Privacy Policy

Immersion is a personal coffee journal. This policy explains what we collect when you use immersion.coffee and your Ledger, which services help us run it, and what you can do about your data.

Information You Give Us

Account

Your email address and password when you sign up with email. Passwords are stored as secure hashes by our authentication provider, and we never see them. If you sign in with Google, we receive the name, email address, and profile picture on your Google account.

Profile and onboarding

Your name, preferred name, age range, and location, plus your onboarding answers. Those answers cover how you drink coffee, your caffeine sensitivity and tolerance, your sleep timing and quality, and your taste preferences. We use them to set your profile level and to shape the forms you see.

Coffee entries

Everything you log in your Ledger: coffee details, sensory notes, ratings, personal notes, brewing setups, café names and addresses, and photos you upload. The narratives generated for your entries are stored with them.

Messages

If you use the contact form, we store your name, email address, subject, and message so we can reply.

Information Collected Automatically

• Sign-in cookies that keep you logged in. We don't use advertising or cross-site tracking cookies.
• Browser storage for unsaved form drafts and tab preferences. These stay on your device and are not sent to us until you save an entry.
• Page analytics through Vercel Web Analytics, which counts page views without cookies and reports them in aggregate (for example, pages visited, referring site, browser, device type, and country).
• Server logs kept by our hosting provider, including IP addresses, to deliver the site and protect it from abuse.

How We Use Your Information

• To run your Ledger: saving entries, showing your immersions, patterns, and tier list.
• To generate taste narratives and note suggestions (see AI Features below).
• To personalize form depth and defaults based on your profile.
• To reply to messages and keep the service secure.

We do not sell your personal information, show you ads, or share your data with advertisers or data brokers.

AI Features

Narratives and note suggestions are written by a large language model hosted by Groq, a third-party AI provider.

• When you save an entry or regenerate its narrative, we send Groq that entry's coffee details, sensory notes, ratings, personal notes, and, for café visits, the café address and drink details.
• When you use Decode, we send the flavor family you picked, the candidate notes, and the description you typed.
• We do not send your name, email address, profile, or onboarding answers to Groq.

Groq processes this data to return the generated text, under its own privacy policy, available at groq.com. If you would rather not have your personal notes sent, leave the personal notes field empty.

Services We Use

• Supabase for authentication, our database, and photo storage.
• Vercel for hosting and page analytics.
• Groq for AI-generated narratives and note suggestions, as described above.
• Google, only if you choose to sign in with Google.
• OpenStreetMap Nominatim for café search. Your browser sends it the text you search for directly, and your coordinates if you ask us to use your location.
• Open Food Facts and USDA FoodData Central for bottled drink lookups. Our servers send them only the barcode number, never anything about you.

Each of these services processes data under its own terms and privacy policy.

Location

We only use your device's location when you tap the button to fill in a café location, and only after your browser asks for your permission. We save the address you keep in the entry. If an address can't be found, we save approximate coordinates instead. We don't track your location in the background.

Photos

Photos you upload are stored with Supabase in a folder tied to your account and shown through unlisted links. Anyone who has a photo's direct link may be able to open it, so avoid uploading anything you consider sensitive.

Keeping and Deleting Your Data

We keep your data for as long as your account exists. You can remove individual entries from your Ledger at any time with Forget.

To delete your account, send a request through our contact page from the email address on your account. We will delete your account, entries, narratives, profile, onboarding answers, and photos within 30 days. Residual copies in backups are removed as those backups expire.

Your Rights

You can ask us to:

• Give you a copy of your data.
• Correct inaccurate information. Most profile details can also be edited in your Profile settings.
• Delete your account and data.
• Stop processing that isn't needed to provide the service.

Send requests through our contact page. Depending on where you live, you may have additional rights under local law, and you can contact your local data protection authority.

Security

Data is encrypted in transit, and access to your entries is restricted to your account through database-level rules. No method of storage or transmission is completely secure, but we work to protect your information and limit who can access it.

Children

Immersion is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

International Processing

Our service providers may store and process data in the United States and other countries where they operate.

Changes to This Policy

When we change this policy, we will update the date at the top of this page. For significant changes, we will also let signed-in users know in the app.

Contact Us

Questions or requests about your privacy can be sent through the contact page on this site.