Privacy Policy
This Privacy Policy explains how BeanTrace ("BeanTrace," "we," "us," or "our") collects, uses, and protects information when you use our mobile app and website (together, the "Service"). BeanTrace is operated by JAVA Specialty Coffee.
By using BeanTrace, you agree to the collection and use of information as described in this policy.
1. Who this applies to
BeanTrace serves two kinds of users:
- Coffee lovers ("customers") — people who track their coffee, log brews, write reviews, share recipes, and earn loyalty points with a participating roaster or café.
- Roasters and café shops — businesses that use BeanTrace's roaster portal to manage their products, customers, and loyalty programs.
This policy covers both, and notes where practices differ.
2. Information we collect
Information you provide directly
- Account information — your name and email address, used to create your account and sign in (we use passwordless sign-in via a one-time code sent to your email).
- Business information (roasters/cafés only) — business name, contact person, and store details.
- Coffee tracking data — the coffee bags you add to track, brew logs, and how much coffee you have remaining.
- Reviews and ratings — star ratings, tasting notes, written reviews, and reorder preferences you submit for coffees.
- Recipes — brew recipes you create and share, including brew method, dose, water, temperature, and notes.
- Community votes — your votes on upcoming coffee crops.
- Coffee quiz activity — your answers to the daily coffee challenge and the resulting accuracy, streak and level, used to run the quiz and its weekly leaderboard.
Information collected automatically
- Usage data — how you interact with the app (e.g., which screens you visit), used to operate and improve the Service.
- Device and push notification identifiers — if you enable notifications, we use OneSignal to deliver push notifications about offers, points, new coffee arrivals, and loyalty updates. This involves a device-level notification token, not your personal browsing activity.
- Local session data — we use your device's local storage to keep you signed in between visits. We do not use third-party advertising cookies or tracking pixels.
Information from roasters
If you are a customer of a roaster that uses BeanTrace, that roaster may sync your name, email, and order history from their store platform (such as Shopify) so you can be recognized in the app and track loyalty points. Roasters may also import product reviews written on their own store (for example via Judge.me), which can include the reviewer's name, rating, and review text, and display them in the app next to the relevant coffee. This information is provided by the roaster, not collected by us directly from that source.
Information we do not collect
- Device location. With your permission, we use your device's location only while you are actively using the app to verify that you are physically present at a partner café. This lets us: confirm café check-ins so loyalty points are earned on-site, allow you to review a café's menu only when you are actually there, and automatically show the circle of the café you have walked into. We collect location only at the moment you take one of these actions — we do not track your location in the background, we do not build a location history, and we do not sell or share your location with third parties. You can decline the permission or turn it off in your device settings at any time; the app still works, but on-site features that require presence will be unavailable.
- We do not use third-party advertising or analytics trackers.
- We do not process payments in the app. Purchases happen on the roaster's own store (e.g., their Shopify site), which has its own privacy practices.
3. How we use your information
| Purpose | What it's used for |
|---|---|
| Provide the Service | Create your account, track your coffee, calculate loyalty points, and show your order and brew history. |
| Community features | Show reviews, ratings, and recipes to other customers of the same roaster, so the community can discover and learn from each other. |
| Notifications | Send you push notifications about offers, point balances, new crops, and loyalty rewards, if enabled. |
| Support roasters | Give roasters and café shops visibility into their own customers' activity, orders, and engagement, so they can run their loyalty programs. |
| Improve the Service | Understand how the app is used so we can fix issues and build better features. |
4. Who can see your information
- Your roaster can see your order history, points balance, and engagement with their loyalty program.
- Other customers of the same roaster can see your reviews, ratings, and recipes as part of the community features. Reviews and recipes are shown with your name, since BeanTrace's community features are designed to feel personal and social.
- We do not sell your personal information to third parties, and we do not share it with roasters or cafés you have not interacted with.
5. Third-party services we use
BeanTrace relies on a small number of trusted service providers to operate:
- Supabase — our database and authentication provider, which securely stores your account and app data.
- OneSignal — used to deliver push notifications.
- Vercel — hosts our website and app.
- Shopify (or other store platforms) — used by individual roasters to run their online stores; purchases and payment are handled entirely on their platform.
Each of these providers processes data only as needed to provide their service to us, under their own security and privacy practices.
6. Data retention
We retain your account and activity data for as long as your account is active, so you can keep tracking your coffee and loyalty history. If you delete your account, we will remove your personal information within a reasonable time, except where we are required to retain certain records by law or for legitimate business purposes (such as fraud prevention).
7. Your choices and rights
- Access and correction — you can view and update your profile information within the app.
- Notifications — you can disable push notifications at any time in your device settings.
- Account deletion — you can permanently delete your account and all associated data at any time from the app (profile menu → “Delete my account”), or from our web page at beantrace.app/delete-account.html without reinstalling the app, or by contacting us at the email below. Deletion is permanent and removes your profile, ratings, brews, quiz history, points, memberships, recipes and comments — not merely a deactivation — except for minimal records we must retain for legal, security or fraud-prevention reasons.
- Data portability — you can request a copy of the data we hold about you.
8. Children's privacy
BeanTrace is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
9. Security
We take reasonable technical and organizational measures to protect your information, including encrypted connections and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the app.
11. Contact us
If you have questions about this Privacy Policy or how your information is handled, please reach out.