What we collect

Pucksmith has no sign-up and no user account. We do not collect your name, email address, contacts, or any of the content you record in the app. Your coffee bags, shots, ratings, tasting notes, equipment and bag photos are written to a database file on your own device and stay there unless you choose to export or back them up yourself.

We run no advertising, no usage-analytics or tracking SDK, and no tracking pixels. The only technical data that leaves the app is the diagnostics described below, which you can turn off, and, on Android, Google ML Kit’s technical information described under Reading a label. We do not sell or rent data to anyone.

Reading a label (on-device)

When you photograph a coffee bag, the text is recognised entirely on your device: Apple Vision on iPhone, iPad and Mac, and Google ML Kit on Android. The photograph is not uploaded, and the recognised text is not sent anywhere. The picture is stored locally and belongs to the bag you attached it to.

On Android, Google ML Kit also reads the barcode when you scan one. It sends Google technical information about how the label and barcode readers perform (such as the app’s name and version, an installation identifier and timings), never the photo, the camera picture or what it reads, as described in Google’s ML Kit terms.

Scanning a barcode (one third-party lookup)

Apart from Google ML Kit’s technical information on Android (above), this is the only feature that sends anything off your device, and only when you use it. If you scan or type a barcode, Pucksmith asks the Open Food Facts open database whether it knows that product. What is sent is the barcode number and an identifying header naming the app, its version and our support address. Nothing about you, your device or the rest of your log is sent.

Open Food Facts is an independent, non-profit open database with its own privacy policy. If it has never seen the bag, nothing happens and the form simply opens empty. Product data returned by that lookup is made available under the Open Database Licence, and bags created this way are marked in the app as having come from it.

Diagnostics (on by default, and you can turn them off)

To find and fix crashes and slowdowns, the app sends anonymous diagnostics. This is on by default; you can turn it off at any time from the app's Diagnostics screen, and turning it off stops new reports.

What is sent: the app and its version, your platform (e.g. iOS / macOS / Android) and OS version, the device model, and the error type, message and stack trace when something goes wrong. Since September 2026 the app also sends a small sample of app-start and screen timings, anonymous session health (whether a session ended in a crash), technical logs and counters written by the app itself, the on-screen widget layout at the moment of an error, and on Apple devices a small sample of performance profiles. Screenshots and session replay are off. Reports never include the content you log on purpose: no bag names, notes, photographs or shot data.

Reports go to two recipients, both controlled by that single toggle:

• A Cloudflare Worker operated by Trueframe Digital receives the crash report only, with no device or user identifier; your IP address is discarded at ingestion and never stored.
• Sentry (Functional Software, Inc.), running in the EU / Frankfurt region, receives everything listed above, for crash and performance diagnostics. Sentry may attach a random installation ID, used to count how many installs a problem affects. It is made fresh for each installation and is not linked to you or your account.

When diagnostics are off, neither recipient receives new reports. If you turn them off while the app is open, Sentry may still receive short notes that a session started or ended, until the app is fully closed and opened again. A crash or freeze in that same session may also still be reported.

Backups and exports (you choose, every time)

Backup and export are free and entirely under your control. Nothing is backed up automatically and nothing is uploaded in the background.

• iCloud Drive on Apple devices: the file goes to your iCloud account, under your Apple ID. We have no access to it.
• A file you choose on any platform: saved wherever you point it, including a folder, another drive or a service you already use.
• CSV and JSON exports of your own records, any time.

Once a backup leaves the app it is covered by whatever service or storage you sent it to, not by this policy.

Purchases

Pucksmith Pro is a one-time purchase handled entirely by the App Store, Mac App Store, Google Play or the Microsoft Store, depending on where you bought it. Those stores process the payment; we never see your card details, billing address or store account. On iOS, iPadOS, macOS and Android, purchase status is managed through RevenueCat, which records your purchase against an anonymous identifier (no name, no email) so the app can restore it across your devices. Details are in the RevenueCat privacy policy. On Windows the purchase is handled by the Microsoft Store alone, and the app records only whether it is unlocked.

Camera and photo access

The camera is used only when you point it at a bag to read a label or scan a barcode. Photo-library access is used only when you pick an existing picture. The app never opens the camera on its own, and declining either permission leaves everything else working: you can always type a bag in by hand.

Data sharing

We do not share what you log. The only outbound connections the app makes are the optional barcode lookup, optional crash reports, store/RevenueCat purchase processing, a backup you explicitly ask for, and, on Android, Google ML Kit’s technical information.

Who else handles this data, and for how long

Sentry and RevenueCat work for us as service providers. Their terms let them use this data to run and improve their service for us, and require them to keep it secure, so it has the same protection this policy describes. Sentry may also use parts of it that cannot identify anyone for its own business, such as statistics and new products. Trueframe’s crash-reporting service runs on Cloudflare, which stores its reports for us. When a fatal crash arrives, the service also posts a short alert to our developer’s Discord channel: the app and its version, the platform and operating-system version, the kind of error and its first line.

Sentry keeps timings, logs, counters and profiles for 30 days and everything else, such as errors and crash layouts, for 90 days, then deletes them; its backups are deleted 90 days after they are made. Reports in Trueframe’s own crash service, and its Discord alerts, carry no identifier and stay until we delete them. RevenueCat keeps your purchase record while we use its service.

Your control & deletion

Everything you log is on your device, so you are in control of it. Delete a bag, a shot or a photo in the app and it is gone. Uninstalling Pucksmith removes its database from your device. If you made backups or exports, delete those copies wherever you put them.

Off your device, two kinds of record are kept for us. Diagnostic reports are kept by Sentry and by Trueframe’s crash-reporting service, and fatal-crash alerts in our developer’s Discord channel. None of them carries an account identifier, so we may not be able to tell which ones are yours. If you bought Pucksmith Pro on iOS, iPadOS, macOS or Android, RevenueCat keeps your purchase record. To ask about these records or to request their deletion, email [email protected]. The store you bought from keeps its own record of your purchase, under its own privacy policy.

Children

Pucksmith is a tool for brewing coffee and is not directed at children, and we do not knowingly collect anything from anyone.

Changes

If this policy changes, we will update this page and the “last updated” date above.

Contact

Questions about this policy? Email [email protected].