Privacy Policy

What Coado stores, and where

By default, everything you enter (brews, ratings, tasting notes, coffee bags, grinders and brew methods, along with any photos you take) is saved in Coado's storage on your device. Brewing never requires a sign-in.

Optional Coado+ cloud sync

If you subscribe to Coado+ and sign in with Apple, Google, or an email one-time code, we store a copy of your journal, bags, personal recipes, settings, and bag/journal photos (private Storage) in our Supabase project so you can sync across devices. Apple and Google handle social sign-in only; email codes are for passwordless login. They do not host your brew journal for Coado. If you start a Coado+ trial while signed in, we may email that address once, two days before it converts to a paid year. We do not use your email for marketing. You can keep using the app offline; sync runs when you are online.

Camera and photos

Coado asks for camera access so you can scan a coffee bag's barcode and photograph your bags and brews, and for photo library access so you can pick an existing picture instead. Text on a bag is recognised directly on your device using Google's on-device ML Kit. No image is sent for that processing. Photos stay on the device unless you enable Coado+ cloud sync (signed in). Then bag and journal photos back up to private Storage.

The services Coado may contact

Coado works offline apart from lookups you trigger, optional sync, and anonymous product events:

• Open Food Facts. When you scan a barcode, Coado sends that barcode number to look up the coffee. See their privacy policy.
• Microlink. When you add a coffee from a web link, Coado sends that link to retrieve the product image. See their privacy policy.
• Supabase. Only if you enable Coado+ sync and sign in. Your sync payload is stored under your account with access limited to you.
• Apple / Google. Only when you use Sign in with Apple or Google for Coado+ sync.
• Mapbox. When Atlas shows the origin map, Coado requests map tiles. Those requests include a standard IP address and are not your journal. See their privacy policy.
• YouTube. When a catalog recipe has a YouTube source, Coado loads a thumbnail from Google. Tapping Play loads YouTube’s player in the app. Those requests include a standard IP address and are not your journal. You can watch on YouTube instead. See their privacy policy.
• Resend. Sends the email sign-in code (if you choose email) and the Coado+ trial reminder (if you are signed in).
• PostHog. Anonymous product events (app opens, brew start/finish/log, paywall, adding a bag) so we can improve Coado. Events do not include your journal notes, photos, taste scores, or email. See their privacy policy.

As with any internet request, a service can see the IP address the request came from. Barcode and link lookups do not include your journal.

Copies of your data

Your journal stays on your phone. If you use iCloud, Google backup, or another device backup, that backup may include Coado's local storage. There is no in-app file export in this version. If you use Coado+ cloud sync and want a copy of the data we store for your account, email privacy@coado.app.

Purchases

If you subscribe to Coado+, the purchase is handled by the App Store or Google Play. We never receive or store your payment card details. Only whether a subscription is active. If you are signed in during a free trial, we may send one reminder to that address two days before the trial ends.

Tracking and advertising

The Coado app contains no advertising and does not build advertising profiles. It sends anonymous product events to PostHog so we can improve the product. We do not send journal notes, photos, taste scores, or emails to PostHog, and we do not sell your data. This marketing website uses privacy-friendly, cookieless analytics (Umami Cloud) for aggregate page views only.

Deleting your data

You can delete individual brews, bags and gear inside the app at any time. Deleting the app removes local Coado data on that device. If you used Coado+ sync, email us to request deletion of server-side copies linked to your account.

Children

Coado is not directed at children and does not knowingly collect information from them.

Changes to this policy

If how Coado handles data ever changes, this page will be updated and the date at the top will change with it.

Contact

Questions about privacy: privacy@coado.app or hello@coado.app.