Privacy Policy for the "BrewLog" App

Last updated: October 31, 2026

This document sets out the rules for processing personal data by MatCode Mateusz Arczyński (ul. Portowa 10, 86-200 Chełmno, Poland, NIP 875-156-25-99, REGON 383604557, e-mail: matcode.help@gmail.com) - hereinafter the "Administrator". It has been prepared in accordance with Regulation (EU) 2016/679 ("GDPR").

1. In short

• BrewLog does not require an account, sign-in or an e-mail address.
• Your brew journal, recipes, beans and settings are stored only on your device. The Administrator has no access to them.
• The App contains no analytics or crash-reporting of its own and does not send your data to the Administrator's servers.
• The App shows Google AdMob ads. This is the only component that may process device identifiers - and only after the required consent.
• The App does not use location, camera, microphone, contacts or photos.

2. Glossary

User - a natural person installing or using the "BrewLog" mobile application (hereinafter: "App").

Service - the App's functionality, including the brew stage timer, ratio calculator, custom recipes, bean management, brew journal with sensory profile, statistics, brew comparison and JSON backup.

3. Scope and purposes of data processing

• Data entered by the User (brews, tasting notes, ratings, custom recipes, bean details, app settings) is stored only locally on the device and is not sent to the Administrator. The Administrator does not receive it, so it is not processed by the Administrator within the meaning of the GDPR.
• JSON backup - the App creates an automatic backup in the device's local storage. You can also save a backup file to a location you choose, share it with an app of your choice (e.g. mail, messenger, cloud storage) or import a file from your device. The file goes where you send it - the Administrator does not receive it. You and your chosen service provider are responsible for protecting an exported file.
• Local notifications - if you grant permission in the system, the App schedules a notification on your device for the end of a brewing stage. These are local notifications (not push) and require no data transfer. On Android the App may ask for the exact alarm permission so the notification fires on time. You can revoke permission at any time in system settings.
• Advertising (Google AdMob) - the App shows banner and full-screen ads. The Google Mobile Ads SDK may process advertising identifiers (GAID on Android, IDFA on iOS), IP address, device and OS information, approximate location derived from the IP address and ad-interaction data in order to serve and measure ads, prevent fraud and ensure security. Legal basis: Art. 6(1)(a) GDPR (consent), collected through the Google User Messaging Platform (UMP) form and, on iOS, the App Tracking Transparency (ATT) prompt; Art. 5(3) ePrivacy Directive for access to information on the device. If you do not consent (or, on iOS, do not allow tracking), the App requests non-personalized ads only, and where the law requires it ads may not be shown at all.
• Correspondence with the Administrator - if you write to matcode.help@gmail.com, we process your e-mail address and message to reply; legal basis: Art. 6(1)(f) GDPR (legitimate interest - handling inquiries). We keep it until the matter is closed and then until limitation periods for claims expire.
• Website - the website (legal documents and app showcase) is hosted on Firebase Hosting (Google). The hosting provider may automatically log basic connection data (e.g. IP address, request time) in server logs for technical and security purposes. The site uses no analytics or advertising cookies; your browser stores only your language and theme preference (localStorage).

Providing data is voluntary. We do not make automated decisions about you or carry out profiling.

4. Data recipients

• Google LLC / Google Ireland Ltd. - Google AdMob, Google Mobile Ads SDK and Google User Messaging Platform (ads and consent management), Firebase Hosting (website hosting). For advertising, Google acts as an independent controller under its own privacy policy (how Google uses data in AdMob).
• Apple Inc. and Google (Google Play) - as providers of distribution platforms and operating systems, under their own policies.
• The Administrator's IT and e-mail service providers - for handling correspondence.

These providers may process data in the USA or other countries outside the EEA. Transfers are based on an adequacy decision (including the EU-US Data Privacy Framework), Standard Contractual Clauses (SCC) or other safeguards provided for by the GDPR.

5. Retention period

• Local App data (journal, recipes, beans, backups in app storage) - until the App is uninstalled or its data is cleared by the User.
• Backup files saved or shared by the User - until deleted by the User (outside the Administrator's control).
• Data processed by Google in connection with ads - according to Google's policy; you can withdraw consent at any time (section 7).
• E-mail correspondence - until the matter is closed and limitation periods for claims expire.

6. User rights

To the extent the Administrator processes your data, you have the right of access, rectification, erasure, restriction of processing, data portability, the right to object (where the legal basis is legitimate interest) and the right to withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal). Send requests to matcode.help@gmail.com. For data processed by Google for advertising you can also exercise your rights directly with Google. You also have the right to lodge a complaint with a supervisory authority, in Poland the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw), or with the authority in your own country.

Deleting data from the App: because data is stored locally, you can delete it yourself by uninstalling the App or clearing its data in system settings.

7. Device identifiers and managing consent

The App does not store classic browser "cookies", but the Google Mobile Ads SDK may use device or advertising identifiers. You can manage consent through:

• the privacy options (UMP) in the App's settings - where required in your region;
• on iOS: Settings → Privacy & Security → Tracking (you can change the permission for the App at any time);
• on Android: Settings → Google → Ads (reset or delete your advertising ID);
• Google ad personalization at adssettings.google.com.

8. Data security

We apply appropriate technical and organizational measures. Communication with Google services uses encrypted connections (TLS). Local data is stored in the operating system's app sandbox - its safety also depends on your device's protections (screen lock, system updates). Backup files are not encrypted by the App - keep them in a safe place.

9. Children's privacy

The Service is not intended for persons under 13 (or the minimum age required by local law to consent to data processing). We do not knowingly collect personal data from children below that age. If you are a parent or guardian and believe a child has given us personal data, contact us at matcode.help@gmail.com so we can take appropriate action.

10. Policy changes

We may update this Privacy Policy from time to time. The current version is available at https://matcode.eu/hub/brewlog/policy-en.html. We will notify you of material changes in an appropriate way (e.g. in the App or release notes). The date at the top shows the last change.

11. Contact

For privacy and personal data matters write to matcode.help@gmail.com or to the Administrator's registered address given above.