Privacy Policy

Last updated: August 2026

BrewLog is built and maintained by an independent developer. This policy explains what data we collect, why, and what we do (and don't do) with it. We've kept it short on purpose.

What we collect

Account info — your name and email address, provided when you sign in with Apple, Google, or email OTP.
Usage analytics — page views and feature usage, collected via PostHog across our web and iOS apps to help us understand how the app is used.
Session replays — so we can reproduce bugs you hit, PostHog records your screen as you use the app, including text you type such as your name and email.
Purchase records — if you subscribe, we store which plan you're on and when it expires. Card details are handled entirely by our payment processors and never reach our servers.
Essential cookies — used only to keep you signed in. We don't use tracking or advertising cookies.

Who processes your data

We use a small number of third-party services to run BrewLog. They only receive what they need to do their job:

Supabase — database, authentication, and file storage.
PostHog — product analytics, session replay, and error tracking.
Razorpay — payment processing for subscriptions bought on the web (India).
Apple & RevenueCat — purchase and subscription status for the iOS app. Apple processes the payment; RevenueCat tells us whether your subscription is active.
Loops — transactional and occasional product email.
Vercel — hosting for our website and web app.

What we don't do

We don't sell your data. Not now, not ever.
We don't show ads.
We don't share your information with third parties for marketing.
We don't track you across the web.

How we use your data

Your account info is used to authenticate you and deliver the service. Your brewing data is stored so you can access it across sessions and devices. Analytics data is used only to improve BrewLog — things like understanding which features get used and where people get stuck.

Where your data lives

Your data is stored securely on Supabase-managed infrastructure with encryption at rest and in transit. We follow reasonable security practices to protect your information.

How long we keep it

We keep your data for as long as your account exists. When you delete your account, your profile, brews, beans, presets and gear are deleted with it. Backups and analytics records may persist for a short period afterwards before they age out.

Two things outlive the account, on purpose. We keep records of payments and subscriptions, because tax and accounting law requires it. And we keep anonymous brewing statistics — the numbers from your brews, like dose, ratio and grind, with your name, your notes, anything you typed, and any link back to you permanently removed. What's left can't be traced to you or anyone else, and it's what keeps our overall stats meaningful when someone leaves.

Your data, your call

Everything you create in BrewLog — your brews, recipes, notes — belongs to you. You can delete your account at any time: on the web it's at the bottom of your Profile page, and on iOS it's in Settings. You can also request a full export of your data, ask us to correct something, or opt out of analytics — just email hey@brewlog.xyz and we'll sort it out.

Changes to this policy

If we make meaningful changes, we'll update this page and the "last updated" date. For significant changes, we may notify you via email.

Age

There's nothing here that isn't suitable for any age — it's a coffee journal. But an account means we hold your email and record sessions to fix bugs, and the law is rightly strict about doing that for children. So you need to be 13 or older to create one, and where local law sets a higher age for handling personal data without a parent's consent — 18 in India — that applies instead. If a younger person has an account, email us and we'll remove it.

Questions?

Reach out at hey@brewlog.xyz. Happy to answer anything.