Privacy Policy

1. Privacy at a Glance

General Information

The following notices provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.

How do we collect your data?

Your data is collected in part by you providing it to us. This may be data that you enter in a contact form, for example.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive free information about the origin, recipient, and purpose of your stored personal data at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time regarding this and other questions on the subject of data protection.

2. Hosting

We host the contents of our website with the following provider:

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the host(s). This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.

External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 (1) lit. f GDPR).

Our host(s) will only process your data to the extent necessary to fulfill their performance obligations and follow our instructions regarding this data.

3. General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission over the Internet (e.g., when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Notice Regarding the Responsible Party

The responsible party for data processing on this website is:

Luca Gerlich
E-Mail: luca.dialedinapp@gmail.com

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Unless a more specific storage period has been mentioned within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will take place after these reasons cease to apply.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent that has already been given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged violation. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of data to another controller, this will only be done to the extent technically feasible.

Access, Deletion, and Correction

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients, and the purpose of data processing, and, if applicable, a right to correction or deletion of this data at any time. You can contact us at any time regarding this and other questions on the subject of personal data.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it for the exercise, defense, or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may — apart from its storage — only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

4. Data Collection on This Website

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website — for this purpose, the server log files must be collected.

Web Analytics (Umami)

This website uses Umami, a privacy-friendly, cookieless web analytics tool. Umami does not use cookies, does not collect personal data, and does not track users across websites. All data is aggregated and anonymous.

The following data is collected:

• Page URL and referrer URL
• Browser type and operating system
• Device type and screen size
• Country of origin (derived from IP address, which is not stored)
• Custom events (e.g., button clicks, form submissions — no personal data)

No personally identifiable information (PII) is collected. No fingerprinting or cross-site tracking takes place. No data is shared with third parties.

Session Recording

Additionally, this website uses Umami's session recording feature to capture anonymized replays of user interactions (mouse movements, clicks, scrolling). This helps us understand how visitors navigate the site and identify usability issues.

Session recordings are collected on a sampled basis (not every visit is recorded). Sensitive content on the page is masked so that no personal data — such as text input, email addresses, or form content — is visible in the recordings.

No personally identifiable information is captured. The recordings contain only anonymized interaction patterns (cursor position, click coordinates, scroll depth). No cookies are used and no cross-site tracking takes place.

The analytics and recording data is processed on servers hosted by Vercel Inc. (USA). No IP addresses are stored.

The use of Umami Analytics and Session Recording is based on Art. 6 (1) lit. f GDPR (legitimate interest). The website operator has a legitimate interest in understanding how the website is used in order to improve its content and usability.

5. Dialed In App — Privacy Notice

Scope

This section applies to the Dialed In mobile application, available as a native app for iOS (Swift) and Android (Kotlin). The app is a coffee companion designed with privacy as a core principle — it does not require an account, does not collect personal data, and does not integrate any third-party analytics or tracking.

iOS: On iOS, data is stored on your device and optionally synced via iCloud (CloudKit private database) to your other devices signed into the same Apple ID. No data is shared with us or any third party.

Android: On Android, the app is 100% offline. It makes zero network calls and no data ever leaves your device.

Data Collected

Dialed In only stores data that you actively enter. No data is collected automatically. The app does not record device identifiers, location, usage behavior, crash reports, or any other information beyond your explicit input.

• Coffee bean details — name, origin, roast level, process, flavor tags, flavor profile scores (acidity, body, etc.), arabica/robusta percentage, ranking, notes, roast and expiry dates, package weight
• Shot and brew logs — grind size, dose in/out, duration, timestamp, pressure, temperature, pre-infusion, RPM, water type, flavor coordinates, rating, notes
• Brew recipes — recipe name, method, steps, coffee and water amounts, temperature
• Equipment info — machine name, pressure, temperature, pre-infusion, tank volume; grinder name, RPM, grind settings
• Maintenance tasks — task name, type, interval, completion dates
• Bean photos — only images you explicitly select from your photo library
• App preferences — theme mode, grind settings, custom flavor attributes, locale

No personal data is collected: no name, email, phone number, location, device identifier, or account information.

Data NOT Collected

• Location, contacts, calendar, health data, microphone, or camera access
• Browsing history, search history, or purchase data
• Device identifiers, IP addresses, or advertising IDs
• Usage telemetry, crash reports, screen tracking, or event logging
• Any automatically collected data of any kind

Data Storage

iOS

On-device: SwiftData (SQLite) for structured data, UserDefaults for settings, and the Documents/BeanImages/ directory for photos.

iCloud: CloudKit private database (iCloud.com.lucagerlich.dialedin). Data syncs only to devices signed into the same Apple ID. You control iCloud sync via iOS Settings > iCloud — the app does not manage this.

No external servers are contacted besides Apple's CloudKit infrastructure.

Android

All data is stored on-device only: DataStore for structured data, the app's files directory for photos.

No cloud sync — no data leaves the device. The app makes zero network calls.

Third-Party Services & Tracking

Dialed In does not integrate any third-party analytics, advertising, or crash reporting services on either platform.

• iOS uses exclusively Apple-native frameworks. No third-party SDKs are included. NSPrivacyTracking is set to false. No IDFA, ATTrackingManager, or SKAdNetwork usage.
• Android uses only standard UI and utility libraries (Jetpack Compose, Material 3, Coil, Vico, Glance, kotlinx.serialization, DataStore) — none of which collect or transmit data.
• No cookies, no web views, no Firebase, no Amplitude, no Mixpanel, no Sentry, no advertising networks.

App Permissions

Permissions are only requested when you initiate the corresponding action. No data is sent to any server for any permission on either platform.

iOS

Android

User Controls

You have full control over your data:

• Delete any individual item (bean, shot, recipe, equipment, maintenance task) from within the app
• Export all data as a JSON file from Settings
• Import from a previously exported JSON file (merge or replace)
• iOS: iCloud sync is controlled entirely via iOS Settings, not the app
• Android: clear all data via Settings > Apps > Dialed In > Storage > Clear Data
• Uninstalling the app removes all local data on both platforms

Sharing Features

Dialed In includes a Visual Shot Sharing feature that generates sticker-style images of your shot statistics. Sharing is performed exclusively through your device's native share sheet (e.g., AirDrop, messaging apps, social media). The app itself does not upload any content to any server. If you choose to share an image to a third-party service (such as Instagram), that service's own privacy policy applies.

Data Retention

Data persists on your device until you delete it or uninstall the app. iCloud data on iOS follows Apple's standard retention policy. There is no server-side data retention — no server exists for Android, and iOS uses only Apple's CloudKit private database.

Monetization

Dialed In is free with no premium tier. There are no in-app purchases, no subscriptions, and no advertisements.

Children's Privacy

Dialed In is not directed at children under 13. The app does not collect personal data from anyone, does not require account creation, and does not include advertising or age verification mechanisms.

App Store Privacy Labels

• Apple App Store: "Data Not Collected" — no data is used to track you, no data is linked to you, and no data is collected.
• Google Play: No user data is collected or shared. All data remains on-device only.

Developer Contact

Luca Gerlich, Bad Homburg, Germany
E-Mail: luca.dialedinapp@gmail.com