Privacy Policy

Brewki is a coffee app for people who love coffee, at home and out. This page explains what we collect, why, who helps us run the app, and what you can do about it. The short version: we collect what the app needs to work, we don't sell anything, we don't run ads, and we don't use tracking or analytics cookies.

Who we are

Brewki is run by Rodrigo Sousa, an individual based in Portugal, who is the data controller for the personal data described here. For anything about your data, write to hello@rodrigo-sousa.com.

What we collect

• Your account: your email address and password. Passwords are stored hashed by our sign-in provider; we can't read them.
• Your profile: name, handle, photo, bio, location, website, and the gear and accessories you add.
• What you post: brews, café visits, ratings, tasting notes, captions, photos, bags and roast dates, comments, likes, follows, favourites and recipes.
• Bag photos you scan: the picture of a coffee label, used to read the roaster, origin and tasting notes.
• Technical data: sign-in cookies, and the IP address, device and browser details that our hosting providers log when you use the app.
• Messages you send us: feedback, bug reports and profile claims arrive by email and include what you write, plus the page and device you sent them from.

What's public

Brewki is a community app. Your profile, brews, café visits, ratings, comments, photos and follows can be seen by anyone, including people who aren't signed in. Your email address is never shown. Coffees, cafés, gear and recipes you add become part of the shared catalogue that everyone uses.

Why we use it

• To run the app you signed up for (performance of a contract): your account, your posts, your feed, coffee pages built from everyone's brews, and bag scans.
• To keep it safe and working (legitimate interest): preventing abuse and spam, fixing bugs, and understanding what to improve.
• To answer you (legitimate interest): replying to feedback and handling profile claims.

We don't send marketing emails, sell data, show ads, or build advertising profiles.

Who helps us run Brewki

These providers process data for us, only to provide their service:

• Supabase: database, sign-in and photo storage, hosted in the EU (Paris).
• Vercel: hosting. The app's servers run in the EU (Paris); pages are delivered through Vercel's global network.
• Google (Gemini API): reads the bag photo when you scan a coffee. Only the photo is sent, not your account details. Under Google's terms for the plan we use, Google may use these images to improve its services, and they may be seen by human reviewers. Scan only the bag, not people or anything private.
• Email provider: messages you send to hello@rodrigo-sousa.com are received and stored by our email host.

Vercel and Google are US companies, so some data may be processed outside the EU. Those transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep it

We keep your data while your account exists. When you delete a post, it's removed. When you delete your account, your profile, posts, photos, likes, comments and follows are deleted straight away; coffees, cafés and gear you added stay in the shared catalogue without your name. Copies can remain in our providers' backups and logs for a limited time before they're overwritten. Emails you send us are kept as long as needed to deal with them.

Your rights

Under the GDPR you can:

• see the data we hold about you and get a copy of it;
• correct it (most of it you can edit yourself in the app);
• delete it: Settings → Delete account removes everything described above;
• object to or restrict how we use it, and take it with you in a portable format.

Email hello@rodrigo-sousa.com for any of these and we'll reply within a month. If you're unhappy with how we handle your data, you can complain to the Portuguese data protection authority, the CNPD, or the authority in your own EU country.

Cookies

Brewki only uses the cookies needed to keep you signed in. There are no analytics, advertising or tracking cookies, so there's nothing to consent to.

Age

You need to be at least 13 to use Brewki. If you believe a younger child has an account, tell us and we'll delete it.

Changes

If we change this policy, we'll update the date at the top. If the change is significant, we'll tell you in the app before it takes effect. See also our Terms of Use.