MugShot

What stays on your device

MugShot does not have accounts. There is nothing to sign up for and no profile to fill in, so we hold no name, email address or phone number for you.

The things you make in the app, meaning coffee and water amounts, brew settings, saved recipes and preferences, are written to your device and stay there. Apart from the features listed below, they are not uploaded, backed up to us or shared with anyone. Deleting the app deletes them.

Permissions the app asks for

iOS asks before granting each of these, and you can withdraw any of them later in Settings. MugShot keeps working with them denied, minus the feature that needed them.

Camera

Scanning a coffee bag label so the app can read the roast details.

The single photo you confirm is sent to our scanning service.

Location

Finding specialty coffee shops near you on the Discover map.

Approximate coordinates are sent to our discovery service.

Features that send data to us

Three features in MugShot cannot work on the device alone. Each one runs only when you start it, and each sends the minimum it needs to answer.

Bag scanning

Sends the one photo of the bag you confirm, and your taste preferences if you set any.

Discover map

Sends your approximate coordinates, a search radius and the nearby places Apple Maps returned.

Recipe generation

Sends the brew parameters you entered, such as dose, water and method.

These requests reach our own service at api.tahatuna.com. We use what you send to produce the result you asked for and to keep the service running. We do not use it to build a profile of you, and we do not sell it.

Two outside services are involved in answering those requests:

• Apple Maps, to find candidate places near you
• Google Places, which our discovery service queries to fill in photos and ratings

Crash reports and diagnostics

When MugShot crashes or hits an error it could not recover from, it sends a report so the fault can be fixed. A report contains the error itself, the line of code it came from, your device model, your iOS version, the app version and the language your device is set to.

It does not contain your photos, your files, or anything you typed. Reports go to our own GlitchTip instance at errors.tahatuna.com, which we run ourselves. They are not sent to an analytics company, an advertiser or a data broker, because none are involved in this app at any point.

When you contact support from inside the app

If you send a support request through the app, we receive what you wrote, the email address you chose to give us if you gave one, and a short technical summary so the problem can be reproduced. That summary is:

• App version and build number
• Device model and iOS version
• Your device language and region setting
• Whether your subscription is currently active
• The anonymous purchase identifier described below
• Free storage space, which explains most save failures

We use this only to answer you. If you leave the email field empty we have no way to reply, and no way to identify you.

Purchases and subscriptions

Payment is handled entirely by Apple. We never see your card details, your billing address or your Apple Account. Refunds, cancellations, upgrades and downgrades are Apple's to process, and are managed from Settings on your device. We cannot issue a refund, because only Apple can.

We use RevenueCat to check whether a subscription is active. RevenueCat assigns your install a random identifier that is not linked to your name or your Apple Account, and receives your purchase history and basic device details in order to validate the receipt. It has no access to your payment information.

Subscribing also means accepting Apple's terms, which you can read here: App Store User Agreement.

Who else is involved

The complete list, for this app, is below. There are no advertising networks, no analytics products, no social media SDKs and no tracking across other apps or websites.MugShot does not use cookies, because it is not a website.

• Apple, for distribution and payment
• RevenueCat, to confirm whether a subscription is active
• Our own diagnostics and support services, described above
• Apple Maps, to find candidate places near you
• Google Places, which our discovery service queries to fill in photos and ratings

How long anything is kept

Everything the app stores locally stays until you delete it or remove the app. We cannot reach it and cannot delete it for you.

Crash reports are kept for 90 days and then discarded. Support conversations are kept for as long as it takes to resolve them, and are deleted once they are closed unless you asked for something we still owe you. Photos sent for scanning are used to produce the result and are not retained afterwards.

Your rights

Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected, to have it deleted, or to object to how it is used. Write to [email protected] and we will act on it.

In practice there is usually very little to hand over. Without an account, and with no identifier that points back to you, a request most often ends with us confirming that we hold nothing linked to you at all.

Children

MugShot is not directed at children under 13, and we do not knowingly collect anything from them. If you believe a child has sent us something through the support form, write to [email protected] and it will be deleted.

Changes to this policy

If this policy changes, the revised version is posted here and the date at the top of the page changes with it. Material changes to what the app collects will also be described in the App Store release notes for the version that introduces them, so a policy change never arrives silently.

Contact

Questions about this policy, or about MugShot generally, go to [email protected]. It reaches the developer directly.