Privacy

Updated: 3 October 2026

Controller

Khemais Barienti
Wildenbruchstr. 7
30171 Hannover
Germany

For privacy questions and support, contact hello@barienti.com.

Your data in the app

Easpresso saves your entries in the app’s local storage on your iPhone. These include recipes, coffee dose, target and measured weight, brew time, grind setting, taste ratings, and calculated recommendations. Beans, roasters, package dates, basket size, and grinder settings are stored there too.

Recommendations are calculated on your iPhone. You do not need an account. The app has no advertising, analytics services, or tracking and does not send your saved brews or photos to us.

Camera and photos

When you take a photo of a cup or your beans, iOS asks for camera permission. Taking a photo is optional. The app keeps these photos in its own local storage and does not add them to your photo library.

You can change camera permission in iPhone Settings under Privacy & Security → Camera.

Retention and backups

The app does not automatically remove saved brews or photos after a fixed period. Selecting “Delete App” for Easpresso in iPhone Settings removes the local app data. “Offload App” keeps documents and data.

Depending on your iPhone settings, app data may be included in a device backup, such as an iCloud backup. You manage those backups with Apple or on your computer. We cannot access them. Apple explains what iCloud Backup includes.

When you contact support

If you email us, we receive your email address and message, including any attachments you choose to send. Include only the information needed for your question. Your saved app data is not automatically attached to an email.

Messages to hello@barienti.com are forwarded through Cloudflare Email Routing to a Gmail inbox. Cloudflare and Google therefore receive the email data needed for delivery and handling.

We use your message to handle and answer your request. For contract-related questions, the legal basis is Article 6(1)(b) GDPR. For other requests, it is Article 6(1)(f) GDPR. Our legitimate interest is answering questions about our service. Providing your details is voluntary. Without a reply address, we cannot answer you.

We keep support messages for as long as needed to handle the request and necessary follow-up questions. We then delete them unless legal retention duties or the establishment or defence of legal claims require further storage.

When you visit this website

Cloudflare, Inc., USA, hosts this website. Cloudflare processes technical connection and traffic data, including IP addresses and system information, to deliver and protect the website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is a secure and available website. Cloudflare determines retention according to operational purposes and legal requirements, as described in its privacy policy.

Protection against automated requests

Cloudflare adds JavaScript Detections to delivered pages. The browser processes technical signals to identify automated requests. After successful execution, Cloudflare may store the result in the security cookie cf_clearance. Cloudflare states that detection results last 15 minutes and may be renewed on subsequent page views. This does not specify retention for other access data. Cloudflare explains JavaScript Detections.

Technical network error reports

Cloudflare also sends Network Error Logging instructions to supporting browsers. If a connection fails, a browser may send Cloudflare a technical report containing the requested URL, error, and connection information. Cloudflare states that the IP address is held temporarily in memory while processing a report and is not stored in its NEL system. About Cloudflare’s network error reports.

We use no advertising or marketing trackers. These pages load no external fonts and have no contact form. The Cloudflare protection features and network reports described above are separate from the app’s locally stored data.

Providers and international processing

We use Cloudflare for hosting and email forwarding, and Google’s Gmail for the support inbox. Google Ireland Limited is a provider of Google services in the European Economic Area. These providers may also process data outside that area, particularly in the USA.

Cloudflare and Google state that they use the EU-US Data Privacy Framework for US transfers and standard contractual clauses in other cases. Details about safeguards and how to obtain them are available from Cloudflare and Google’s data transfer frameworks. Google’s further processing is described in its privacy policy.

Your rights

Where we process your personal data, you have rights to access, rectification, erasure, restriction of processing, and data portability, subject to legal conditions. You may object to processing based on legitimate interests for reasons relating to your particular situation. You may withdraw consent for future processing.

Contact hello@barienti.com to exercise your rights. You may also complain to a data protection authority, particularly in your place of residence. The controller’s supervisory authority is the State Commissioner for Data Protection of Lower Saxony.