1. Information We Collect
When you use CommonGrind, we collect information you provide directly and technical information necessary to deliver our synchronized service:
- Account & Profile Data: When signing in via Google Authentication or Email/Password, we store your email address, unique user ID, optional public barista nickname, and profile avatar URL.
- Dial-In Extraction Logs: Brew recipes you record, including coffee dose (g), liquid yield (g), extraction time (seconds), brew ratio, grinder model and grind setting, machine model, temperature, pressure profile, basket size, portafilter type, and sensory tasting notes.
- Equipment & Coffee Inventory: Espresso machines, grinders, accessories, and coffee bean catalog entries (roaster, origin, roast date, roast level, process) that you add or save.
- Photos & Uploaded Media: Extraction shot images, latte art photos, or coffee bag labels you voluntarily attach to your brew logs or coffee catalog entries.
- Device & Diagnostics: Browser type, operating system, network status (online/offline indicators for Progressive Web App syncing), and essential error logs to maintain service reliability.
2. How We Use Your Information
We use the collected information strictly to provide and improve the CommonGrind platform:
- To synchronize your personal brew journal across your desktop and mobile devices.
- To compute aggregated, crowdsourced dial-in benchmarks (such as median grind size and ratio for a specific bean and grinder combination) to help fellow home baristas dial in faster.
- To provide AI-assisted extraction recommendations and troubleshooting when you request automated dial-in guidance.
- To support offline functionality through Progressive Web App (PWA) service worker caching.
- To protect against abusive behavior, catalog spam, and security vulnerabilities.
3. Granular Privacy Controls (Public vs. Private Logs)
CommonGrind gives you complete control over what you share with the community:
- Public Brews: Visible on the community extraction feed. Contributes to equipment dial-in averages and community taste notes.
- Private Brews: Marked with is_private: true. Visible exclusively to your authenticated account. Excluded from community feeds and public searches.
You can toggle the privacy state of any brew log at any time by clicking Edit Shot from your history. You can also choose whether your Barista Nickname is displayed publicly or kept anonymous.
4. AI Shot Advice & Machine Learning Disclosures
CommonGrind features an optional AI Dial-In Assistant powered by Google Gemini models:
- Server-Side Proxy: All AI requests are securely routed through our server-side API proxy (/api/generate). Your client device never accesses or handles secret API credentials directly.
- Data Transmitted: Only technical coffee parameters (bean roast level, dose, liquid yield, extraction time, grinder setting, and reported tasting balance like sourness/bitterness) are transmitted to formulate adjustment advice.
- No Personal Credential Sharing: Your email address, password, billing info, or private account credentials are never transmitted to third-party AI models.
5. Third-Party Services, Cookies & Advertising
We rely on trusted industry infrastructure to operate CommonGrind:
- Google Firebase: We utilize Google Cloud Firebase Authentication for secure sign-in and Cloud Firestore for real-time, encrypted database storage.
- Google AdSense & Advertising: We may display advertisements provided by Google AdSense (ca-pub-8228414155930089). Third-party vendors, including Google, use cookies (such as the DoubleClick cookie) to serve ads based on your prior visits to our website or other websites. You may opt out of personalized advertising by visiting Google Ad Settings or aboutads.info.
- Local Storage & Service Worker: We use browser LocalStorage and CacheStorage solely to store your offline dial-in logs, gear selections, language preferences, and application shell assets.
6. Android Application (TWA) & Device Permissions
When using our official Android application (app.commongrind.twa):
- Camera & Photo Gallery: Requested solely if you choose to take or upload a photo of your espresso extraction, coffee bean bag, or equipment. We do not access your photo gallery in the background.
- No Location Tracking: CommonGrind does not request, track, or store your GPS or fine location.
7. Your Rights & Account Data Deletion (GDPR / CCPA)
Under global privacy frameworks including GDPR and CCPA, you maintain the right to:
- Access & Portability: View all extraction shot logs, bean ratings, and gear configurations recorded under your account.
- Rectification: Edit or update any recipe, bean details, or profile information directly in the app.
- Erasure (Right to be Forgotten): Delete any individual brew log, coffee catalog item, or gear profile instantly using in-app delete buttons.
- Complete Account Deletion: You may request complete account deletion and purging of all associated personal records by contacting our support team at privacy@commongrind.app. Your data will be deleted within 30 days of verified request.
8. Children's Online Privacy Protection (COPPA)
CommonGrind is designed for specialty coffee enthusiasts and home baristas. We do not knowingly solicit or collect personal identifiable information from children under the age of 13. If you believe a child has provided us with personal information, please contact us immediately for prompt deletion.
9. Privacy Officer & Inquiries
For privacy requests, data export, or deletion inquiries, reach our designated privacy team: