Privacy Policy for Dialist

1. Information We Collect

We collect information to provide, maintain, and improve our Services.

1.1 Personal Information

The only personal information we collect is the information that you voluntarily provide.

• Account Data: If you create an account with email or log in through a third-party application (Apple or Google), we receive basic profile information from that flow (such as your email address and name). Authentication is handled by our identity provider (see Section 3.3).
• Coffee Preferences: We collect information regarding your coffee preferences and equipment, which you voluntarily provide when creating your profile to use our Services.
• AI Chat & Input Data: Text, feedback, and parameters you enter into the app to generate or adjust recipes. This content is stored on our servers and may be sent to third-party AI providers (Section 3.2) to generate responses.
• Images and Media: If you choose to set a profile avatar, attach photos to your brewing sessions (e.g., photos of coffee bags), or send images in the AI chat, we collect and store these images. Selected images may also be sent to third-party AI providers for label scanning, attachment analysis, or chat features. To enable this, the App will request permission to access your device's camera or photo library. We only access images that you explicitly select or capture within the App.
• Voice & Speech: If you use voice dictation in chat, the App requests microphone and speech-recognition permission. Speech is converted to text by the operating system’s speech services (Apple on iOS, Google on Android, depending on your device). We receive the transcribed text you send in chat—not a permanent audio recording stored by Dialist.
• Push Notifications: If you opt-in to receive push notifications, we collect your device's push notification token to send you alerts, such as barista replies when you are away from the chat, trial reminders, or app updates. You can manage or disable these notifications at any time through your device's operating system settings.
• Location Data: If you grant the App permission to access your location, the App may use your precise or approximate coordinates on the device to request weather and elevation from a third-party weather service (Open-Meteo; see Section 3.3). We use that derived weather context (for example temperature and brew-site elevation) for features such as weather-aware drink suggestions and boiling-point adjustments. You can revoke location permission at any time in your device settings.

1.2 Non-Personal Information

We may collect non-personal information about users whenever they interact with our apps. Non-personal information may include the device name, the type of device, operating system, and technical information about a user’s means of connection.

2. How We Use Collected Information

We may collect and use a user’s information for the following purposes:

• To personalize user experience: We use information to understand how our users as a group use the services.
• To improve our applications: We use feedback you provide to improve our products and services.
• To provide AI functionalities: To generate personalized coffee recipes and dial-in adjustments using artificial intelligence.

3. Sharing Your Information & Third-Party Services

We do not sell, trade, or rent users’ personal information to others. We share information with service providers only as needed to run the Services, as described below.

3.1 Operations, Push Delivery & Distribution

We operate server-side monitoring (including Grafana and related metrics/logs on infrastructure we control) to keep the Services reliable. Those systems may process technical identifiers such as user or session identifiers when diagnosing failures. They are not advertising SDKs.

Push notifications are delivered through Expo’s push service and, underneath it, Apple Push Notification service (APNs) on iOS and Firebase Cloud Messaging (FCM) on Android. That involves your device push token and the notification content we send.

Apple TestFlight and Firebase App Distribution may be used for internal or beta builds. They are distribution channels, not product analytics products inside the App.

3.2 Third-Party AI Providers

Dialist may use language and vision models from the providers listed below to power recipe generation, image analysis (for example coffee-bag photos), web research helpers, and barista chat. When you send text or images to the AI barista or related features, that content may leave our servers and be processed by one or more of these providers via API. Which providers are active can change as we add or swap models; a subset may be used at any time.

Some providers process data outside Georgia and the EEA (including in the United States and the People’s Republic of China). Please do not put sensitive personal information (such as your real name, address, or financial details) into recipe generation or chat fields.

3.3 Infrastructure & Service Providers

We also use the following providers to host accounts, deliver the product, and support related features:

• Supabase: Account authentication (email, Apple, and Google sign-in), session tokens, and related auth email (for example one-time codes and password reset).
• Dialist hosting: Our application API, database, and (depending on configuration) media files for avatars, bean photos, and chat attachments run on infrastructure we operate.
• Cloudflare R2: Optional object storage for user media (avatars, bean photos, chat attachments) when enabled in production.
• Vercel: Hosts our marketing website (including this Privacy Policy) and may collect website analytics via Vercel Analytics.
• Expo, Apple (APNs), and Google (FCM): Push notification delivery, as described in Section 3.1.
• Open-Meteo: Weather and elevation lookups from device coordinates when you grant location permission, as described in Section 1.1.
• Apple and Google: Platform sign-in, speech recognition (when you use voice dictation), and store distribution where applicable.

4. GDPR Compliance (For EEA and UK Residents)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, your personal data is processed under the lawful bases of contract performance, your consent, and our legitimate interests in improving the Services. Under the GDPR, you have the following rights:

• Right of Access: You can request a copy of your personal data.
• Right to Rectification: You can request that we correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request the deletion of your personal data.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.

International transfers: Some providers listed in Section 3 process data in countries outside the EEA and the United Kingdom (including the United States and the People’s Republic of China). When we transfer personal data internationally, we rely on appropriate safeguards available under applicable law (such as the provider’s terms, standard contractual clauses where offered, or other lawful transfer mechanisms) and on the necessity of the transfer to provide the Services you request.

To exercise any of these rights, please contact us at support@dialist.coffee. We will respond to your request within 30 days.

5. CCPA Compliance (For California Residents)

Under the California Consumer Privacy Act (CCPA), California residents have specific rights regarding their personal information:

• Right to Know: You have the right to request details about the categories and specific pieces of personal data we have collected about you over the past 12 months.
• Right to Delete: You have the right to request the deletion of your personal data.
• Right to Non-Discrimination: You will not receive discriminatory treatment from us for exercising your CCPA rights.
• Do Not Sell My Personal Information: We do not sell your personal data to third parties, nor have we sold it in the past 12 months. Therefore, we do not provide a dedicated "opt-out" mechanism for data sales.
• Sharing for business purposes: We may share personal information with the service providers in Section 3 (including AI providers) as needed to operate the Services. That sharing is for a business purpose, not a sale.

6. Children’s Privacy

The Services are not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at support@dialist.coffee and we will delete it.

7. Data Retention and Account Deletion

We adopt appropriate data collection, storage, and processing practices to protect against unauthorized access, alteration, disclosure, or destruction of your personal information. We retain your data only for as long as your account is active or as needed to provide the Services.

Requesting Account Deletion:

You have the right to completely delete your account and all associated data. You can initiate this process in two ways:

• In-App Deletion: Navigate to the Settings menu within the Dialist app and tap "Delete Account". This action is immediate and irreversible.
• Email Request: Contact us at support@dialist.coffee from the email address associated with your account.

Upon account deletion, your saved recipes, equipment profiles, chat history, and personal data are erased from our active servers and authentication provider. Uploaded media files are removed from our storage as part of that process. Third-party AI providers may retain data according to their own policies for a limited period; we cannot control their independent retention after a request has already been processed by them.

8. Changes to this Privacy Policy

We have the discretion to update this privacy policy at any time. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.

9. Contacting Us

If you have any questions about this Privacy Policy, please contact the Data Controller:

Lado Asatiani street N 66, letter A

Tbilisi, Tbilisi City 0108

Georgia

Email: support@dialist.coffee