Your coffee record is yours.

• We collect what it takes to run your account, keep your coffee journal, and deliver your orders.
• We don't sell your information, show ads, or use tracking or analytics tools.
• Your Passport and your logs are public by default, so other coffee lovers can learn from what you brew. You can make any log private, or make your whole Passport private, whenever you like. Reviews are always public.
• When you buy coffee, the roaster receives your name and shipping address so they can send it to you.
• You can ask us for a copy of your data, or ask us to delete it, at any time.

Specialty Coffee Market is an independent business based in Vancouver, British Columbia, Canada. We run specialtycoffeemarket.com, a marketplace for specialty coffee roasters, and the Coffee Passport app, where you keep a record of the coffees you drink. We're responsible for the personal information described here, and we handle it in line with Canada's privacy law (PIPEDA) and British Columbia's Personal Information Protection Act.

Questions about privacy go to hello@specialtycoffeemarket.com.

Your account. Your email address and a username. If you sign in with Google, Google shares your name, email address and Google account picture with us. You can also add your city. If you sign up with an email and password, your password is stored securely by our authentication provider. We never see it.

Your coffee record. This is what you choose to add: the coffees and bags in your Collection, your logs (brew method, dose, grind, times, temperatures, equipment, ratings, tasting notes and written notes), your reviews, your favourites, the roasters and people you follow, and the Sets you complete.

Photos. Photos of coffee bags you scan, and brew photos you attach to logs or reviews.

Label scans. When you scan a bag, we keep a record of what was read from the label (roaster, coffee name, origin, roast date and so on), any corrections you make, and a barcode if the bag has one. We use this to match your bag to the right coffee and to improve the scanner.

Orders. When you buy coffee: your name, email, phone number, shipping address, what you ordered and what you paid. Your card details go straight to Stripe, our payment processor. They never reach our servers.

Troubleshooting reports. If you choose to send a diagnostic report from the app, it contains technical information about the app's offline syncing. It's only sent when you tap to send it.

Specialty coffee is better shared, so your Passport starts out public. That means other people can see:

• Your Passport: your username, picture and city, your Collection, your Sets, and your Journal.
• Your logs: every log is public unless you make it private. You can switch a single log to private, or change your default so new logs start out private.
• Your reviews: always public, because they make up a coffee's rating for everyone else.

You can make your whole Passport private in Settings. Always private: your email address, your orders, your phone number and your shipping address.

Shared with the community: when you add a coffee we didn't have yet, its details and the label photo you took become part of our shared coffee catalog, so the next person who scans that bag finds it. The catalog doesn't show who added it.

Photos are stored at long, hard-to-guess web addresses. They aren't listed anywhere, but like most photo hosting, anyone who has the exact link to a photo can open it.

• To run your account and keep your coffee record in sync between the website and the app.
• To identify coffees from label photos and match them to our catalog.
• To process your orders, pass them to the roaster, and handle payments and refunds.
• To show you coffees, roasters and tasting information relevant to your record.
• To fix problems, prevent abuse, and keep the service secure.
• To meet our legal obligations, like keeping tax records.

We only email you about your account and your orders. We don't send marketing email.

We don't sell or rent your personal information, and we don't share it with advertisers. We share it only with the following:

• The roaster you buy from receives your name, email, phone number, shipping address and order, so they can ship your coffee. Their own privacy policy covers what they do with it.
• Stripe processes payments.
• Supabase hosts our database, sign-in and photo storage.
• Vercel hosts the website and the app.
• Anthropic provides the AI that reads coffee labels. The label photos you scan are sent to Anthropic to be read. Under Anthropic's commercial terms, that content isn't used to train their models.
• Google, if you choose to sign in with Google.

These providers handle information on our behalf and only for the purposes above. We'll also disclose information if the law requires it.

Our service providers store and process information outside Canada, mainly in the United States. While it's there, it may be accessible to authorities in that country under their laws.

We use your browser's storage only for what makes the service work: keeping you signed in, remembering your cart, and letting the app save your logs while you're offline and sync them later. We don't use advertising cookies, analytics, or tracking pixels.

Our homepage may ask your browser for permission to use your location. Your location is never stored or sent to us. Saying no changes nothing about what you can do on the site.

We keep your account and coffee record for as long as your account is open. After you delete your account, we delete it within 30 days. Order records are the exception: we keep those for as long as tax law requires, which in Canada is generally six years.

• Access: ask for a copy of the personal information we hold about you.
• Correction: fix anything that's wrong. Most of it you can edit yourself in the app.
• Deletion: ask us to delete your account. Coffees you added to the shared catalog stay in the catalog, with nothing linking them to you.
• Visibility: make your Passport private, or make any single log private, whenever you like.

To do any of these, email hello@specialtycoffeemarket.com from the address on your account. We'll respond within 30 days. If you're not satisfied with how we handle your request, you can complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

Your information is sent over encrypted connections, access to our database is restricted, and payments are handled entirely by Stripe. No service can promise perfect security, but if a breach puts you at real risk, we'll tell you and the Privacy Commissioner, as the law requires.

Specialty Coffee Market isn't intended for children under 13, and we don't knowingly collect their information. If you think a child has signed up, contact us and we'll delete the account.

If we change what we collect or who we share it with, we'll update this page and its effective date. If the change is significant, we'll tell you by email before it takes effect.

Specialty Coffee Market · Vancouver, British Columbia, Canada
hello@specialtycoffeemarket.com