Privacy Policy

Who this covers

BrewTrax is a coffee-logging app and this website. This policy describes how we handle information when you visit brewtrax.traxverse.com, create an account, or record a brew. It is a product policy for the current build — not a claim of certification or a substitute for advice from counsel in your jurisdiction.

What we collect

Depending on how you use BrewTrax, we may process:

• Account details — email, display name, and authentication tokens.
• Brew logs — method, grind, dose, water, time, tasting notes, ratings, and photos you attach.
• Recipes and gear you save, including entries you choose to share in Commons.
• A device record if you turn on notifications — the push token, the platform, and the app version. Nothing else about the device.
• An install identifier the app generates itself, used to hold a free account to one device. It is not the advertising ID and cannot be linked to you across other apps.
• Purchase records if you subscribe through the App Store or Google Play. Store payments are processed by Apple or Google, not by us directly.

We do not sell personal information. We do not use brew notes to train public models. We do not ask for contacts, precise location, or health data.

There is no analytics SDK and no crash-reporting SDK in the BrewTrax app. We do not track which screens you open, how long you stay, or what you search for, and there is no advertising identifier in the app. What we hold is the ledger you chose to write.

Website analytics

This website — not the app — uses Google Analytics 4 to learn which pages are useful, and only if you choose Accept in the banner shown on your first visit. Until you accept, the Google Analytics script is not loaded and no analytics cookies are set. Either choice is remembered in your browser for 13 months, after which we ask again.

If you accept, Google Analytics records the pages you view, how you arrived (for example from a search engine or a link), your approximate location, which Google derives from your IP address without storing the address, your device and browser type, and whether you followed a link to the App Store or Google Play. It sets first-party cookies named _ga and _ga_<ID> that last up to 13 months. Google processes this data on our behalf under its business data terms. Google signals and advertising features are turned off, and website analytics are never linked to your BrewTrax account.

The password-reset, deletion-cancellation, and admin pages never load analytics.

Change your analytics choice

How we use it

To run your ledger, sync across devices, show community recipes you opt into sharing, send transactional mail (sign-in, receipts), and improve reliability. Shared Commons posts are public to other BrewTrax users by design; private logs stay in your account.

Retention and deletion

Account data lives for as long as the account is open. You can delete a single brew, a recipe, or the whole account from Profile. An account deletion request disables access immediately, retains the ledger for a 30-day recovery window, and sends a secure cancellation link to the account email. If you have already uninstalled the app, you can still request deletion by email. Full detail, including what survives and why, is on the account deletion page.

When the 30-day recovery window ends, the account and its active records are permanently removed. Encrypted backups are overwritten within 30 days and are never used to restore a deleted account.

Sharing

We share data with infrastructure providers who host the app (database, auth, file storage) under contract, and with Apple or Google when you buy through their stores. We disclose information if required by law. If you accept website analytics, the data described above is processed by Google. We do not share logs with advertisers.

Your choices

You can access, correct, or export your entries from the app — Profile → Privacy & data exports the whole journal as CSV or JSON — and delete your account from Profile or via the account deletion page. Depending on where you live, you may also have rights to object, restrict processing, or lodge a complaint with a data protection authority.

Contact

Privacy questions: [email protected]. See also our Terms of Service and Security page.