Privacy Policy

Roast is a personal coffee library. This page explains exactly what we collect, what we don’t, and who handles your data along the way.

Who we are

Roast is a mobile app operated by Kip Builds LLC (“we”, “us”, or “Roast”), a New York limited liability company. This policy applies to the Roast iOS app and this website. If anything here is unclear, email kishan@kipbuilds.comand we’ll explain.

What we collect

Account

You sign in with Apple. On your first sign-in, Apple shares your name (if you allow it) and an email address (real or a private Apple relay address). We store these to identify your account. We never receive your Apple ID password.

Profile and preferences

Anything you set in the app: display name, flavor preferences (fruity, chocolate, floral, etc.), preferred roast range, brew methods, and decaf preference. You can change or clear any of this at any time in your profile.

Content you create

• Scans — photos of coffee bag labels you scan, plus the structured data we extract from them (roaster, coffee name, origin, notes, roast level).
• Reviews and ratings — star ratings and text reviews you leave on a coffee.
• Shelf— the set of coffees you’ve saved.

Your reviews and ratings are visible to other Roast users as part of the community catalog. Your shelf, profile preferences, and scan photos are private to your account.

Device permissions

• Camera— used only when you scan a bag. We don’t record video or access the camera in the background.
• Photo library — used only when you explicitly pick a photo to scan.

What we do not collect

Roast ships without analytics, advertising SDKs, or third-party trackers. We don’t use Google Analytics, Facebook SDK, Mixpanel, Amplitude, Sentry, or similar tools. We don’t track your location, contacts, or activity in other apps. We don’t build advertising profiles and we don’t sell data to anyone.

How we use your data

We use your data to run the app — sign you in, sync your shelf across devices, show you coffees tuned to your taste, and let you post reviews. That’s it.

Who processes your data

We use a small set of trusted providers to actually operate the service. These are processors — they handle your data on our instructions and don’t use it for their own purposes.

• Supabase — our backend. Stores your account, profile, reviews, shelf, and scan photos.
• Anthropic (Claude) — when you scan a bag, the photo is sent to Claude to extract the roaster name, coffee name, origin, and tasting notes. Anthropic’s API does not retain this data for training.
• SerpAPI — used to find public product images during scan processing. We send search queries like the roaster and coffee name, not your personal information.
• Apple — provides Sign in with Apple for authentication.

Where your data lives

Our infrastructure is based in the United States. If you use Roast from outside the US, your data will be transferred to and processed in the US.

How long we keep it

We keep your account data for as long as your account exists. Scan photos, reviews, and shelf entries are retained until you delete them or delete your account.

Deleting your account

You can delete your Roast account from the app at any time (Profile → Delete account). When you do, we permanently remove your profile, scans, scan photos, shelf, and your personal reviews from our systems. Aggregated catalog data (coffees and roasters that existed in the shared catalog) remains, since it belongs to the community catalog, but is no longer linked to you.

Your rights

Depending on where you live (for example, the EU under GDPR or California under CCPA), you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct data that’s inaccurate.
• Delete your data (see above — you can also do this yourself in the app).
• Object to or restrict certain processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email kishan@kipbuilds.com.

Children

Roast isn’t directed at children. If you’re under 13 (or the minimum age in your country), please don’t use Roast or create an account. If we learn we’ve collected data from a child, we’ll delete it.

Changes to this policy

If we make material changes to this policy, we’ll update the effective date at the top and, where appropriate, notify you in the app or by email. Minor wording changes happen without notice.

Contact

Questions, requests, or concerns? Email kishan@kipbuilds.com.