Privacy Policy

What Coado stores, and where

By default, everything you enter (brews, ratings, tasting notes, coffee bags, grinders and brew methods, along with any photos you take) is saved in Coado's storage on your device. Brewing never requires a sign-in.

Optional Coado+ cloud sync

If you subscribe to Coado+ and sign in with Apple, Google, or an email one-time code, we store a copy of your journal, bags, personal recipes, settings, and bag/journal photos (private Storage) in our Supabase project so you can sync across devices. Apple and Google handle social sign-in only; email codes are for passwordless login. They do not host your brew journal for Coado. If you start a Coado+ trial while signed in, we may email that address once, two days before it converts to a paid year. We do not use your email for marketing. You can keep using the app offline; sync runs when you are online.

Shared recipes

If you tap Share on a recipe, Coado may upload a copy of that recipe only (name, method, dose, water, temperature, grind, steps, and notes) to create an unlisted link. Anyone who has the link can open that recipe. Catalog recipes you have not changed use a public catalog URL and do not upload your copy. Share does not upload your journal, other recipes, or account. Unlisted is not private: forwarded chats and link previews can still open the recipe.

Camera and photos

Coado asks for camera access so you can scan a coffee bag's barcode and photograph your bags and brews, and for photo library access so you can pick an existing picture instead. Text on a bag is recognised directly on your device using Google's on-device ML Kit. No image is sent for that processing. Photos stay on the device unless you enable Coado+ cloud sync (signed in). Then bag and journal photos back up to private Storage.

The services Coado may contact

Coado works offline apart from lookups you trigger, optional sync, anonymous product events, and ad measurement:

• Open Food Facts. When you scan a barcode, Coado sends that barcode number to look up the coffee. See their privacy policy.
• Microlink. When you add a coffee from a web link, Coado sends that link to retrieve the product image. See their privacy policy.
• Supabase. Coado+ sync (if you sign in) stores your backup under your account. Tapping Share on a custom or changed recipe also stores that one recipe as an unlisted snapshot so the link works.
• Apple / Google. Only when you use Sign in with Apple or Google for Coado+ sync.
• Mapbox. When Atlas shows the origin map, Coado requests map tiles. Those requests include a standard IP address and are not your journal. See their privacy policy.
• YouTube. When a catalog recipe has a YouTube source, Coado loads a thumbnail from Google. Tapping Play loads YouTube’s player in the app. Those requests include a standard IP address and are not your journal. You can watch on YouTube instead. See their privacy policy.
• Resend. Sends the email sign-in code (if you choose email) and the Coado+ trial reminder (if you are signed in).
• PostHog. Anonymous product events (app opens, brew start/finish/log, paywall, adding a bag, sharing a recipe) so we can improve Coado. Events do not include your journal notes, photos, taste scores, email, or share-link tokens. See their privacy policy.
• Meta (Facebook). App Events for ad measurement: app activation on each launch. Not your journal. Coado does not collect an advertising identifier for this. See their privacy policy.

As with any internet request, a service can see the IP address the request came from. Barcode and link lookups do not include your journal.

Copies of your data

Your journal stays on your phone. If you use iCloud, Google backup, or another device backup, that backup may include Coado's local storage. There is no in-app file export in this version. If you use Coado+ cloud sync and want a copy of the data we store for your account, email privacy@coado.app.

Purchases

If you subscribe to Coado+, the purchase is handled by the App Store or Google Play. We never receive or store your payment card details. Only whether a subscription is active. If you are signed in during a free trial, we may send one reminder to that address two days before the trial ends.

Tracking and advertising

Coado does not show ads inside the app and we do not sell a list of users. We share app-open events with Meta so Facebook and Instagram App Promotion ads can be measured. Coado does not collect an advertising identifier and does not show the iOS tracking prompt. PostHog receives separate anonymous product events to improve Coado, not for ads. Deleting the app does not delete Meta’s ad-measurement records. This marketing website uses privacy-friendly, cookieless analytics (Umami Cloud) for aggregate page views only.

Deleting your data

You can delete individual brews, bags and gear inside the app at any time. Deleting the app removes local Coado data on that device. If you used Coado+ sync, email us to request deletion of server-side copies linked to your account.

Children

Coado is not directed at children and does not knowingly collect information from them.

Changes to this policy

If how Coado handles data ever changes, this page will be updated and the date at the top will change with it.

Contact

Questions about privacy: privacy@coado.app or hello@coado.app.