Privacy Policy

Cupperlog is a coffee diary built by a tiny independent team. This policy explains what information the app handles while you record your coffee journey, and the short version is: your diary belongs to you, most of it never leaves your device, and we don't run analytics, ads, or trackers.

1. Information we collect

Account credentials. When you create an account we store your username, a contact email address, and your display name to manage account access. Signing in is optional — the diary works without an account.

Journal & sensory data. Your cupping notes, coffee details, calendar entries, ratings, and diary-board layouts make up your personal diary.

Visual media. Photos you attach to diary boards or upload for group tasting events are hosted on our cloud infrastructure so they display across devices.

2. Local vs. cloud storage

Local-first. Your diary lives in your device's local storage first. You can write, browse, and export entries without an account; features that involve other people or the cloud (sync, group events, AI scanning) need an internet connection.

Cloud synchronization. When you are signed in and online, your entries, profile, and saved collections are backed up to our secure cloud database (powered by Supabase, hosted in Sydney, Australia).

3. Device permissions

The app requests one system permission, and only when you use a feature that needs it: Camera & Photo Library, used to photograph coffee packages for label scanning, attach photos to your diary boards, and read event join codes. You can revoke it at any time in your operating system settings. The app does not use location services and does not send notifications; any location shown on your profile is text you typed yourself.

4. AI label scanning

When you choose to scan a coffee package, the photo is sent over an encrypted connection to our server and forwarded to Anthropic's Claude API, which reads the label and returns the coffee's details as text. The photo is used only to answer that scan; it is not used to train AI models. Scanning is entirely optional — you can always type the details yourself, and when scanning is unavailable an on-device reader is used instead.

5. Analytics & tracking

Cupperlog currently contains no analytics, no advertising, and no third-party trackers. We only see the technical server logs needed to keep the cloud service running. If we add crash reporting in a future version to help fix bugs, this policy will be updated first to say exactly what it collects.

6. Your data rights

Export. You can export your coffee history to a portable JSON document from Settings at any time.

Deletion. Deleting your account from Settings permanently removes your entries, profile, media, and event records from our cloud servers. Feedback you submitted may be kept in anonymized form.

7. Information security

All data moving between the app and our servers is encrypted in transit (TLS), and cloud data is protected with per-user access rules so only you can read your diary. No internet system is perfectly secure, so cloud features are provided on an as-available basis.

8. Changes & contact

We may update this policy as the app evolves; the current version is always available at this address and inside the app under Settings → About. Questions or requests: clemokm22@gmail.com.