Privacy policy
The short version
- Brewmate works without an account. Without one, everything you log stays on your phone.
- If you sign in, we store your email address and your coffee log so it can be backed up and synced.
- To find bugs and see which features get used, the app can send crash reports and anonymous usage events. It asks first, and sends nothing unless you allow it. You can change either at any time in Settings → Privacy.
- We don't sell your data, show ads, or share it with anyone for advertising.
- You can delete your account and all synced data at any time, in the app or on this site.
What we collect
Without an account: your coffee log stays on your phone. Only the crash reports and usage events you allow leave it (below), plus what a feature that needs the internet sends (see "Learning a recipe from a link").
If you sign in:
- Email address: to send your one-time sign-in code and identify your account.
- Your coffee log: beans, roasters, brews, recipes, equipment, ratings, tasting notes and settings, so they can be backed up and synced between your devices.
- Photos you choose to back up (for example a photo of a coffee bag).
- Technical data needed to run the service: sign-in tokens and basic server logs (time, request, error codes), kept for security and debugging.
We do not collect your location, contacts, or advertising ID. Brewmate contains no advertising SDKs.
Crash reports and usage events
Both are off until you allow them. The first time you open the app, it asks; nothing is sent before you answer, and nothing at all if you choose Not now. If you allow them, the app sends:
- Crash reports, to Sentry: what went wrong in the code, the app version, the phone model and Android version, and the last few screens visited. Email addresses are removed before a report leaves the phone, and IP addresses are not stored.
- Usage events, to PostHog: which screens you open and which features you use, such as starting or finishing a brew (with the method, a rough length and the star rating), adding a bean, saving a recipe, or viewing and choosing a plan on the Pro screen. Events never contain your notes, bean or recipe names, or email address, and IP addresses are discarded. The app records no taps or screen recordings beyond these named events.
If you are signed in, both carry your Brewmate account number (a random id, not your email) so a problem can be matched to your account when you ask for help. Settings → Privacy has a separate switch for each, Crash reports and Usage data, and turning one off stops it straight away. Only the Android app sends these today; the iPhone app sends neither.
The Android beta list
If you join the beta on this site, we store the email address you give us (and a first name, if you add one) with Resend, our email provider, to send you the beta invite, testing updates and the launch announcement. We also add it to Google Play's tester list so you can install the test version. Every broadcast has an unsubscribe link, and you can ask us to remove you at any time.
Learning a recipe from a link
If you share a public video link (for example an Instagram reel) with Brewmate to turn it into a recipe, the link is sent to our server, which reads the public post to extract the recipe. We do not access your Instagram account.
Where your data is stored
Synced data is stored with these service providers, who process it only to run Brewmate:
- Google Cloud (Cloud Run): the Brewmate API, in Singapore
- Neon: the database, in Singapore
- Cloudflare R2: backed-up photos
- Resend: sends sign-in code emails and beta emails, and keeps the beta list
- Sentry: crash reports, in the EU (Germany)
- PostHog: usage events, in the EU
- Google Play and RevenueCat: Brewmate Pro purchases and their status
Data is encrypted in transit (HTTPS).
How long we keep it
We keep your account data until you delete your account. Sign-in codes expire within minutes. Server logs are deleted after 30 days, and the database's rolling recovery history after 6 hours. Crash reports are kept for up to 90 days and usage events for up to 1 year, then deleted by Sentry and PostHog. Purchase records are kept by Google Play and RevenueCat as their own policies and the law require.
Deleting your data
Delete your account in the app (Settings → Delete account) or on this site using a code sent to your email. Deletion permanently removes your account, your synced coffee log, recipes, equipment, settings, anything you posted, and your backed-up photos from our servers. Data stored only on your phone is removed when you delete the app's data or uninstall it.
Children
Brewmate is not directed at children under 13, and we do not knowingly collect their data.
Your rights
You can ask for a copy of your data, a correction, or deletion by emailing [email protected]. We reply within 30 days.
Changes
If this policy changes, we update the date at the top. For significant changes we tell you in the app.