Who we are

Roasters is a specialty coffee discovery app operated by Roasters Technologies ("Roasters", "we", "us"). Contact: team@roasters.app.

What we collect

We collect only what we need to run the app and the site.

Account data — if you create an account: your email address, display name, and (optionally) profile photo.
Usage data — anonymised analytics on which screens are opened, how long they're used, and which cities are browsed. We use this to improve the app.
Location — only when you grant permission, and only to show cafés near you. Location is processed on-device when possible and not stored on our servers in identifiable form.
Saved lists, reviews, and follows — content you create in the app (saved cafés, lists, reviews, forum posts).
Device data — model, OS version, language, crash reports. Used for compatibility and bug fixing.

We do not collect your contacts, calendar, photos (beyond what you explicitly upload), or microphone.

How we use it

To operate and improve the app and the site
To deliver the features you use (saving cafés, posting in forums, leaving reviews)
To respond to support requests
To detect and prevent abuse or fraud
To send the occasional product update if you've opted in

We do not sell your data. We do not share your data with advertisers. We do not run ads in the app.

Third parties we use

To run the service we use a small number of trusted vendors. They process data on our behalf under data processing agreements.

Apple & Google — for app distribution and push notifications.
Hosting providers — for storing data and serving the website. The website runs on Firebase Hosting (Google).
Crash & analytics tooling in the app — privacy-respecting analytics that does not personally identify users.
Google Analytics (website only) — measures visits to roasters.app, only if you accept analytics cookies. See Cookies and analytics on the website.
Email provider — for transactional emails (password reset, account confirmations).

Your rights

Under GDPR (EU/UK), CCPA (California), and equivalent laws, you have the right to:

Access the data we hold about you
Correct it if it's wrong
Delete your account and all associated data
Export your data in a portable format
Object to certain kinds of processing
Withdraw your consent at any time, for example to website analytics

To exercise any of these, email team@roasters.app from the email address linked to your account. We'll respond within 30 days.

Data retention

We keep your account data as long as your account is active. If you delete your account, we delete your data within 30 days, except where law requires us to retain it (e.g. financial records for tax purposes).

Children

Roasters is not directed at children under 13 (or 16 in some EU countries). We don't knowingly collect data from children. If you believe a child has created an account, contact us and we'll remove it.

Cookies and analytics on the website

roasters.app uses Google Analytics 4 to understand how the site is used — which pages are viewed and how many visits we get. It only sets cookies if you say yes.

Nothing stored until you accept — we use Google Consent Mode v2 with all analytics and advertising storage set to "denied" by default. No analytics cookies are set until you click "Accept" in the cookie banner. Before that, Google may receive cookieless, aggregated pings that store no identifiers on your device.
If you accept — Google Analytics sets two first-party cookies, _ga and _ga_<ID>, to measure page views and visits. They expire after up to 13 months. GA4 anonymises IP addresses by default.
No advertising — advertising storage is never enabled. We don't use Google Analytics for ads, remarketing or ad personalisation.
Your choice, stored in your browser — we save your decision in your browser's local storage, not in a cookie. You can change it or withdraw consent at any time via "Cookie settings" in the site footer.
Legal basis — your consent (Art. 6(1)(a) GDPR). Withdrawing consent doesn't affect processing that happened before.

Analytics data is processed by Google Ireland Limited and Google LLC and may be transferred to the United States under the EU–US Data Privacy Framework. The site itself is hosted on Firebase Hosting (Google), which processes IP addresses in its server logs in order to deliver the pages to you. Our fonts are self-hosted, so no requests go to Google Fonts. We don't use any advertising cookies.

International transfers

Our servers are located in the European Union. If you use Roasters from outside the EU, your data is transferred to and processed in the EU under standard contractual clauses where applicable. The website is the exception: it's delivered through Google's Firebase Hosting, and if you accept analytics cookies, Google may process that data in the United States under the EU–US Data Privacy Framework (see Cookies and analytics on the website).

Changes to this policy

We may update this policy as the app evolves. Material changes will be flagged in the app and on this page with an updated date at the top. Continued use after a change means you accept the updated policy.

Contact

For privacy questions, complaints, or data requests: team@roasters.app.