Privacy Policy

This Privacy Policy explains how your personal data is handled when you use the Gota mobile app, in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

• Owner: Jose Antonio Neto Suárez (Utropia)
• Address: C/ Manuel Vela 37, 21440 Lepe, Huelva, Spain
• Tax ID (NIF): ES29607219D
• Email: hello@utropia.es

2. Data we process

2.1. Data stored locally on your device

Gota stores your brew logs, custom recipes, bean library and preferences locally on your device. This data is not transmitted to our servers and we have no access to it, except for what you choose to send us yourself (see 2.3).

Your device’s backup settings may include this local data in an Apple or Android system backup and restore it when you reinstall or change devices. The backup provider controls that copy; Gota does not receive it. Deleting the app does not necessarily delete existing system backups.

2.2. Crash reports and diagnostics

We use Sentry to receive technical crash reports (exception type, app version, anonymized device model). No direct personal identifiers are included.

2.3. Bluetooth scale diagnostics

Gota connects to Bluetooth coffee scales (Acaia). To help you when yours is misbehaving, the scales screen has a diagnostics section with three levels:

• Local log (always on). The app keeps a technical log of the connection to your scale on your phone: roughly the last 30 minutes in memory, and the last brew made with a scale in a file. It never leaves your phone on its own.
• Diagnostic mode (optional, off by default). If you turn it on, that log is kept on your phone in more detail and for longer: it survives the app being closed, for up to 48 hours and up to a size limit. It switches itself off after 48 hours, and whenever it is switched off (by itself or by you) the extended log is deleted.
• Sending a report (only if you decide to). You pick what is going wrong (the scale doesn't show up, won't connect, disconnects, fails when switching scales, the weight is wrong, or something else), can add a note, enter your email address (required, so we can reply) and tap send. Before sending, you can see what will be sent. The report travels encrypted (HTTPS) to our server, which does not store it: it forwards it as an attachment to our support mailbox (hello@utropia.es) and returns a reference code to you. If sending fails, you can share the file yourself from the system share sheet; in that case you are the one sending it, through whichever channel you choose.

As long as you send nothing, the local log and diagnostic mode involve no data processing on our part: everything stays on your phone.

The report contains:

• technical Bluetooth connection events: scanning, pairing, connection, disconnection, retries, errors, and the state of Bluetooth and its permission;
• the raw data your scale sends and the weights it measures;
• from the brew in progress: phases, timings, water targets and flow rate (numbers only, no recipe text);
• the Bluetooth identifier the operating system assigns to the scale on your phone, the scale model, and which scales you have paired (model, not name);
• app version, operating system version and language;
• what you type: category, note and email address.

Our server also sees the IP address the report is sent from and includes it in the support email.

The report does not contain recipe names or their text, tasting notes, your bean library, your brew history, your location, your device name, the name your scale broadcasts, photos or audio.

2.4. Subscriptions and purchases

Purchases are processed through the App Store on iOS and Google Play on Android. RevenueCat validates Pro access using an anonymous app identifier and purchase information. We do not receive or store payment card details or your Apple or Google account credentials.

2.5. AI features (Gota Pro)

When you use AI analysis, the images or text you submit are processed on our servers and, where applicable, forwarded to AI model providers (OpenAI, Anthropic or Google) strictly to generate the response. Content is not retained after processing and is not used to train models.

2.6. Device permissions: camera, microphone and photos

Gota asks for each of these only when you first use the feature that needs it, and you can withdraw any of them at any time in device settings.

• Camera — to scan coffee bag labels and printed recipes, and to film your brew with Live Brew.
• Microphone — to keep the sound of the pour in a Live Brew video and, if you turn on voice control, to hear your brew commands.
• Photo library — to read a label or recipe from an image you pick, and to save a finished Live Brew video.

On Android, the system photo picker gives Gota access to the images you select; saving an app-created video does not require access to the rest of your library. Nearby devices permission is used for Bluetooth scales. Notifications and, optionally, exact alarms are used for brew and coffee reminders; you can manage them in system settings.

Live Brew videos are recorded on your device and stay there unless you choose to save them to your photo library or share them. We never receive them.

2.7. Voice control (optional)

Voice control is off unless you turn it on. Once on, Gota listens only during a guided brew, only while the app is open on screen, and only for a short list of commands such as “done”, “pause”, “resume” and “finish”. An indicator shows whenever the microphone is live, and you can silence it at any moment without leaving the brew.

On iOS, recognition is performed by Apple's Speech framework: on your iPhone whenever it can handle your language offline, and otherwise by Apple's speech recognition servers, under Apple's own privacy policy. Gota does not record your voice, does not keep transcripts, and sends neither to its own servers. The recognized text exists only long enough to be checked against the command list, and is discarded immediately.

On Android, command recognition requires the device’s on-device recognizer and an installed language model. If needed, Gota offers a model download through the system speech service. Gota does not send command audio or transcripts to its servers or enable cloud recognition as a fallback. Spoken guidance uses your configured text-to-speech engine, preferring an installed offline voice; that engine may process guidance text online when no suitable offline voice is available, under its provider’s privacy policy.

2.8. Android launch notice (website)

Until Gota is available on Google Play, our website lets you leave an email address so we can tell you when it launches. We store:

• your email address and the language of the page;
• your choices: whether you want to join the closed beta and whether you also want occasional Gota news (both optional and unticked by default);
• as proof of your consent: the wording you were shown when you signed up, the page you signed up from, the date and time, a one-way hash of your IP address and your browser's identifier (user agent).

We use double opt-in: you only join the list once you click the link in the confirmation email. After that we write to you once, on launch day. If you ticked the beta box, we may invite you to the closed test on Google Play, which means giving your address to Google for that test. Every email includes a link to unsubscribe.

2.9. Community (website)

If you take part in the gota.cafe community, we process:

• Your account: your email address (to send you the sign-in link and the notices you ask for), the display name you choose, the language you use the website in, and the country we infer from your connection, which is only shown next to your name if you turn it on.
• What you post: your questions and answers are public to anyone visiting the website, next to your display name. To check them against the community rules and show them in Gota's six languages, their text is sent to the AI providers in section 5, which do not keep it to train models.
• Photos, videos and links: the photos you upload are kept on our servers without the data inside them (location, phone model, date) and are shown with your post. To check them against the rules, describe them for people who cannot see them and, when they show a bag of coffee, read its label, they are sent to the AI providers in section 5. For the YouTube or Vimeo videos you link we keep their title and a copy of the thumbnail, and for the first link to another website, its title and image. A video's player loads, from YouTube or Vimeo, only when someone presses play; from then on their policies apply.
• Security and abuse: a one-way hash of your IP address with each post and each report, to stop spam and abuse, and the reports you send or receive about content, with the email address you leave so we can reply.
• Session: a technical session cookie while you are signed in, and another one that only says this browser has signed in before, to personalise the page. We use no advertising or tracking cookies.

You can delete your account at any time from your account page and, if you ask, everything you have written too.

3. Purposes and legal basis (Art. 6 GDPR)

• Providing the service and Pro features — performance of a contract (Art. 6(1)(b)).
• Validating subscriptions via RevenueCat — performance of a contract (Art. 6(1)(b)).
• Technical diagnostics and stability (Sentry) — legitimate interest in keeping the app operational and secure (Art. 6(1)(f)).
• Scale diagnostic report — your consent, given when you tap send (Art. 6(1)(a)). The local log and diagnostic mode involve no processing on our part as long as nothing is sent.
• Compliance with legal, accounting and tax obligations — legal obligation (Art. 6(1)(c)).
• Camera, microphone, photo library and voice control — your consent, given separately for each permission and withdrawable at any time (Art. 6(1)(a)).
• Android launch notice, beta invitation and, if you ticked it, Gota news — your consent (Art. 6(1)(a)), which you can withdraw at any time from the link in each email.
• Community: your account, what you post, its translation and the email notices you ask for — performance of the contract you accept when you sign in and post (Art. 6(1)(b)). Moderation, handling reports and preventing spam and abuse — legitimate interest in keeping the community useful and safe, and the obligations of the Digital Services Act (Art. 6(1)(f) and 6(1)(c)).

4. What we do NOT collect

• We don't ask for your name, email or phone number to use the app; we only ask for an email address if you choose to send us a scale diagnostic report (2.3), join the Android launch list on our website (2.8) or take part in the community (2.9).
• We don't track your location.
• We don't use advertising SDKs or share data with advertisers.
• We don't build user profiles for marketing.
• We don't sell your personal data.

5. Processors and third parties

• Google — Android distribution and payments (Google Play), and system backup or speech services when you use Google as their provider. Other device or speech providers apply their own policies. Google privacy policy
• Apple Inc. — distribution and payments (App Store). Policy
• RevenueCat, Inc. — subscription status. Policy
• Functional Software, Inc. (Sentry) — crash reports. Policy
• OpenAI, Anthropic, Google — AI model providers for Pro features and for checking, translating and giving a first answer to community posts. Content is not retained for training.
• Apple Inc. — speech recognition, when your device cannot recognize your language offline. Policy
• Resend — sending our emails: the Android launch notices, the community emails (sign-in links, replies and moderation decisions) and the forwarding of diagnostic reports to our support inbox. Policy
• Google (YouTube) and Vimeo, Inc. — play the videos linked in the community, only when someone presses play. Google privacy · Vimeo policy

6. International transfers

Some of the providers above are established outside the European Economic Area (mainly the United States). Such transfers are covered by the EU Standard Contractual Clauses approved by the European Commission and, where applicable, by the EU–US Data Privacy Framework.

7. Retention periods

• Local data — until you delete the app or clear it manually.
• Crash reports (Sentry) — 90 days.
• Scale diagnostic reports — in our support mailbox, for as long as it takes to resolve the issue and at most 90 days. On your phone, the normal log rolls over by itself; the extended log is deleted after 48 hours or when you turn diagnostic mode off; a file you share manually stays wherever you send it.
• Subscription data (RevenueCat) — for as long as you hold an active subscription or lifetime purchase, plus legally required periods.
• Content submitted to AI features — not retained after processing.
• Voice commands — not recorded and not stored; the recognized text is discarded as soon as it has been matched.
• Live Brew videos — kept on your device, under your control; we never receive them.
• Android launch list — if you never confirm your address, we delete it 30 days after the confirmation email. After the launch email we delete it 30 days later, unless you also asked for Gota news, in which case we keep it until you unsubscribe. If you unsubscribe, we keep your address and the proof of consent blocked for three years, only so we never write to you again and can show the consent you gave; then we delete them.
• Community account — for as long as you keep it. When you delete it we erase your account data; what you posted stays as "Deleted account" unless you ask us to delete it too. What you delete yourself is erased for good after 30 days. Sign-in links expire after 30 minutes and we delete them after 7 days, as we do with anything written by someone who never confirmed their email. Photos you upload but never post, or that go with a post whose email is never confirmed, are deleted the next day; those of a post or an account you delete, at once. A photo taken down by moderation is kept, out of view, for 12 months.
• Posts turned down or removed by moderation, and reports about content — 12 months from the decision, so we can handle complaints and show what was done; then we delete them.

8. Security measures

We apply reasonable technical and organizational measures: encryption in transit (HTTPS/TLS), restricted access, data minimization and periodic dependency audits.

9. Your rights

You can exercise at any time the following rights granted by the GDPR: access, rectification, erasure, objection, restriction of processing, portability, and not to be subject to automated individual decisions. To exercise them, write to hello@utropia.es.

If you believe the processing of your data infringes the law, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority in the EEA.

10. Children

Gota is not directed to children under 14 and we do not knowingly collect data from children under that age. If you are a parent or guardian and believe a minor has provided us with data, contact us so we can delete it. You must be at least 16 to take part in the community.

11. Changes to this policy

We may update this policy to reflect legal or service changes. The current version will always be published on this page with the date of last update.

12. Contact

For any question regarding your data: hello@utropia.es.