This Privacy Policy explains how your personal data is handled when you use the Gota mobile app, in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

Owner: Jose Antonio Neto Suárez (Utropia)
Address: C/ Manuel Vela 37, 21440 Lepe, Huelva, Spain
Tax ID (NIF): ES29607219D
Email: hello@utropia.es

2. Data we process

2.1. Data stored locally on your device

Gota stores your brew logs, custom recipes, bean library and preferences exclusively on your device. This data is not transmitted to our servers and we have no access to it.

2.2. Crash reports and diagnostics

We use Sentry to receive technical crash reports (exception type, app version, anonymized device model). No direct personal identifiers are included.

2.3. Subscriptions and purchases

Purchases are processed by Apple through the App Store. We use RevenueCat to validate your subscription status via an anonymous identifier generated by the app. We do not receive or store payment data, card details or your Apple ID.

2.4. AI features (Gota Pro)

When you use AI analysis, the images or text you submit are processed on our servers and, where applicable, forwarded to AI model providers (OpenAI, Anthropic or Google) strictly to generate the response. Content is not retained after processing and is not used to train models.

2.5. Device permissions: camera, microphone and photos

Gota asks for each of these only when you first use the feature that needs it, and you can withdraw any of them at any time in iOS Settings.

Camera — to scan coffee bag labels and printed recipes, and to film your brew with Live Brew.
Microphone — to keep the sound of the pour in a Live Brew video and, if you turn on voice control, to hear your brew commands.
Photo library — to read a label or recipe from an image you pick, and to save a finished Live Brew video.

Live Brew videos are recorded on your device and stay there unless you choose to save them to your photo library or share them. We never receive them.

2.6. Voice control (optional)

Voice control is off unless you turn it on. Once on, Gota listens only during a guided brew, only while the app is open on screen, and only for a short list of commands such as “done”, “pause”, “resume” and “finish”. An indicator shows whenever the microphone is live, and you can silence it at any moment without leaving the brew.

Recognition is performed by Apple's Speech framework: on your iPhone whenever it can handle your language offline, and otherwise by Apple's speech recognition servers, under Apple's own privacy policy. Gota does not record your voice, does not keep transcripts, and sends neither to its own servers. The recognized text exists only long enough to be checked against the command list, and is discarded immediately.

3. Purposes and legal basis (Art. 6 GDPR)

Providing the service and Pro features — performance of a contract (Art. 6(1)(b)).
Validating subscriptions via RevenueCat — performance of a contract (Art. 6(1)(b)).
Technical diagnostics and stability (Sentry) — legitimate interest in keeping the app operational and secure (Art. 6(1)(f)).
Compliance with legal, accounting and tax obligations — legal obligation (Art. 6(1)(c)).
Camera, microphone, photo library and voice control — your consent, given separately for each permission and withdrawable at any time (Art. 6(1)(a)).

4. What we do NOT collect

We don't ask for your name, email or phone number to use the app.
We don't track your location.
We don't use advertising SDKs or share data with advertisers.
We don't build user profiles for marketing.
We don't sell your personal data.

5. Processors and third parties

Apple Inc. — distribution and payments (App Store). Policy
RevenueCat, Inc. — subscription status. Policy
Functional Software, Inc. (Sentry) — crash reports. Policy
OpenAI, Anthropic, Google — AI model providers for Pro features. Content is not retained for training.
Apple Inc. — speech recognition, when your device cannot recognize your language offline. Policy

6. International transfers

Some of the providers above are established outside the European Economic Area (mainly the United States). Such transfers are covered by the EU Standard Contractual Clauses approved by the European Commission and, where applicable, by the EU–US Data Privacy Framework.

7. Retention periods

Local data — until you delete the app or clear it manually.
Crash reports (Sentry) — 90 days.
Subscription data (RevenueCat) — for as long as you hold an active subscription or lifetime purchase, plus legally required periods.
Content submitted to AI features — not retained after processing.
Voice commands — not recorded and not stored; the recognized text is discarded as soon as it has been matched.
Live Brew videos — kept on your device, under your control; we never receive them.

8. Security measures

We apply reasonable technical and organizational measures: encryption in transit (HTTPS/TLS), restricted access, data minimization and periodic dependency audits.

9. Your rights

You can exercise at any time the following rights granted by the GDPR: access, rectification, erasure, objection, restriction of processing, portability, and not to be subject to automated individual decisions. To exercise them, write to hello@utropia.es.

If you believe the processing of your data infringes the law, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority in the EEA.

10. Children

Gota is not directed to children under 14 and we do not knowingly collect data from children under that age. If you are a parent or guardian and believe a minor has provided us with data, contact us so we can delete it.

11. Changes to this policy

We may update this policy to reflect legal or service changes. The current version will always be published on this page with the date of last update.

12. Contact

For any question regarding your data: hello@utropia.es.