coffeesmarts is developed and operated by Enso Ventures S.à r.l-S, a company registered in Luxembourg ("we", "us", "our"). Our contact address for privacy matters is privacy@ensoventures.org.
We collect only the data required to operate the app and improve it.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Provide the app and sync your coffee data across devices | Account info, coffee log entries | Contract (Art. 6(1)(b)) |
| Generate palate insights and recommendations | Coffee log entries | Contract (Art. 6(1)(b)) |
| Improve the app through usage analytics | Analytics events | Legitimate interest (Art. 6(1)(f)) — opt-out available |
| Diagnose and fix crashes | Crash reports, app version | Legitimate interest (Art. 6(1)(f)) |
| Manage subscription status | Subscription confirmation from Apple/Google | Contract (Art. 6(1)(b)) |
Your data is stored in Google Firebase (Firestore), hosted in the EU (eur3 — Europe West region). Firebase applies encryption at rest and in transit. Access is controlled by Firestore security rules that restrict each user to their own data only.
We retain your data for as long as your account is active. If you delete your account, all associated data is permanently and irreversibly deleted.
| Processor | Purpose | Data shared |
|---|---|---|
| Google Firebase (Firestore, Auth, Analytics, Crashlytics) | Database, authentication, analytics, crash reporting | Account info, coffee data, usage events |
| Apple App Store / Google Play | App distribution and subscription management | Subscription status only (no personal data) |
| Google (Sign in with Google) | Authentication | Google account email and display name |
| Apple (Sign in with Apple) | Authentication | Apple account email (or private relay) and display name |
| Anthropic (Claude API) | Server-side generation of palate narrative cards from your aggregated coffee preference data. Processing occurs within our Cloud Function infrastructure; your raw coffee entries are not transmitted — only aggregated statistical outputs derived from them. | Aggregated preference data (no raw personal data). Anthropic does not retain data submitted via the API per their usage policy. |
We do not use advertising networks, data brokers, or marketing platforms.
If you are in the EU or UK, you have the following rights:
Delete your data only (keep account active) — Settings → Data Management → Delete Data. This permanently removes all your coffee log entries, analytics history, and personal data. Your account credentials are preserved.
Delete your account entirely — Settings → Account → Delete Account. This permanently and irreversibly removes your account, all coffee data, and all personal information. This action cannot be undone.
coffeesmarts is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact privacy@ensoventures.org and we will delete it promptly.
| Category | Collected | Sold or shared |
|---|---|---|
| Identifiers (email, user ID) | Yes | No |
| Personal records (coffee log entries) | Yes | No |
| Usage data (analytics events) | Yes (opt-out available) | No |
| Location data | No | No |
| Financial information | No | No |
| Sensitive personal information | No | No |
We do not sell personal information. California residents may exercise CCPA rights by contacting privacy@ensoventures.org.
We may update this policy from time to time. Material changes will be notified in-app. The effective date at the top of this page reflects the date of the most recent revision. Continued use of the app after a change constitutes acceptance.
For any privacy questions or to exercise your rights: privacy@ensoventures.org
Enso Ventures S.à r.l-S
Luxembourg