Privacy Policy

1. Who we are
2. What we collect
3. How we use it
4. What other people can see
5. Messages, and when we read one
6. Who helps us run KaFinca
7. Your choices and rights
8. How long we keep it
9. Security
10. Children
11. Changes to this policy
12. Contact us

Who we are

KaFinca ("KaFinca," "we," "us") runs the KaFinca coffee journal and community app at app.kafinca.com and the website at kafinca.com. We're based in Concord, California. This policy explains what information we collect when you use KaFinca, how we use it, and the choices you have.

What we collect

Your account

• Your email address and password (passwords are stored securely and we can't see them).
• If you sign in with Google or Apple, the basic profile they share with us, like your name and email. With Apple, that may be a private relay address.
• Your @handle, display name, and the settings you choose (Farm Mode or Cupping Room, default visibility).
• Social handles you add, like Instagram or TikTok, so we can include them in share captions.
• Whether you've agreed to receive marketing email, and when.

What you log

• Coffee and drink details: names, roasters, cafés, origins, roast and brew details, ratings, flavor notes, prices, dates, and your notes.
• Place names you type in, like a café name or city. If you pick a suggestion, we also save that business's address and map location so it can appear on the map. The app does not track your device's GPS location.
• Photos you add to an entry, including photos of coffee bags you scan.
• Who you follow on KaFinca.
• Business listings you submit, including the business contact details you enter.
• Feedback you send us.

Technical information

• Basic information your browser sends when it connects, like IP address, browser type, and the time of the request. Our hosting and database providers log this to keep the service secure and working.
• The app stores a sign-in token and any unsaved draft on your own device (browser storage) so you stay signed in and don't lose a log you were in the middle of.
• If you turn on notifications, a notification address for that device, so we can send the alerts you chose.

We don't use advertising trackers, and we don't buy information about you from anyone.

How we use it

• To run your journal: saving your logs and photos and showing them to you on any device you sign in on.
• To power community features: the map, the feed, follows, and business listings.
• To read coffee bag labels when you use Scan the Bag.
• To keep KaFinca secure, prevent abuse, and fix problems.
• To send account emails, like confirming your email or resetting your password.
• To send the reminders you choose, like a notification when someone you follow logs, or an email when a bag you logged hits week 3. You can turn each one off in Settings, and every reminder email has an unsubscribe link.
• To send occasional news about coffees and features, only if you opted in. Every marketing email will include an unsubscribe link.
• To understand how KaFinca is used overall so we can improve it. When we share insights with coffee businesses, they are summaries (for example, how often a coffee gets reordered), not your personal information.

What you write to other members

• Posts and answers you write on the Fence, and when you wrote them.
• Direct messages you send, and whether the other person has read them.
• Who you have blocked, and anything you report to us, including a copy of the post, answer or message you reported.
• Whether you have turned direct messages off.

What other people can see

• Community logs show other KaFinca members your display name or @handle, the coffee or drink name, the café or roaster, the area, your overall rating, and the date. These can appear on the map, in the feed, and in search.
• Private logs are visible only to you.
• Photos are stored privately and are only shown to you, unless you choose to share a tasting card yourself.
• Feedback you post in the app is visible to other members along with your name.
• Fence posts and answers are visible to every KaFinca member, with your display name or @handle. They are not visible to the public web.
• Direct messages are visible only to you and the person you are writing to. Other members cannot see them, and neither can we, except as described below.
• Blocking is quiet. The other person is not told. You stop seeing each other on the Fence and neither of you can message the other.
• Business listings you submit, including the contact details you enter, are visible to everyone.

You pick Community or Private on every log, and you can set your default in Settings.

Messages, and when we read one

Direct messages are stored so we can deliver them, and the database only lets the two people in a conversation read them. That restriction applies to us too: nobody at KaFinca can open your messages, and there is no admin screen that shows them.

There is one exception, and it only happens because somebody asks for it. If you or the person you are writing to reports a message, we are sent a copy of that one message so we can decide what to do about it. We see the message that was reported, who reported it and who wrote it. We do not see the rest of the conversation.

The same goes for a reported Fence post or answer. Reports are kept so we can tell whether a problem is a one-off or a pattern.

We email you when somebody messages you or answers your post, and that email includes the first part of what they wrote. If you would rather get a notification on your phone instead, turn notifications on in Settings.

Who helps us run KaFinca

We use a small number of service providers. They process information only to provide their service to us:

• Supabase: database, sign-in, and photo storage.
• Netlify: hosting for kafinca.com and app.kafinca.com.
• Cloudflare: domain name service.
• Google and Apple: sign-in, if you choose those options. Google also powers place suggestions when you type a café or roaster name. Our pages load fonts from Google Fonts, which means your browser connects to Google's servers.
• Mapbox: the map in Explore.
• Resend: sends our emails.
• Your browser or phone maker (for example Apple, Google, or Mozilla): delivers push notifications, if you turn them on.
• Anthropic: when you use Scan the Bag, the bag photo is sent to Anthropic's AI service to read the label and return the details. It's only used to answer that request.

We may also share information if the law requires it, to protect people's safety or KaFinca's rights, or as part of a sale or reorganization of the business, in which case this policy would continue to apply.

We do not sell your personal information, and we do not share it for targeted advertising.

Your choices and rights

• See and export: Settings, then Export my journal, downloads your entries and photos.
• Correct: edit any entry, your display name, or your settings anytime.
• Delete: delete any entry, or delete your whole account in Settings. Deleting your account removes your profile and your journal.
• Visibility: switch any log between Community and Private.
• Notifications and reminders: turn push notifications and reminder emails on or off in Settings.
• Marketing email: unsubscribe from any marketing email, or email us.

California residents have the right to know what personal information we collect and how we use it, to access and delete it, to correct it, and to not be discriminated against for using these rights. We don't sell or share personal information, so there's nothing to opt out of. To make a request, use the tools above or email hello@kafinca.com. We'll confirm the request comes from your account before acting on it.

How long we keep it

We keep your information while your account is open. When you delete an entry or your account, we remove it from the live service right away. Copies may stay in routine backups for a limited time until they're overwritten. We may keep a small amount of information longer if the law requires it or to prevent abuse.

Security

We use encrypted connections (HTTPS), store photos in private storage, and use database rules so members can only reach their own private data. No system is perfect, so please use a strong password and let us know right away if you think your account has been compromised.

Children

KaFinca isn't meant for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has created an account, email us and we'll delete it.

Changes to this policy

If we make meaningful changes, we'll update the date at the top of this page and let members know in the app or by email before the changes take effect.

Contact us

Email hello@kafinca.com with any privacy question or request.