Privacy policy

The controller for the processing of your data in the lattecoach app and website is Digital Kreativ – Martin Beneder, Florianiring 3, 2440 Moosbrunn, Austria.

For questions about data protection, contact us at kontakt@digitalkreativ.at.

lattecoach rates photos of your latte art and gives you tips to improve. To do so, we process your photo, the rating and – if you create an account – your email address.

We use no ads, no tracking and no analytics tools, and we do not sell data.

Without an account, you can try 3 analyses for free. For this we create an anonymous trial account without name or email address, recognized by a session cookie (website) or your device’s secure storage (app).

So that the quota cannot be bypassed with ever new trial accounts, we store a hash of your IP address (HMAC with a secret key) with each trial analysis, never the IP address itself. The hash is removed after 30 days. Requests counted to prevent abuse (e.g. sign-in attempts) also use such hashes only.

A trial account that has not been used for 90 days is deleted automatically, together with its analyses and photos. If you create an account before then, your trial analyses are kept.

Accounts work without a password. You sign in with:

• a one-time code by email: we store your email address and send you the code through our email provider. The code is valid for 5 minutes and is only stored as a hash.
• Google: Google sends us your name, your email address and the address of your profile picture.
• Apple (iOS only): Apple sends us an email address (if you like, an anonymous relay address from Apple) and your name on your first sign-in.

If two sign-in methods use the same verified email address, we link them to one account. For each sign-in we store a session with its time, expiry and the identifier of your browser or the app (user agent), but no IP address.

Before a photo is uploaded, the app or your browser scales it down and removes metadata such as location and camera data. The photo is sent to OpenAI for the rating (see section 6).

If the analysis recognizes latte art, we store the photo, a preview, the rating, the tips, the chosen pattern, the language and the time in your account. Photos without latte art are not stored.

Your analyses are private. If you share an analysis, anyone with the link can view it until you stop sharing or delete the analysis. There is no public list of shared analyses.

Your earlier ratings are taken into account in new ones, so the coach can consider your progress.

For the rating we use the API of OpenAI (OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, Ireland; processing also by OpenAI, L.L.C., USA). We send the photo, the chosen pattern, the language and short summaries of your earlier ratings, but not your email address or name.

We instruct OpenAI not to store the requests. OpenAI does not use API data to train its models, but may keep it for up to 30 days to detect abuse.

We use the following providers as processors and have data processing agreements with all of them. Where data is transferred to the USA, we rely on the EU-US Data Privacy Framework if the provider is certified, otherwise on the European Commission’s standard contractual clauses.

• Vercel Inc. (USA): hosting of the website and server functions, storage of the photos.
• Neon Inc. (USA), servers in Frankfurt am Main: database with account and analysis data.
• Resend Inc. (USA): sending the emails with the sign-in code.
• OpenAI (see section 6): analysis of the photos.
• RevenueCat Inc. (USA): management of the Pro subscription. RevenueCat receives your user id from us and the purchase data (product, purchase date, term, country) from the App Store or Google Play; neither RevenueCat nor we see payment details.
• Expo / 650 Industries Inc. (USA): delivery of app updates and push notifications. On start, the app checks for updates; Expo receives technical data such as IP address, app version and device type. For push notifications, Expo receives your device’s push token and the notification text and passes them on to Apple or Google.
• PostHog Inc. (USA), servers in Frankfurt am Main: usage statistics of the app, only with your consent (see section 8).

Google (Google Ireland Ltd., Ireland) and Apple (Apple Distribution International Ltd., Ireland) process your data during sign-in as independent controllers under their own privacy policies.

The website only sets a technically necessary cookie for your session. The app keeps your session, the chosen language and small hints (e.g. whether you have already seen an explanation) in your device’s secure storage. No consent is needed for this, as none of it serves tracking or advertising.

Usage statistics (app only, only with consent): if you agree, the app keeps a random id on your device and sends PostHog which steps you take in the app, e.g. analysis started, result received, Pro offer viewed, with score and pattern, your answers at first launch (type of machine, goal pattern, how often you pour), as well as device type, operating system and app version. When you are signed in, we link this to your user id. Photos, email address, name, location or IP-based location are not sent. We use this only to understand where the app falls short; no advertising, no profile across other apps. You can withdraw your consent anytime in the app; without consent nothing is stored or sent.

Reminders (e.g. to practise) are scheduled only on your device; no data is sent for them. If you allow notifications, we also store your device’s push token with your user id and language, so we can let you know when an analysis is ready while the app was in the background. We delete the token when you sign out, delete your account or the device no longer accepts it. You can turn notifications off anytime in your device settings.

On every request, our hosting provider Vercel logs technically necessary access data (including IP address, time and requested address) for a short time for troubleshooting and security. Our own logs contain no personal data.

• Analysis, trial, account, Pro subscription, storage and sharing: performance of the contract of use (Art. 6(1)(b) GDPR).
• Quotas, abuse prevention, server logs and security: legitimate interest in a secure and affordable service (Art. 6(1)(f) GDPR).
• Usage statistics: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG or § 165(3) TKG 2021).

• Account, analyses and photos: until you delete them or your account.
• Purchase data of the Pro subscription: until you delete your account. Statutory retention of invoices lies with Apple or Google, who process the purchase.
• Trial accounts: up to 90 days after their last use.
• IP hashes of the trial: 30 days. The counters themselves are kept without any link to you for our cost statistics.
• Sign-in codes: 5 minutes. Expired sessions are deleted daily.
• Shared links: until you stop sharing or delete the analysis.

You can delete your account at any time in the app under “Your account” → “Delete account”, or request deletion by email to kontakt@digitalkreativ.at. We then delete your account, all analyses, photos and shared links, and your purchase data at RevenueCat immediately and for good. Cancel a running Pro subscription in the subscription settings of the App Store or Google Play; deleting the account does not end it.

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. To exercise them, write to kontakt@digitalkreativ.at.

If you believe we process your data unlawfully, you can lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).