be added to the shared coffee catalogue that powers scanning for everyone, with no link to you or your account; a catalogue entry describes a coffee, not a person, so it is not removed when you delete your account.

5. Analytics & tracking

CUPPERLØG currently contains no analytics, no advertising, and no third-party trackers. We only see the technical server logs needed to keep the cloud service running. To limit abuse, sign-up and password-reset attempts are counted per network address for up to two days; those counters hold no account data and are deleted automatically. If we add crash reporting in a future version to help fix bugs, this policy will be updated first to say exactly what it collects.

Our processors. The complete list of third parties that process data for us: Supabase (accounts, database, storage, and sync — hosted in Sydney, Australia), Anthropic (reads the label photo when you use the AI scan), Resend (delivers password-reset emails — it sees your contact email address and your username for that message only), Have I Been Pwned (when you set a password, the first five characters of a hash of it — never the password itself — are checked against known breaches), Apple and Google (deliver push notifications to your device if you allow them — they receive your device token and the notification text), MET Norway (answers the diary’s weather lookup — it receives only a location rounded to ~11 km from our server, never who asked), and Cloudflare (serves this website and our weather relay, and routes support email). Each processes your data only to provide its service to us, and none of them advertises to you or sells your data.

6. Your data rights

Export. You can export your coffee history to a portable JSON document from Settings at any time.

Deletion. Deleting your account from Settings permanently removes your entries, profile, media, and your answers and participation in events from our cloud servers. Events you hosted are unlinked from your account and closed instead of deleted, so the other tasters keep their records (see the deletion page for details). Feedback you submitted may be kept in anonymized form.

Delete my data. “Delete my data” in Settings erases your entries, saved layouts and stickers, badge progress, tasting records and profile from this device and from our cloud, while keeping your account; your push token, feedback, scan records and your answers at tasting events are not affected. Deleting a single entry leaves a small placeholder (its id and date, no content) so the deletion reaches your other devices; placeholders are removed by “Delete my data” or by deleting your account.

7. Information security

All data moving between the app and our servers is encrypted in transit (TLS), and cloud data is protected with per-user access rules so only you can read your diary. No internet system is perfectly secure, so cloud features are provided on an as-available basis.

8. Who we are, changes & contact

The entity responsible for your personal information — the data controller under the GDPR for readers in the EU and UK, and under Australian privacy law — is Kin Man Ong (ABN 15 680 395 416), Sydney, Australia, trading as CUPPERLOG (styled CUPPERLØG). We may update this policy as the app evolves; the current version is always available at this address and inside the app under Settings → About. Questions or requests: support@cupperlog.com.

9. For readers in the European Union and the United Kingdom

Legal bases. We process your data to perform our contract with you (your account, diary, sync and tasting events); with your consent for location, the AI bag scan and push notifications, each of which you can withdraw in the app or your device settings; and in our legitimate interest in keeping the service secure (the sign-up and password-reset counters and server logs).

Where your data goes. Your data is stored in Australia and handled by the providers listed in section 5, some of them in the United States. Those transfers rest on the European Commission’s standard contractual clauses, with the UK addendum, in our agreements with each provider.

Your rights. Beyond export and deletion in the app, you may ask us to access, correct, restrict or object to our use of your data, or to receive it in a portable form, by emailing support@cupperlog.com; we answer within one month. You may also complain to your local data protection authority.