Privacy Policy

Introduction

Brewprint is a daily coffee diary and social app built by HighBeam Digital. This Privacy Policy explains what information we collect, how we use it, and what rights you have. We believe your personal data belongs to you, not to us.

Brewprint is designed with privacy as a feature, not an afterthought. We collect the minimum data needed to operate the app and nothing more.

Information we collect

Information you provide

When you create an account and use Brewprint, you provide:

Name and username (handle)
Email address and password
Profile photo (optional)
Coffee posts: photos, temperature, flavor notes, mood, caption, and place
Comments and reactions on posts
Any content you choose to share publicly

Information collected automatically

When you use the app, we automatically collect limited technical information:

Device type and operating system version
App version and crash reports (for bug fixing only)
Time of posts (stored with your content)
Location, only when you choose to tag a place, via Google Places API

Information we do NOT collect

We do not track your location passively or continuously
We do not collect browsing history or activity outside the app
We do not build advertising profiles
We do not sell or rent your personal information to any third party
We do not use your coffee data to make inferences beyond your Brewprint portrait

How we use your information

We use the information we collect solely to provide and improve Brewprint:

To create and maintain your account
To display your posts in your feed and your followers feeds
To generate your Brewprint personality portrait from your posting patterns
To enable social features: follows, likes, saves, comments
To send notifications you have opted into
To detect and prevent fraud, abuse, and security incidents
To improve the app based on aggregate, anonymised usage patterns

Your coffee posts are used only to build your Brewprint portrait and to show your content to people you choose to share it with. We do not use your data for advertising.

How we share your information

With other users

Content you post publicly is visible to all Brewprint users (if your profile is public) or only your followers (if your profile is private). Your name, handle, profile photo, and Brewprint portrait are visible to anyone who views your profile, unless your account is set to private.

With service providers

We share limited data with trusted service providers who help us operate the app:

Supabase — database and authentication infrastructure
Google Places API — only when you search for a cafe location
Expo / EAS — app build and delivery infrastructure

All service providers are contractually required to protect your data and use it only to provide services to us.

Legal requirements

We may disclose your information if required by law, court order, or government authority. We will notify you of such requests unless prohibited from doing so by law.

Data storage and security

Your data is stored on Supabase's secure cloud infrastructure. We implement industry-standard security measures including encrypted connections (HTTPS/TLS), password hashing, and row-level security on our database so users can only access their own data.

No method of transmission over the internet is 100% secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security.

Data retention

We retain your data for as long as your account is active. When you delete your account, we permanently delete your personal data within 30 days, except where we are legally required to retain it. Server logs are retained for a maximum of 90 days for security purposes.

Your rights

Access — view all data associated with your account at any time within the app
Correction — edit your profile information, name, handle, and bio at any time in Settings
Deletion — delete individual posts at any time, or delete your entire account in Settings
Portability — request an export of your data by emailing hello@brewprint.app
Objection — object to certain processing of your data by contacting us

Children's privacy

Brewprint is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@brewprint.app and we will delete it immediately.

Cookies and tracking

Brewprint is a mobile application. We do not use cookies. We use device storage (AsyncStorage and SecureStore) to maintain your session and app preferences. This data stays on your device and is not transmitted to our servers except as part of normal app functionality.

Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app or by email. The effective date at the top of this document reflects when the policy was last updated. Continued use of Brewprint after changes constitutes your acceptance of the updated terms.

Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

HighBeam Digital
Brewprint App
Email: hello@brewprint.app

We aim to respond to all privacy-related inquiries within 7 business days.