Privacy

Who handles the data

The Baristat team is responsible for the data described in this notice. Reach us at the address at the bottom of this page — we reply through that channel.

Launch-notification signup

If you leave your email in the site's form, we use it only to let you know when Baristat becomes available for Android. This is not a newsletter: no marketing, and the email is used for nothing else.

Along with the email we store the chosen language, the page you were on and the content identifier — just to know where the interest came from. Repeated emails become a single record. We do not store your IP address, browser or device fingerprint.

Usage measurement

Only with your acceptance in the consent notice does the site measure usage with Google Analytics (GA4). Without acceptance, no measurement runs — and the choice can be changed at any time from the footer link.

GA4 runs with Google's standard practices: it may process your IP address and browser or device identifiers, per Google's privacy policy. Baristat never sends your email, form content or recipe parameters to measurement tools. Your choice is stored only in your browser.

Form protection

Form submissions pass through the Cloudflare Turnstile challenge, which tells people apart from automated submissions. Challenge data is processed by Cloudflare under its own privacy policy; the site does not store it.

How long

The launch-notification signup is kept until the availability notice is sent. The site has no automatic deletion: if you ask for removal through the contact below, we delete the record manually.

Measurement data is retained by Google under the Google Analytics policy. The consent preference stays in your browser until you clear site data.

The Baristat app

The app keeps everything on your device: coffees, grinders, recipes, brews and ratings live in a local database, with no account and no cloud. The app has no usage measurement and no advertising profile.

Optional collective contribution (app)

The app has an optional feature to contribute anonymous brew data to a collective dataset. It is off by default — it only works if you turn it on in settings, and you can turn it off at any time.

When active, structured brew data (dose, ratio, temperature, grind, recipe, among others) is sent together with an anonymous installation identifier — no name, email or account. The only human-written words in the payload are the grinder brand and model and the coffee variety, converted to a restricted format. The servers that receive contributions keep technical access logs, which may include the IP address. Data lives on Google Cloud servers and has no automatic deletion; to remove it, contact us at the address below. Sending is occasional and silent — it never gets in the way of using the app.

Assisted recommendation (app, Pro)

Baristat Pro can suggest brew adjustments with the help of a DeepSeek language model. When the feature is active, the model receives only structured data from the current brew (dose, water, ratio, temperature, grind and grinder context) — free text, name, email and coffee, grinder or brew identifiers are never sent. The answer is a single suggestion, not stored.

At the moment the feature is disabled in the production environment.

Pro subscription (app)

The subscription is processed by your device's app store (Google Play); Baristat does not receive or see payment or card data. Subscription state is checked by RevenueCat, which receives only an anonymous app identifier.

Sharing and international transfer

We do not sell or rent personal data. Your data may be processed by the providers that run the services above: Cloudflare (site, form, anti-bot challenge and signup storage), Google (consented measurement and collective-dataset servers), DeepSeek (only the structured brew context, when the feature is active) and RevenueCat (subscription state). These services may process data outside Brazil, under each provider's terms.

Your rights

You can ask for access, correction or removal of data that identifies you, and revoke any consent you have given, through the contact below. We reply through the same channel. Signup removal is done manually by us, on request.

What we do not collect

Name, address, phone number, payment data, precise location, age and any children's data: none of it is asked for or collected. The site has no accounts, builds no visitor profile and uses no tracking cookies outside the measurement you accept. The app sends nothing by default.

Changes to this notice

If this notice changes, the new version is published on this page with an updated effective date.