Privacy policy

Who we are

Rolito’s is a coffee app. This policy covers the Rolito’s app for iPhone and Android and this website. We decide what happens to the data it describes, which makes us its controller under UK and EU data protection law. For anything about your data, email privacy@rolitos.coffee.

What we keep

Your account

• Your email address, and how you sign in: with Apple, Google or an email and password. We never see your password.
• If you sign in with Apple, the name you choose to share, to start your page with. If you hide your email from us, we get only Apple’s forwarding address.

Your page, which is public

Your name and handle, and if you add them, a photo, a few lines about you, your town and your website. Anyone can see your page and find it by searching.

Your page also shows your taste: the shape the app draws from the coffees you love and your answers, its name and the notes you keep coming back to. It shows the coffees on your shelf with your ratings. Someone who opens your page can see how close their taste is to yours.

How many coffees you’ve tasted and how many brews you’ve logged are public too, beside your recipes and followers. For your brews only the number is public, never the brews themselves.

Your coffee, which is private

Your answers about how you like coffee, the notes you keep on your coffees (what you tasted, how it felt and anything you write), each brew in your Brew log, your bag photos and the recipes you save. Only you see them. Your ratings also count towards the averages other people see, which show only once at least three people have rated a coffee. A roastery sees totals for its own coffees: how many people have one on their shelf, brewed it or rated it, and its average rating once three people have. It never sees who.

What you publish

Published recipes, public lists, who you follow and who follows you are public, with your name on them. Unpublished recipes and private lists stay private.

Keeping Rolito’s safe

The reports you make, with any note you add, who you block, and when you agreed to the community rules. Our staff read reports to deal with them.

Keeping out bots

The website’s forms to sign in, create an account and reset a password, and signing in with an email in the app, use Cloudflare Turnstile to check that a person is using them, not a bot. Usually you see nothing; now and then it asks you to tick a box. Cloudflare looks at your internet address and technical details of your browser or phone, such as which browser it is, to spot bots and to get better at spotting them. It doesn’t use them to show you ads or follow you around the web. We only learn whether the check passed, and we don’t keep that.

Roasters

When you claim a roastery, we keep the claim and what you tell us to show it’s yours. Our staff see your email while they review it. Your roastery’s page, coffees and recipes are public.

Scanning a bag

When you scan a bag, the app sends the photo to Google’s Gemini service, which reads the text on it and sends that back. Google doesn’t use the photo to improve its products. The app keeps a smaller copy on your phone, to show with the coffee. If you’re signed in and keep the coffee on your shelf, we also keep that copy in your account, where only you can see it, so it shows on your other phones. Removing the coffee from your shelf deletes it, and so does deleting your account. To keep scanning fair, we count each account’s scans a day. Without an account, we count by a scrambled form of your internet address, which changes every day. We delete the counts after two days.

Your location

Only if you allow it, and only while you use the app. The app uses it on your phone to show roasters near you. When you follow no one, Discover sends your position, rounded to about 5 km, to find recipes and lists from near you. We don’t store it.

Notifications

Only if you allow it. We keep your phone’s notification address, so we can tell you when a roastery you follow posts a coffee or a recipe. We forget it when you turn notifications off, log out or delete your account.

Crash reports and analytics

• When the app or the website goes wrong, it sends a report to Sentry: what went wrong, on which screen or page, and the phone or browser. Reports leave out who you are, and we don’t keep your internet address.
• The app tells PostHog, anonymously, how Rolito’s is used: when it’s opened, which kinds of screens are viewed (never which coffee or person), and when someone finishes onboarding, scans a bag, saves a coffee, finishes a brew, taps Buy (with the roaster’s name) or signs in. A random ID on your phone lets us count you once when you come back. It isn’t linked to your account. The website counts page views and waitlist sign-ups, without the address.
• For roasters, the app counts how often each coffee’s page and each roastery’s page is opened, and how often Buy and a roastery’s website are tapped. We keep a number a day for each coffee and roastery, with nothing about who, and show it to that roastery on its dashboard. A roastery’s own visits don’t count.

The waitlist

Your email address and whether you roast coffee. We use it only to email you the day Rolito’s is out.

Cookies

The website sets cookies only when a roaster or our staff sign in: one keeps you signed in, and another holds your email for an hour while you confirm it with a code. You can’t use the dashboard without them. If you collapse the dashboard’s sidebar, one more remembers that for a year. On those sign-in forms, Cloudflare Turnstile may keep a little in your browser while it checks you’re a person, which is needed to keep bots out. There are no advertising or tracking cookies, and analytics on the website keep nothing in your browser.

Why we use it

• To give you Rolito’s. Your account, your shelf on every phone, scanning, publishing and the roaster dashboard need your data. This is our contract with you.
• To keep Rolito’s working and safe. Reports, blocks, scan limits, the check for bots, crash reports and anonymous analytics are in our legitimate interests, and in yours.
• Because you said yes. Your phone asks before Rolito’s uses your location, camera or photos, or sends you notifications, and you can change your mind in its Settings. You asked to join the waitlist.
• When the law needs it. For example, to answer a request about your data.

We don’t sell your data, show ads, or track you across other apps and websites.

Who else handles it

• Supabase runs our database, sign-in, photo storage and server code.
• Resend sends our emails, such as the codes that confirm your email or reset your password. It sees your email address and what the email says.
• Google reads bag photos with Gemini. How long Google keeps a photo depends on its Gemini API terms.
• Apple and Google confirm who you are when you sign in with them.
• Cloudflare checks that a person, not a bot, is signing in, creating an account or resetting a password, with Turnstile. For getting better at spotting bots, Cloudflare decides how it uses what it sees, under its Turnstile privacy terms.
• Expo, and through it Apple and Google, deliver notifications to your phone. They see your phone’s notification address and what the notification says.
• Vercel hosts this website.
• Sentry and PostHog receive crash reports and analytics, in the EU.
• Roasters and their shops. Coffee photos load from roasters’ own websites and shops, which see your internet address as any website would. When you tap Buy, the shop sees you came from Rolito’s, but not who you are. Some Buy links are affiliate links.
• The police or courts, only if the law requires us to share something.

Where your data leaves the UK or the EU, these companies protect it with the safeguards UK and EU law approve, such as standard contractual clauses.

How long we keep it

• Your account and everything in it, until you delete your account. Then we delete it straight away, with your profile photo, and copies in our backups are gone within 7 days.
• Scan counts, for two days.
• Your phone’s notification address, until you turn notifications off, log out or delete your account.
• Reports about something you published, as long as we need them to deal with abuse.
• Crash reports and analytics, for up to a year.
• The counts roasteries see, which aren’t about anyone, as long as the coffee or roastery is in Rolito’s.
• The waitlist, until we’ve emailed it that Rolito’s is out. Then we delete it.

Your rights

You can ask for a copy of your data, have it corrected or deleted, object to how we use it, ask us to stop using it for a while, and take it to another service.

• To get a copy, email privacy@rolitos.coffee from the address on your account. We send it there as a file a computer can read, free, within a month.
• To change your page, tap Edit profile on the You tab.
• To delete everything, see Delete your account.

For anything else, email privacy@rolitos.coffee. If you’re unhappy with how we’ve handled your data, you can complain to the UK’s Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live.

Children

Rolito’s is for people aged 16 and over. We don’t knowingly keep data about anyone younger. If you think a child has an account, tell us and we’ll delete it.

Changes

When this policy changes, we update this page and the date at the top. If a change matters to you, we’ll tell you in the app first.