Privacy Policy

By The Note (“we”, “us”, or “our”) operates the By The Note iOS application and the website at bythenote.coffee (together, the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Service, you agree to this policy. If you do not agree, please do not use the Service.

Depending on how you use the Service, we may collect:

• Account information. Email address, name, and authentication data when you create an account or sign in (for example via one-time passcode).
• Journal and profile content. Coffees you save, tasting notes, brew guides, flavour preferences, favourites, and related journal entries you create.
• Photos and media. Images you capture or upload (such as coffee bag labels) so we can extract coffee details or attach them to your journal.
• Share and NFC content. Information you write to or read from share tags and NFC tags when you use those features.
• Location. Approximate or precise location, if you grant permission, to show nearby roasters and related “near me” features. You can deny or revoke this permission in iOS Settings.
• Device and usage data. Basic technical information such as device type, operating system version, app version, and crash or diagnostic data needed to run and improve the Service.
• Communications. Messages you send us (for example early-access signup or support requests), including your email and any details you choose to share.

We do not require you to provide more personal information than is needed to operate the features you use.

We use the information above to:

• Provide, maintain, and improve the Service (accounts, journal sync, discovery, NFC/share flows)
• Extract coffee details from photos or websites when you ask us to
• Personalise recommendations based on preferences you set (such as flavour profile)
• Show location-based results when you enable location features
• Communicate with you about the Service, including early access and support
• Protect the Service, prevent abuse, and debug issues
• Comply with legal obligations

We do not sell your personal information. We do not use your journal content to build advertising profiles, and the Service does not show third-party ads.

The iOS app may request access to:

• Camera — to photograph coffee packaging for extraction or journaling
• Photo library — when you choose an existing image
• Location — for nearby roaster / beans features
• NFC — to read and write coffee share tags

These permissions are optional where the system allows. Refusing a permission may limit related features, but you can still use other parts of the app.

We use trusted providers to host and operate the Service. They process data only on our instructions and for the purposes described here. Current categories include:

• Cloud infrastructure and database (including Supabase) for authentication, storage, and APIs
• AI / vision processing when you use photo or URL extraction features, to read coffee label or product details
• Hosting and delivery for the website and related assets
• Apple for App Store distribution, push notifications (if enabled), and in-app purchase processing if offered

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale (in which case we will take reasonable steps to keep protections in place).

We keep your account and journal data while your account remains active and as needed to provide the Service. If you delete your account or ask us to erase your personal information, we will delete or anonymise it within a reasonable period, except where we must retain limited records for legal, security, or operational reasons (for example fraud prevention or dispute resolution).

You may request access, correction, or deletion of your personal information by contacting us using the details below. We may need to verify your identity before fulfilling a request.

We use industry-standard measures to protect information in transit and at rest, including encrypted connections (HTTPS) and access controls on our systems. No method of transmission or storage is completely secure; we encourage you to use a strong device passcode and keep your app and OS up to date.

The Service is not directed at children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

We may process and store information in countries other than where you live, including where our service providers operate. Where required, we use appropriate safeguards for those transfers.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may also be highlighted in the app or by email when appropriate. Continued use of the Service after changes take effect means you accept the updated policy.

For privacy questions or requests, contact us at:

hello@bythenote.coffee
By The Note
https://bythenote.coffee