Privacy Policy

Last updated: October 12, 2026. This version replaces the app policy of September 26, 2026 and the website policy of July 13, 2026.

This is the only privacy policy that applies to Cupsight: the cupsight.app website, the Cupsight app for iPhone and the Cupsight app for Android. It says plainly what data each of them handles, where it goes, and how you can limit or delete it. Where iPhone and Android differ, the difference is stated.

The data controller is Arthur Pierrey, publisher of Cupsight. For any question or request: contact@cupsight.app.

1. In short

• Your collection (coffees, gear, recipes, journal, ratings, photos) lives on your phone. A copy can be placed in your iCloud (iPhone), in Android's automatic backup, and in a folder you choose.
• An account is optional. An anonymous account, with no email, is created automatically when you use a feature that goes through our server. You can link it to your Apple ID (iPhone) or your Google account (Android).
• To analyze a bag or compose a recipe, the app sends elements to our server, which queries third-party AI models: Google (Gemini) and, through OpenRouter, Z.ai, OpenAI and Anthropic.
• We measure how the apps are used with PostHog, hosted in the European Union, including session recordings. You can turn this off in Settings.
• No advertising, no data brokers, no tracking across other apps.
• You can delete your account from the app (Settings) or by email: see Delete my account.

2. The cupsight.app website

The website presents the app and offers editorial content. It has no accounts and no forms. It uses Vercel Web Analytics to measure page views and general interactions: Vercel states that this service stores anonymized data and does not use cookies. Events contain no name, email address, free text, or personal coffee data. The website is hosted by Vercel. The download buttons open the app's listing on Apple's (or Google's) site, which then apply their own privacy policy.

Share pages (URLs under /r/, /cr/ and /c/) query our server to display a recipe or coffee that someone deliberately shared. They are not indexed by search engines.

3. Data on your phone and backups

Everything you create in the app (coffees, gear, recipes, brews, ratings, photos, settings) is stored locally on your phone. We have no access to it.

• iPhone: if you turn on iCloud backup in the app's Settings, a copy is placed in your own iCloud Drive, under your Apple ID.
• Android: the app takes part in Android's automatic backup (a copy goes to your Google account according to your device settings, and to a new device when you transfer). Your local data and settings are included; the Cupsight sign-in session and the app's secrets are excluded.
• Both: you can copy your data to a folder of your choice (for example a folder synced by your Drive or Dropbox), export it as an archive, or import it. These copies are with you, or with the service you chose, not with us.

4. Account

Our server is hosted by Supabase, in the European Union (Frankfurt).

• Anonymous account. It is created automatically, with no name or email and a random identifier, the first time you use a feature that goes through the server: analyzing a bag or getting a recommendation from the AI, the Discover tab, sharing a recipe, the feedback form and, on iPhone, sharing your rated brews (on by default). The app asks you nothing for this.
• Apple (iPhone). If you sign in with Apple, we receive your Apple account identifier and the email address you choose to share, possibly an Apple relay address.
• Google (Android). If you sign in with Google, we receive your Google account identifier, your email address and your name. We do not access any other data from your Google account (contacts, Drive, calendar).

Signing in links your anonymous account to that identity: nothing you had already published is lost. You can sign out at any time.

5. Community

When you use the community (publishing, sharing, following profiles), your profile (username, avatar, declared gear), the coffees you add (name, roaster, origin, bag notes and bag photo), your best rated brews, the recipes you publish, your follows and your followers are copied to the server so that other members can see them. A profile can be made private in Settings; recipes have their own visibility. Deleting a coffee in the app also removes it from the server. If you report a profile, the report is stored so it can be reviewed.

Bag photos published for the community may be retouched automatically on our server (removing a hand, cleaning the background) by image models, see section 6.

6. The AI

When you ask to analyze a bag, identify a piece of gear, translate, or get a recommendation, the app sends what is needed to our server: the photo of the bag or beans, the recognized text, your gear, and the settings and ratings of your previous brews of that coffee. Our server forwards the request to a third-party AI model and returns the answer to you. Depending on the kind of request and availability, it is processed by:

• Google (Gemini models), directly;
• OpenRouter, a routing service, which forwards it to Z.ai (GLM model), OpenAI (GPT models), Anthropic (Claude model) or Google (Gemini).

Looking up a roaster or a rest window uses the Google search built into Gemini. Reading the text on a bag and cutting out the bag are done on your phone.

Our server counts your requests per account and per day (usage limit) and keeps, for each request, technical measures (type of request, model used, duration, token count, success or failure), never the content of the exchange. Its technical logs may keep excerpts for a few days when a request fails. The answer is saved in your journal, on your phone. These providers apply their own terms and may process data outside the European Union.

7. Sharing brews to improve recommendations

When this sharing is on, the app sends the server the settings and rating of every brew you rate (coffee, brewer, grinder, grind setting, dose, water, temperature, time, taste sliders, comment, app version), tied to your account identifier. This data is used only to improve recommendations and is processed in pseudonymized, aggregated form.

• iPhone: on by default.
• Android: off by default; it only turns on if you accept.

The setting "Improve Cupsight with my rated brews" turns it off at any time, and the data already shared is then deleted from the server.

8. Usage measurement and session recordings

To understand where the app helps and where it gets in the way, we use PostHog, hosted in the European Union. We collect: the screens shown and the actions taken in the app (scan, recommendation request, brew saved…), launches and backgrounding, the app and system version, an installation identifier and your account identifier, and an approximate location (the city) derived from your IP address, which is not kept.

We also record sessions: a sequence of screenshots of the app while you use it. They can therefore show your bag photos, your coffee names, your username and the text you type. Only the publisher looks at them, to fix the app.

This measurement is on by default. The setting "Share how I use the app" turns it off: collection and recordings stop immediately. This setting does not erase data already sent, which PostHog keeps under its own terms; deleting your account, however, automatically requests its erasure (section 13), and you can also ask for it by email (section 14). None of this is used for advertising or shared with third parties for that purpose.

9. Notifications

If you accept notifications, the app stores on the server your device's notification token (Apple Push Notification service on iPhone, Google's Firebase Cloud Messaging on Android), tied to your account, along with the platform. It is used to tell you about brews to rate, the tasting window of your coffees, or community activity, depending on your settings. The token is deleted when you sign out. On Android, Firebase also processes an installation identifier to deliver notifications.

10. Purchases

If purchases are offered, they go through the App Store on iPhone (and through Google Play on Android once they are available there). Apple and Google process the payment; we receive no card number or payment method, only the information that a subscription is active.

11. Feedback form

When you write to us from the app, your message, the app version, its language and, if you provide it, your email address are stored on the server and passed to our tracking tool so we can reply. If the feedback is triggered by a failure, what the app had recorded at the time of the failure is shown to you before sending and goes with the message.

12. Camera, photos and catalogs

The camera is used only when you choose to photograph a bag or beans (on Android, through the system camera or the photo picker, with no camera permission). The photo is sent only for the AI analysis (section 6) and, if you use the community, as your coffee's picture (section 5).

The app periodically downloads public catalogs of roasters and gear. When a roaster or a piece of gear is missing, the name you typed or scanned is sent to the server, with no other personal data, to enrich the catalog.

13. Retention and deletion

Your local data is deleted in the app; uninstalling the app erases the local copy. Your iCloud, Android and folder copies are managed with their own service. On the server: deleting a coffee or a recipe removes it from the server; turning off brew sharing deletes the shared brews; turning off usage measurement stops collection.

To delete your account and the data attached to it, use Settings › Delete my account in the app, on iPhone and on Android, whether you are signed in or anonymous. Deletion erases from the server your profile, your coffees and their photos, your recipes, your ratings, your follows, your notifications, your shared brews, your registered devices, your feedback and your AI usage counters, then the account itself. It also asks PostHog to erase the person attached to your account, with its measurement events and session recordings; PostHog then deletes them on its side, which can take a few days. It does not touch what is on your phone or your backup copies. The detailed steps, including the request by email, are on the Delete my account page.

14. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability over your data, and the right to withdraw consent at any time. You can export your data from the app. To exercise a right, including erasing your usage measurement data at PostHog, write to contact@cupsight.app: we reply within one month. You may also lodge a complaint with the data protection authority of your country; in France, the CNIL.

15. Children

Cupsight is not aimed at children and does not knowingly collect any data about them.

16. Changes and contact

This policy changes when the app or the website change; the date at the top is authoritative. For any question or request about your data: contact@cupsight.app.