Privacy Policy

Last updated: 21 October 2026

Tasse keeps your coffee journal on your device. This policy explains what the app and this website process, why, and what your rights are.

Who is responsible

ZeitFlow UG (haftungsbeschränkt), Kolonnenstraße 8, 10827 Berlin, Germany, email [email protected], is the controller under the EU General Data Protection Regulation (GDPR).

The app

Your coffee journal

The coffees, recipes, measurements, ratings, notes and photos you save are stored in a local database on your iPhone or iPad. Tasse works without an account and offline. Your journal is not sent to us, and we have no access to it. The app does not currently sync your journal between devices.

This local processing provides the journal you asked for (Art. 6 (1) (b) GDPR). You can delete cups and coffee bags in the app. Deleting the app, rather than offloading it, removes its local data. Device backups you enable may contain app data; Apple manages those backups under your device settings and its privacy policy.

Camera, photos and label scanning

You can take a label photo with your permission or select an image using the system photo picker. Tasse uses on-device text recognition to extract coffee details. On supported devices it can also use Apple Intelligence’s on-device model to interpret the label. Photos and recognised text are processed on your device and are not uploaded to us or an external AI service. Review the extracted details before saving.

Scanning is optional. You can enter coffee details manually and withdraw camera permission in your device’s Settings → Apps → Tasse. Access to the camera is controlled by your system permission; processing a photo you choose provides the scanning feature you requested (Art. 6 (1) (b) GDPR).

The origins map

The coffee origins map and country lists are built into the app and work offline. Viewing them does not send your journal or location to a map provider. Tasse does not request your device’s location.

Accounts, analytics and advertising

The app has no user account, analytics or advertising SDK, and does no tracking across apps or websites. If you have chosen in iOS or iPadOS to share analytics with app developers, Apple may pass us crash reports under Apple’s terms.

This website

The website is served by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, through Cloudflare Pages. To deliver the pages and protect them from attacks, Cloudflare processes your IP address, the time of the request, the page requested and your browser’s user agent. Our legitimate interest is running a secure website (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU–U.S. Data Privacy Framework. See Cloudflare’s privacy policy.

The website sets no cookies, uses no analytics and loads no third-party fonts or scripts. Fonts are served from this site. There is no signup form or email collection on the website.

Email to us

Email to us is hosted by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands, as our processor. If you email us, we use your message and address only to answer you (Art. 6 (1) (b) or (f) GDPR) and delete them once the matter is closed, unless the law requires us to keep them. Please include only the journal details or photos needed to explain your question.

Your rights

You have the right to access your data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time, with effect for the future. Because your journal stays on your device, you control it directly there. For data we process, contact [email protected].

You also have the right to complain to a supervisory authority. The authority for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany.

Changes

We update this policy when the app or the website changes. The date at the top shows the current version.