Effective Date: January 15, 2025

Thank you for using Brewed. Your privacy is important to us, and we are committed to protecting the information you share with us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our iOS application.

1. Information We Collect

Personal Information

Brewed uses Sign in with Apple to authenticate users. Through this service, we collect:

• Name: Your name as provided by Apple (may be your real name or a randomly generated name if you choose to hide your email)
• Email Address: Your email address, which may be your actual email or Apple’s private relay email address if you choose that option

Non-Personal Information

We also collect and store the following non-personal information that you voluntarily provide:

• Coffee Information: Details about coffee beans including country of origin, region, farm, processing method, and variety
• Brewing Data: Your brewing recipes including brewing method, water amount, water temperature, coffee bean amount, and grind size
• App Usage Data: Information about how you interact with the app’s features

We do not collect any other personal information beyond what is provided through Sign in with Apple.

2. How We Use Your Information

Personal Information

• Name: Displayed within the app to personalize your experience
• Email: Used for account creation, management, and authentication purposes only

Non-Personal Information

• Coffee and Brewing Data: Stored to provide you with a personalized coffee tracking and brewing experience
• App Usage: Used to maintain and improve app functionality

3. Data Storage and Security

We use Supabase, a secure third-party Backend-as-a-Service provider, for authentication and data storage. Supabase employs industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure database storage with encryption at rest
• Regular security updates and monitoring
• Access controls and authentication protocols

Your data is stored on Supabase’s secure servers and is protected by their comprehensive security infrastructure. We implement additional security measures to ensure only authorized access to your information.

4. Data Retention

• Active Accounts: We retain your personal information and associated data for as long as your account remains active
• Account Deletion: When you delete your account, all associated personal information and user-generated content will be permanently deleted from our systems
• Inactive Accounts: We do not automatically delete inactive accounts, allowing you to return to your data at any time

5. Data Sharing and Third Parties

We do not sell, trade, or share your personal information with third parties, except:

• Supabase: Our backend service provider, which processes and stores your data in accordance with their privacy policy and security standards
• Apple: Through Sign in with Apple for authentication purposes only
• Legal Requirements: If required by law, regulation, or legal process

We do not use any analytics services, advertising networks, or other third-party tracking services.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we have about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information and account
• Data Portability: Request a copy of your data in a portable format

To exercise these rights, contact us at support@brewed.app. We will respond to your request within 30 days.

Sign in with Apple Rights

When using Sign in with Apple, you also have Apple’s privacy protections, including the ability to use a private relay email address and control what information is shared with us.

7. International Data Transfers

Brewed is currently available in Japan, Australia, and the United States. Your data may be transferred to and processed in countries other than your own, including the United States where Supabase operates its servers. We ensure that such transfers comply with applicable data protection laws.

8. Children’s Privacy

Our app does not knowingly collect personal information from children under 13 years of age. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes:

• We will update the “Effective Date” at the top of this policy
• For material changes, we may notify you through the app or other means
• We encourage you to review this policy periodically

Your continued use of the app after any changes constitutes acceptance of the updated policy.

10. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the jurisdiction where you reside (Japan, Australia, or the United States), without regard to conflict of law principles.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: support@brewed.app

We will respond to your inquiry within a reasonable timeframe and work to address any concerns you may have about your privacy and data protection.