Privacy policy

Effective 30 September 2026

Coffrack is a coffee companion app for iPhone, Android and Mac. This policy explains what data the app and the website at coffrack.in handle, where it goes, and the choices you have. In short: your coffee log stays on your device unless you turn on sync, an account is optional, and we never sell your data or show ads.

Data stored on your device

Everything you add to Coffrack is saved in a database on your device: beans and bags, roast dates, grinders and equipment, prices you enter, brews, recipes, tasting notes and your settings. None of it is sent to us. The app works fully offline without an account. Uninstalling the app removes this data.

Signing in with Google

Signing in is optional. If you choose Continue with Google, Google asks for your permission to share the following with Coffrack, and nothing more:

This account data is stored by Supabase, the service that runs Coffrack's sign-in and database. We do not ask for access to your contacts, calendar, files or any other Google data, and we never post anything on your behalf.

Coffrack's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide sign-in and your profile. We do not sell it, use it for advertising, or transfer it to anyone except the service providers needed to run the app, and we do not allow humans to read it except with your consent, for security reasons, or where the law requires.

Sync across devices

Syncing your coffee log between devices is planned but not yet available. When it arrives, sync will be optional. The data you choose to sync (such as beans, brews, recipes, tasting notes and equipment) will be stored in your account with Supabase, and only your account can read or change it through the app.

How we use synced data to improve Coffrack

We may keep synced coffee data and use it to improve the Coffee Assistant and to build new features, for example better brewing suggestions, grind and ratio advice, and freshness guidance. When we do:

• We use de-identified or aggregated data: we remove your name, email address, photo and account identifiers before the data is used for this purpose.
• We never use data received from Google (your name, email address or photo) to improve or train the assistant or any other feature.
• We do not sell this data, use it for advertising, or share it with anyone except the service providers who help us run Coffrack.
• Data that stays only on your device is never collected.

You can opt out at any time by emailing [email protected]; we will also add a setting in the app when sync launches. Opting out stops future use of your data for this purpose, and deleting your account removes your synced data. Data that has already been aggregated with other users' data cannot be separated back out.

Roaster directory

To show current prices and stock, the app reads the public product listings of the roasters in its directory. These requests do not include any information about you.

Coffee Assistant

By default the assistant runs entirely on your device. If you choose to connect it to an external chat service in Settings, your questions and the parts of your coffee log needed to answer them are sent to the service you configured, under that service's own terms and privacy policy. Any access key you enter is kept in your device's secure storage and is only sent to that service.

What we don't do

• No advertising, and no advertising or tracking identifiers.
• No analytics or tracking SDKs in the app.
• No selling or renting of personal data.
• No cookies or analytics on this website.

Service providers

• Supabase: sign-in and account data storage.
• Google: sign-in, when you choose Continue with Google.
• Cloudflare: hosts this website and, like any web host, processes the technical data of your visit (such as IP address) to deliver pages and protect against abuse.

Keeping and deleting your data

We keep your account data for as long as you have an account. You can sign out at any time from Settings. To delete your account and all account data held with Supabase, email [email protected] from the address you signed in with, and we will delete it within 30 days. Data stored only on your device is removed when you delete the app.

You can also remove Coffrack's access to your Google account at any time from your Google Account connections page.

Your rights

You can ask us for a copy of the account data we hold about you, ask us to correct it, or ask us to delete it, by emailing [email protected]. We respond within 30 days.

Security

Account data is sent over encrypted connections and protected by access rules that let each account read only its own data. No system is perfectly secure, but we take reasonable steps to protect your data.

Children

Coffrack is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

If we change this policy, we will update the effective date above and, for significant changes, tell you in the app.

Contact

Questions about privacy: [email protected].