Cafesito Privacy Policy
Last updated: August 28, 2026
At Cafesito, we value and respect our users' privacy. This Privacy Policy explains how we collect, use, store and protect your information when you use our application.
By using the Cafesito app, you accept the practices described in this policy.
1. Data controller
- Application: Cafesito
- Contact email: hola@cafesitoapp.com
- Platform: Android, Web (PWA) and iOS
- Scope: Cafesito application users
2. Information we collect
Cafesito only collects the information strictly necessary to provide its features.
2.1 Information provided by the user
When you sign in with Google, we collect your user identifier (Google ID), email address, profile name and profile picture if available.
2.2 Information generated through app usage
Coffees you add or mark as favorites, personal lists, activity records (coffee diary, consumption, pantry), brews (Brew Lab) and in-app usage preferences.
2.3 Technical information
Technical identifiers needed for the app to work and basic error or crash information (technical logs without personal identification).
2.4 Apple Health (optional, iOS only)
If you enable "Sync caffeine with Health" in the iPhone app settings, Cafesito will record in Apple's Health app the estimated caffeine for each coffee entry you save in your diary (brews, manual entries or records synced from Apple Watch).
- This feature is optional and only runs with your explicit permission on the device.
- We only write dietary caffeine data to Health; we do not read or access the rest of your health information.
- We do not use Health data for advertising, marketing or profiling.
- You can turn off syncing at any time from Profile → Settings. Entries already exported remain in Health until you delete them there.
- Data written to Health is governed by Apple's privacy policies.
2.5 Label scanning (Android and iOS)
When creating or searching for a coffee, you can photograph the bag label. Text recognition (OCR) and visual matching with SigLIP are performed on your device. This flow does not send label photos to external AI services.
If you confirm or save a coffee after scanning, Cafesito may store in Supabase a 768-dimensional numeric vector associated with the match, along with the data needed to learn from your correction. The vector enables visual similarity comparison, does not reconstruct the photo, and the label photo is not stored as part of this process.
2.6 Company / roaster accounts
To create or manage a roastery on Cafesito you must first have a personal account. The company is linked to that account (and, where applicable, to team members). In that context we may also process, in addition to your personal profile data:
- Company data: trade name, legal name, description, logo, location, website, social links, corporate email and other details you provide during signup or on the profile.
- Representation and review data: confirmation that you may represent the brand, request status (new signup or claim of an existing brand/coffees) and communications related to validation.
- Team data: invitations, roles (e.g. owner, admin, editor) and identifiers of linked members.
- Catalog and company activity data: linked or created coffees, catalog statuses and public activity associated with the roastery.
You can switch between personal and company account within the same session; that does not create a separate authentication user. Deleting your personal account may affect management of companies you own or belong to; contact support if you need to transfer ownership before deleting the account.
3. How we use the information
We use the information exclusively to allow user access and authentication, save and sync your personal data, provide personal and company/roaster features (official profile, catalog, team), improve the app's experience and stability, and provide technical support.
We do not use your data for advertising or marketing purposes.
4. Legal basis
We process your data based on your consent when you register and on the performance of the requested service.
5. Storage and security
Your data is stored on servers managed by Supabase, a secure platform aligned with GDPR. We apply reasonable technical and organizational measures to protect the information.
6. Data sharing
Cafesito does not sell, rent or transfer your personal data to third parties. Only the technical services required to operate the product can access the data (Google authentication and Supabase database). Usage analytics, if you accept them, are sent to Google Analytics 4 through Google Tag Manager under your cookie consent.
If you enable synchronization with Apple Health in the iOS app, the estimated caffeine from your coffee entries is written to the Health app on your device (Apple Inc.), only with your consent and as described in section 2.4.
7. Data retention
Your data is kept while you maintain an active account and until you request deletion of your account and associated data.
8. Account and data deletion
You can request complete deletion of your account at any time from the application (Profile → Options → Delete my account and my data) or by emailing hola@cafesitoapp.com. Deletion will be effective within no more than 30 days. More details are available in Data deletion.
9. User rights
You have the right to access, correct, request deletion of, and limit or object to the processing of your data. Contact: hola@cafesitoapp.com
10. Children's privacy
Cafesito is not intended for children under 14 and we do not knowingly collect information from minors.
11. Changes to this policy
Any relevant changes will be communicated through the app or website.
12. Cookies and similar technologies
On the web and legal pages we show a cookie notice the first time you visit us.
- Essential cookies: required for operation (session, basic preferences). They do not require consent.
- Analytics cookies: we use Google Tag Manager and Google Analytics 4 to understand service usage (visited pages, events). They are only enabled if you accept "Accept all" in the banner. If you choose "Essential only", analytics are not loaded.
Your choice is stored in the browser (local storage). You can change your mind by deleting the cafesito_cookie_consent key from your browser local storage and reloading the page; the banner will be shown again so you can choose again.