1. Controller
PRIESSNITZ Unternehmensberatung KG, Leopold Mitterstöger-Straße 36, A-3012 Wolfsgraben, Austria, VAT ID: ATU73119118, email: support@beansclub.app.
For privacy requests, use the subject line “Beans Club privacy”.
2. Purposes and legal bases
We process data to provide accounts, sign-in, cloud sync, inventories, brew logs, community, friends, shared inventories, news, support, moderation, abuse prevention, purchases and the Beanie AI assistant. Legal bases are Article 6(1)(b) GDPR for contract performance, (a) for consent, (c) for legal obligations and (f) for legitimate interests in secure operation, support and abuse prevention.
Consent may be withdrawn at any time for the future without affecting prior lawful processing.
3. Data categories
Depending on use, we process account and identity data, email, login provider, profile and contact data, optional phone number and date of birth, settings, language, device and error data, inventories, pack images and coffee data, purchase prices and aggregated price history, brew parameters, ratings, friendships, groups, posts, comments, reports, blocks, support and feedback content, purchase and transaction identifiers, and Beanie messages with optional images.
We do not receive complete card or payment details. Apple processes payments.
4. Contacts and friend discovery
Address-book access is optional and used only to find contacts who already use Beans Club. Contact identifiers are normalized and hashed for server-side matching. We do not sell address-book data or use it for unrelated profiling. Core features remain available without contacts access.
5. Beanie and AI processing
Beanie processes prompts, selected pack and brew data, settings and optional images to generate responses. Responses may be wrong, incomplete or outdated and are not professional advice. Do not submit passwords, payment details, health data or confidential third-party data.
AI requests are authenticated and rate-limited server-side, and only the context required for the request is sent to the configured AI provider.
6. Recipients and international transfers
We use Supabase for database, authentication, storage and Edge Functions; Apple for the App Store, StoreKit, Sign in with Apple and payments; Google for Google sign-in; and a server-configured AI provider for Beanie. Email may be delivered through a separate SMTP provider.
Where data is processed outside the EEA, we rely on an adequacy decision, EU Standard Contractual Clauses or another lawful safeguard and minimize the data transferred.
7. Retention
Account data is generally retained until account deletion. Usage data remains while needed for its feature. Security and rate-limit events are retained briefly. Purchase and transaction records may be retained longer for legal, tax and fraud-prevention obligations.
Account deletion removes authentication data, private content and related storage objects. Public content may be removed or anonymized where needed for discussion integrity, abuse prevention, legal claims or statutory duties.
8. Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction, portability, objection and withdrawal of consent. We may request reasonable identity verification to prevent abuse.
Requests may be sent to support@beansclub.app. You may also complain to the Austrian Data Protection Authority or another competent supervisory authority.
9. Minors, advertising and tracking
Community, friends and other social features are disabled for users under 14. Beans Club currently uses no third-party advertising SDK and no cross-app advertising tracking. If this changes, consent flows, App Store disclosures and this policy will be updated before activation.
10. Security and changes
Measures include PKCE, Keychain session storage, Row Level Security, server-side authorization, rate limits, moderation controls, restricted uploads and local-only administration. No system can be completely protected against outages or attacks.
We update this policy when features, providers or legal requirements materially change and will communicate significant changes appropriately.
11. Website and email hosting
We use Easyname GmbH to host the Beans Club website and domain email. When the website is accessed, technically necessary server log data such as IP address, timestamp, requested path, referrer, browser information and response status may be processed to deliver the website securely, investigate faults and prevent misuse. The legal basis is our legitimate interest in secure and reliable operation under Article 6(1)(f) GDPR.
The marketing website uses no analytics, advertising pixels, external fonts or non-essential cookies. When you contact us by email, message content and metadata are processed so that we can answer your enquiry.