This Privacy Policy explains how your personal data is handled when you use the Gota mobile app, in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

Owner: Jose Antonio Neto Suárez (Utropia)
Address: C/ Manuel Vela 37, 21440 Lepe, Huelva, Spain
Tax ID (NIF): ES29607219D
Email: hello@utropia.es

2. Data we process

2.1. Data stored locally on your device

Gota stores your brew logs, custom recipes, bean library and preferences exclusively on your device. This data is not transmitted to our servers and we have no access to it, except for what you choose to send us yourself (see 2.3).

2.2. Crash reports and diagnostics

We use Sentry to receive technical crash reports (exception type, app version, anonymized device model). No direct personal identifiers are included.

2.3. Bluetooth scale diagnostics

Gota connects to Bluetooth coffee scales (Acaia). To help you when yours is misbehaving, the scales screen has a diagnostics section with three levels:

Local log (always on). The app keeps a technical log of the connection to your scale on your phone: roughly the last 30 minutes in memory, and the last brew made with a scale in a file. It never leaves your phone on its own.
Diagnostic mode (optional, off by default). If you turn it on, that log is kept on your phone in more detail and for longer: it survives the app being closed, for up to 48 hours and up to a size limit. It switches itself off after 48 hours, and whenever it is switched off (by itself or by you) the extended log is deleted.
Sending a report (only if you decide to). You pick what is going wrong (the scale doesn't show up, won't connect, disconnects, fails when switching scales, the weight is wrong, or something else), can add a note, enter your email address (required, so we can reply) and tap send. Before sending, you can see what will be sent. The report travels encrypted (HTTPS) to our server, which does not store it: it forwards it as an attachment to our support mailbox (hello@utropia.es) and returns a reference code to you. If sending fails, you can share the file yourself from the iOS share sheet; in that case you are the one sending it, through whichever channel you choose.

As long as you send nothing, the local log and diagnostic mode involve no data processing on our part: everything stays on your phone.

The report contains:

technical Bluetooth connection events: scanning, pairing, connection, disconnection, retries, errors, and the state of Bluetooth and its permission;
the raw data your scale sends and the weights it measures;
from the brew in progress: phases, timings, water targets and flow rate (numbers only, no recipe text);
the Bluetooth identifier iOS assigns to the scale on your phone, the scale model, and which scales you have paired (model, not name);
app version, iOS version and language;
what you type: category, note and email address.

Our server also sees the IP address the report is sent from and includes it in the support email.

The report does not contain recipe names or their text, tasting notes, your bean library, your brew history, your location, your device name, the name your scale broadcasts, photos or audio.

2.4. Subscriptions and purchases

Purchases are processed by Apple through the App Store. We use RevenueCat to validate your subscription status via an anonymous identifier generated by the app. We do not receive or store payment data, card details or your Apple ID.

2.5. AI features (Gota Pro)

When you use AI analysis, the images or text you submit are processed on our servers and, where applicable, forwarded to AI model providers (OpenAI, Anthropic or Google) strictly to generate the response. Content is not retained after processing and is not used to train models.

2.6. Device permissions: camera, microphone and photos

Gota asks for each of these only when you first use the feature that needs it, and you can withdraw any of them at any time in iOS Settings.

Camera — to scan coffee bag labels and printed recipes, and to film your brew with Live Brew.
Microphone — to keep the sound of the pour in a Live Brew video and, if you turn on voice control, to hear your brew commands.
Photo library — to read a label or recipe from an image you pick, and to save a finished Live Brew video.

Live Brew videos are recorded on your device and stay there unless you choose to save them to your photo library or share them. We never receive them.

2.7. Voice control (optional)

Voice control is off unless you turn it on. Once on, Gota listens only during a guided brew, only while the app is open on screen, and only for a short list of commands such as “done”, “pause”, “resume” and “finish”. An indicator shows whenever the microphone is live, and you can silence it at any moment without leaving the brew.

Recognition is performed by Apple's Speech framework: on your iPhone whenever it can handle your language offline, and otherwise by Apple's speech recognition servers, under Apple's own privacy policy. Gota does not record your voice, does not keep transcripts, and sends neither to its own servers. The recognized text exists only long enough to be checked against the command list, and is discarded immediately.

3. Purposes and legal basis (Art. 6 GDPR)

Providing the service and Pro features — performance of a contract (Art. 6(1)(b)).
Validating subscriptions via RevenueCat — performance of a contract (Art. 6(1)(b)).
Technical diagnostics and stability (Sentry) — legitimate interest in keeping the app operational and secure (Art. 6(1)(f)).
Scale diagnostic report — your consent, given when you tap send (Art. 6(1)(a)). The local log and diagnostic mode involve no processing on our part as long as nothing is sent.
Compliance with legal, accounting and tax obligations — legal obligation (Art. 6(1)(c)).
Camera, microphone, photo library and voice control — your consent, given separately for each permission and withdrawable at any time (Art. 6(1)(a)).

4. What we do NOT collect

We don't ask for your name, email or phone number to use the app; we only ask for an email address if you choose to send us a scale diagnostic report (2.3).
We don't track your location.
We don't use advertising SDKs or share data with advertisers.
We don't build user profiles for marketing.
We don't sell your personal data.

5. Processors and third parties

Apple Inc. — distribution and payments (App Store). Policy
RevenueCat, Inc. — subscription status. Policy
Functional Software, Inc. (Sentry) — crash reports. Policy
OpenAI, Anthropic, Google — AI model providers for Pro features. Content is not retained for training.
Apple Inc. — speech recognition, when your device cannot recognize your language offline. Policy

6. International transfers

Some of the providers above are established outside the European Economic Area (mainly the United States). Such transfers are covered by the EU Standard Contractual Clauses approved by the European Commission and, where applicable, by the EU–US Data Privacy Framework.

7. Retention periods

Local data — until you delete the app or clear it manually.
Crash reports (Sentry) — 90 days.
Scale diagnostic reports — in our support mailbox, for as long as it takes to resolve the issue and at most 90 days. On your phone, the normal log rolls over by itself; the extended log is deleted after 48 hours or when you turn diagnostic mode off; a file you share manually stays wherever you send it.
Subscription data (RevenueCat) — for as long as you hold an active subscription or lifetime purchase, plus legally required periods.
Content submitted to AI features — not retained after processing.
Voice commands — not recorded and not stored; the recognized text is discarded as soon as it has been matched.
Live Brew videos — kept on your device, under your control; we never receive them.

8. Security measures

We apply reasonable technical and organizational measures: encryption in transit (HTTPS/TLS), restricted access, data minimization and periodic dependency audits.

9. Your rights

You can exercise at any time the following rights granted by the GDPR: access, rectification, erasure, objection, restriction of processing, portability, and not to be subject to automated individual decisions. To exercise them, write to hello@utropia.es.

If you believe the processing of your data infringes the law, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority in the EEA.

10. Children

Gota is not directed to children under 14 and we do not knowingly collect data from children under that age. If you are a parent or guardian and believe a minor has provided us with data, contact us so we can delete it.

11. Changes to this policy

We may update this policy to reflect legal or service changes. The current version will always be published on this page with the date of last update.

12. Contact

For any question regarding your data: hello@utropia.es.