Brew Vero
Barista in PajamasPrivacy Policy
Last updated 3 August 2026
This policy explains what Brew Vero collects, why, and what control you have. Brew Vero is operated by EMajd Marketing Inc. in Canada, and follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Your coffee photos are never uploaded. Image analysis runs entirely in your browser on your device. The original photo is processed in memory and discarded when you leave the page. What gets saved, only if you're signed in and choose to save, is the resulting numbers plus a small 240-pixel thumbnail of the corrected mat area.
What we collect
| Data | Why |
|---|---|
| Email address | To create and secure your account, and to send password resets. |
| Password | Handled entirely by Google Firebase Authentication. We never see or store it. |
| Profile details you enter: name, photo, bio, location, favourite drink, machine, gear | To personalise the app and pre-fill your analyses. All optional. |
| Saved analyses: measurements, curves, 240 px thumbnail, and the grinder/coffee labels you attach | So your library persists across devices and you can compare over time. |
| Brew journal entries: recipe, dose/yield, taste scores, rating, and notes you enter | So your brewing history and analytics persist across devices. |
| Grinder and coffee submissions | To review and, if approved, add the product name to the public catalogue. |
| Recipes you explicitly publish to Brew Vero Commons | To show that recipe publicly until you remove it. Public recipe records use a random publishing key rather than your account ID or email. Your display name is included only if you choose that credit option. |
| Community recipe reports | To let administrators review a public recipe. The moderation queue uses the same random publishing key and does not expose your private journal. |
| Anonymous grind measurements, written when you save an analysis: grinder model, dial setting, D50, fines, span, particle count, and the time recorded | Pooled across all users to build a public setting-to-microns reference per grinder. This row carries no account identifier, email, photo, or coffee name and cannot be traced back to you. Don't save the analysis if you'd rather not contribute; the report still works. |
| Technical logs (IP address, timestamps) held by Google Firebase | Security, abuse prevention, and service reliability. |
We do not collect: your original photos, payment details, contacts, precise location, or advertising identifiers. There are no third-party advertising or tracking scripts in Brew Vero.
Imports, connected devices, and private links
Backup and journal-import files are read in your browser. The files themselves are not uploaded; only the coffee records you approve are written into your private account. Optional Bluetooth or serial device readings stay in the current page until you choose to place a value in a brew and save it. Brew Vero does not store Bluetooth device identifiers or connection credentials.
Private recipe links contain the recipe inside the URL. Anonymous grind-report links contain only selected measurement numbers and remove coffee, grinder, setting, photo, date, and account details. Anyone who receives a link can read and forward its contents, and URLs may remain in browser history or ordinary hosting logs. Do not put sensitive information in a recipe name or field you plan to share.
Analytics
Brew Vero does not run Google Analytics or any behavioural analytics product. Firebase collects standard operational logs necessary to run the service.
Legal basis and consent
We collect and use your information with your consent, given when you create an account and when you choose to save an analysis, import records, submit a catalogue entry, or publish to the Commons. Saving an analysis is also what contributes the anonymous grind measurement described above, so choosing not to save is how you decline it. Commons publishing has a separate confirmation and is never enabled automatically. Running an analysis and reading its full report works without an account and without any data collection at all. You can withdraw consent by removing a public recipe or deleting your account.
Where your data lives
Data is stored using Google Cloud Firestore in the United States (us-central1) and processed by Google as our service provider. This means your information may be stored or processed outside Canada and may be subject to the laws of that jurisdiction. Google is contractually bound to protect it. See Firebase's privacy documentation.
Who can see your data
- You: full access to everything in your account.
- Administrators: can see account and profile fields, catalogue submissions, contact messages, public Commons recipes, and the Commons moderation queue. Database security rules prevent administrators from reading your private brew, recipe, experiment, water-profile, coffee-lot, equipment, and grind-analysis subcollections.
- Other users: see approved catalogue product names and recipes deliberately published to the Commons. Your account ID and email are not put in the public recipe; your display name appears only if you select that option.
- Everyone, eventually: the anonymous grind measurements described above are pooled into a public per-grinder reference. What is published is an aggregate (median particle size at each dial setting, and how many readings it is based on), never an individual row, and never anything identifying.
We do not sell, rent, or trade personal information. We may disclose information if required by law or to protect against fraud or abuse.
Cookies and local storage
Brew Vero uses browser storage for two things: keeping you signed in (Firebase Authentication tokens), and caching your display name locally so the About and Contact pages can greet you without fetching your profile again. Both stay on your device. There are no advertising, marketing, or cross-site tracking cookies. Clearing your browser storage signs you out; it doesn't delete your saved data.
Retention
We keep your data for as long as your account exists. Deleting your account removes your private records, public Commons recipes, moderation reports, and profile from our database. Catalogue entries that have already been approved may remain in the public list as product names, with no link to you. Backups and provider logs may persist for a short period afterwards as part of normal operation.
Your rights
- Access and portability: export a versioned backup in one click, restore it later, or import compatible coffee-journal records.
- Correction: edit your profile at any time.
- Deletion: delete individual analyses, all analyses, or your entire account from your profile page.
- Withdraw consent: delete your account; the analyzer still works signed out.
- Complain: you may contact us, and you have the right to complain to the Office of the Privacy Commissioner of Canada.
Security
Traffic is encrypted with HTTPS. Access is enforced server-side by database security rules, so one user cannot read another's data even by modifying the app in their browser. Passwords are managed by Firebase Authentication and are never visible to us. No system is perfectly secure; please use a strong, unique password.
Children
Brew Vero is not directed at children under 13, and we don't knowingly collect their information. If you believe a child has created an account, contact us and we'll remove it.
Changes
If this policy changes materially, we'll update the date above and note it in the app. Continued use after a change means you accept the updated policy.
Contact
Privacy questions, access requests, or complaints:
baristainpajamas@gmail.com
EMajd Marketing Inc., Canada