Cold Brew Studio — Privacy
Effective July 7, 2026
The short version: your brews live on your device. An account is optional and only exists to sync your own data between your devices. There are no ads, no trackers, and no analytics, and your data is never sold. Two small, anonymous exceptions are described below — and both can be turned off with one switch.
What lives on your device
Everything, by default. Your recipes, batches, journal, tasting notes, gear, and settings are stored locally on your phone or in your browser. If you never create an account, nothing you do in the app is tied to you on our servers.
If you create an account
Signing in exists for one reason: syncing your brewing data between your own devices. We store:
- Your email address and a password (handled by Supabase, our database provider — passwords are hashed, we never see them).
- The brewing data you create: batches, journal entries and ratings, tasting notes, saved beans, gear, and settings. Each row is private to your account.
You can delete your account any time in Settings → Account → Delete account. That permanently removes your account and every synced row from our servers.
Community stats (the two exceptions — with an off switch)
Cold Brew Studio gets better as more people brew. With sharing on:
- When you rate a finished batch, its recipe shape — grinder, roast, strength, ratio, steep time, and your rating — is added to anonymous community stats.
- When you scan or type a bean the catalog doesn't know, the bean's name and roaster are submitted to a review queue so the catalog can grow.
These carry a random device identifier so duplicates can be filtered — never your email, name, or account. They can't be traced back to you, which also means they can't be individually deleted later. Turn sharing off any time in Settings → Community sharing, and the app sends nothing at all.
Scanning a coffee bag
When you photograph a bag label, the photo is sent to an AI model (Anthropic's Claude) to read the bean's name, roaster, roast, and tasting notes. The photo is used only to answer that one request and is not stored by us.
Notifications
Steep-timer alerts are scheduled locally on your device. They never touch a server.
Who we rely on
Three infrastructure providers process data on our behalf: Vercel (hosts the app), Supabase (database and accounts), and Anthropic (reads bag photos). None of them are permitted to use your data for anything else.
What we never do
- No ads, ad networks, or ad identifiers.
- No third-party trackers or analytics SDKs.
- No selling or sharing data with data brokers.
- No reading your journal — your notes sync through the database, but they're yours.
Questions
Email tylercancannon@gmail.com and a human will answer.
← Back to Cold Brew Studio