Privacy Policy

1. Who we are

Coffee Rambler operates a coffee-focused AI assistant and related tools. Coffee Rambler is a trading name. Once a UK limited company is formed, this Privacy Policy will apply to that entity without affecting your rights.

Contact for privacy matters: support@rambler.coffee.

2. What data we collect

a) Information you provide

• Account details (email address, username).
• Coffee diary entries, notes, and ratings.
• Coffee bean and equipment records.
• Uploaded images or documents, including coffee bag label images submitted via the label scanner feature.
• Communications or feedback you send us.

b) Automatically collected data

• Log data (IP address, device type, browser).
• Usage data (features used, timestamps, message counts).
• Approximate location (country/region).

c) Inferred data

We may generate insights based on your brewing history (e.g., taste preferences or skill level) to provide personalized recommendations.

d) Payment data

Payments are processed by Stripe. We do not store your full payment card details. Stripe collects billing details and identifiers according to its own privacy policy.

3. How we use your data

We use your data to:

• Provide and operate the Service.
• Authenticate users and manage accounts.
• Generate AI-powered insights and summaries based on your brewing history.
• Improve product quality and detect technical issues.
• Communicate account updates or respond to enquiries.
• Comply with legal and financial obligations.

We do not sell your personal data.

4. AI and automated processing

The Service utilizes Artificial Intelligence (AI) to process your inputs and generate responses.

Provider: Conversation data is processed via OpenAI’s API.

Training: We do not use your personal data or your specific brew diary entries to train our internal models or third-party AI models.

Logic: The AI uses your provided brewing history and notes as context to generate personalized advice. You may request information regarding the logic used to generate these automated insights.

Transparency: You will be notified whenever you are interacting with an AI system rather than a human representative.

Label scanner: When you use the coffee bag label scanner, the image you photograph is transmitted to OpenAI's API solely to extract coffee information (such as bean name, origin, and roast level). The image is not stored by Coffee Rambler at any point. OpenAI may retain API inputs for a limited period for abuse monitoring purposes only, in accordance with OpenAI's API data usage policy. Images submitted via the label scanner are never used to train AI models. Only the extracted text fields are saved to your account when you choose to save a bean.

5. Analytics and telemetry

We use analytics tools to understand Service interaction. This data (page views, feature usage, error logs) is used in aggregate to improve the Service. We do not use these tools to track you across third-party websites.

6. Cookies

We use essential cookies for authentication and session management. The Service cannot function without these. We use preference cookies to remember your settings. We do not currently use advertising or third-party tracking cookies. You can manage cookies through your browser settings.

7. Legal bases for processing (UK/EU)

Under UK and EU GDPR, we rely on:

• Contract: To provide the Service you have purchased or signed up for.
• Legitimate interests: To secure the Service, prevent abuse, and improve product performance.
• Consent: For optional marketing communications or specific data-sharing features.
• Legal obligation: To comply with tax and financial record-keeping laws.

8. Data sharing and processors

We share data with trusted service providers contractually bound to protect your information:

• Supabase: Database hosting and authentication.
• Vercel: Application hosting.
• Stripe: Payment processing.
• OpenAI: AI processing (via API), including label scanner image processing. Images are transmitted to OpenAI solely for text extraction and are not stored by Coffee Rambler.

We may disclose data if required by law or to protect the safety of our users. We do not share data with third parties for their independent marketing purposes.

9. International data transfers

Your data may be processed outside the UK or EU, including in the United States. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or reliance on adequacy decisions, to ensure your data receives a level of protection equivalent to that in the UK/EU.

10. Data retention and deletion

• Account data: Retained while your account is active. Upon deletion, personal identifiers are removed or anonymized within 30 days.
• Coffee data: Brew diaries and records are deleted upon account closure.
• Legal/Billing data: Transaction records are retained for 7 years to comply with UK tax law.
• Usage data: Anonymized, non-identifiable usage statistics may be retained indefinitely.

11. Your rights

Under UK/EU law, you have the right to:

• Access and receive a copy of your data.
• Correct inaccurate information.
• Delete your personal data ("Right to be Forgotten").
• Restrict or object to certain processing, including automated profiling.
• Data Portability: Request an export of your brew diary and account data.
• Complain: Lodge a complaint with the Information Commissioner’s Office (ICO) in the UK or your local supervisory authority.

To exercise these rights, contact support@rambler.coffee.

12. Security

We use industry-standard measures, including encryption in transit (TLS) and at rest (AES-256), to protect your data. While no system is impenetrable, we maintain rigorous access controls to prevent unauthorized access.

13. Children

The Service is not intended for individuals under 16. We do not knowingly collect data from children. If we become aware of such data collection, it will be deleted immediately.

14. Changes to this Policy

We may update this policy to reflect changes in law or our Service. Material changes will be notified via email or a prominent notice within the app.

15. Contact

For all privacy-related enquiries, contact support@rambler.coffee.