Privacy Policy

Effective date: 13 October 2026

calibrate. is a brew tracking app for baristas and home brewers. You log brews; we store them. This page explains what we collect, what we do with it, and what you can do about it.

If you have questions, email us at privacy@calibrate.coffee.

What we collect

Your email address and first name. You give us both when you create your account. We use your email to identify your account and to send you service notices, such as changes to this policy or to aggregate analysis. Your email is stored by Supabase, our sign-in provider, and is also stored in our application database. We never see or store your password.

Product emails. If you turn on Product emails, we may send you occasional updates about calibrate. You can turn them off at any time in Profile. We do not give your email to any marketing platform or to anyone for advertising.

Your brew logs. Every brew you log is stored on our servers and linked to your account. That includes the fields you fill in, such as brew method, dose, water, temperature, grind setting, time, TDS, extraction yield, tasting notes and rating, and the coffees, recipes and equipment you save. Fields you leave blank are not stored.

Your city and country. When you set up your account you tell us the city and country you brew in. The country is required and the city is optional. If you tap “use current location”, your device reads its GPS and asks its built-in location service, run by Apple on iOS and Google on Android, for the city name. Your coordinates never reach our servers, only the city and country left in the fields. We store the two values on your account, update them when you change them under Profile → Location, and delete them when you delete your account. The state or region you enter there stays on your device. One exception: when something you type, such as a roaster, a varietal, or a flavour you write as a word or short phrase in your tasting or cupping notes, is not yet in our shared lists, we keep that word or phrase with your city and country, and no link to your account, so we can add it. That copy is not deleted with your account.

Your onboarding answers. When you set up your account we ask what kind of brewer you are and how you heard about us. Both questions are optional and you can skip either. We store your answers on your account and delete them when you delete your account. They tell us who calibrate. is for and where people find us. We do not use them for advertising and we do not share them.

Photos and the camera. The app can read the label on a coffee bag from your camera or from a photo you pick. The text is read on your device and the photo is discarded after the scan; it never reaches our servers. When you share a brew card, the app hands the image to your device’s share sheet and you choose where it goes.

Problems you report. If you report a problem with a roaster on one of your coffees, we keep the reason you pick, any note you write, and which coffee you reported it from, linked to your account. We read reports to correct our shared list of roasters, and we see them without your name or email address. We delete your reports when you delete your account.

Error reports. When the app or our server runs into an error, a report goes to Sentry so we can fix it. A report carries the error, where in our code it happened, the app version, and technical details of your device, such as its model, operating system version, language and free memory. Your name, email address and account identifiers are removed from it before it is kept.

That is it. We do not collect device identifiers or advertising data. The activity counts described under How we use your data are drawn from your account and the brews you log, not from tracking how you use the app.

How we use your data

To run the app. We use your data to show your brew history, let you review, edit and delete past brews, keep your account in step across devices, manage your account, and calculate the averages described under Aggregate analysis.

To see whether calibrate. is working. We count, from the accounts and brews already stored, how many people have signed up, how many logged a brew in the last 7 and 30 days, and how many brews have been logged. We can also see, for each account, when it was created, how many brews it has logged and when it last logged one, under a shortened account id, never your name or email address. These figures stay with us and are not shared.

Nothing else, for now. We do not run ads. We do not sell your data. We do not share your information beyond the services listed under Data sharing.

Aggregate analysis

calibrate. shows you how your brewing compares with everyone else’s. When you turn on Compare in Insights, and always until you have logged five brews, a card can show an average drawn from every brewer’s brews, yours included, beside any figures of your own: for example, the average rating for a roaster or an origin, or how ratings change with days past roast. A comparison you narrow with a filter is shown only for a value you have brewed yourself. A brew you delete is erased for good, and brews kept from deleted accounts no longer link to anyone and are left out.

These are averages. They never name anyone and never list anyone’s brews, though while few people brew an average may rest on a single brew. Your name, email address and account identity are never part of the calculation.

An average can still say something about the people behind it. While calibrate. has few brewers, and more so when you narrow a comparison with filters, an average may come from only a handful of people’s brews, and someone who knows their own figures may be able to work out roughly what the others’ are. We do not yet set a minimum number of brewers behind an average.

Participation in aggregate analysis is part of using calibrate.: it is what makes the insights possible.

Data sharing

We do not sell, rent, or share your personal data with third parties for their own purposes.

We use Supabase for sign-in. Supabase stores your email address and manages your session. Supabase’s privacy policy is available at supabase.com/privacy.

We host on Railway. Railway processes traffic and stores data on our behalf. Railway’s privacy policy is available at railway.com/legal/privacy.

Roaster logos and the coffee catalog are served from Cloudflare R2. Cloudflare handles your device’s requests for those files and receives no account data.

Our website, calibrate.coffee, is hosted on Vercel, which handles the requests your browser makes to load it. The site sets no cookies and runs no analytics.

Apple distributes the app through the App Store, under Apple’s own terms and privacy policy.

We use Sentry to receive the error reports described under What we collect. Sentry stores them on our behalf in the United States. Sentry’s privacy policy is available at sentry.io/privacy.

These are the only third parties that handle any portion of your data, and they handle only what is needed to run the service.

Your data, your control

Delete your account. You can delete your account from account settings. When you do, we permanently delete your account, your profile, your saved cards — coffees, recipes, and equipment — and the problems you reported about a roaster. Your brew logs are irreversibly anonymised: the link to you is severed, and they cannot be restored to your account. Their measurements are kept, but they no longer count towards the averages described under Aggregate analysis. This cannot be undone.

Export your data. You can export your brews as a BrewSpec file — a portable JSON copy you can keep or move to another tool. To request an export, email us at privacy@calibrate.coffee and we will send you a copy.

Data security

Connections to calibrate. are encrypted over HTTPS. Your brew data is stored in a private database, and your individual brews are not visible to other users. We enforce authentication on every request that reads or writes your data.

We take reasonable precautions. No system is perfectly secure. If you discover a security issue, please report it to privacy@calibrate.coffee.

Changes to this policy

If we make material changes, particularly to data sharing, aggregate analysis, or the types of data we collect, we will update this page and notify you by email before the change takes effect.

Minor changes (wording, contact details, third-party links) will be updated here without notification. The effective date at the top of this page reflects the last update.

Contact

Questions, data requests, or concerns: privacy@calibrate.coffee