Privacy Policy

LAST UPDATED: JULY 31, 2026

Tamp ("we", "us", "our") is operated by Idea Fabriek, based in Amsterdam, the Netherlands. We respect your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR).

What We Collect

When you create a Tamp account, we collect:

• Email address — to identify your account and send transactional emails (e.g., sign-in links).
• Display name — shown on your profile within the app.
• Authentication provider — whether you signed in via Apple, Google, or email. If you use Apple Sign-In or Google Sign-In, we receive and store a provider user ID and verify your identity token server-side. We do not receive or store your Apple or Google password.

When you use the app, we collect:

• Coffee journal data — beans you log (name, origin, process, roast level, rating, tasting notes) and brew logs (method, grind setting, ratio, water temperature, brew time, notes). This data is created entirely by you.
• Bean photos — images you attach to beans are stored in Cloudflare R2 object storage.

When you use the roaster map feature, your device location is used ephemerally to show nearby roasters. Location data is processed on-device and is never sent to or stored on our servers.

When you photograph a coffee bag to identify it, the photo never leaves your device. It is read on-device and we receive only the text found on the label plus a numeric fingerprint of the image — not the image itself, and not anything that can be turned back into it.

If we cannot identify the bag, or you tell us none of our suggestions match, we keep a record of that so we know which roasters and coffees are missing from the catalogue: the roaster name we read, a website address if the label printed one, your country, and — when you reject our suggestions — the label's text. It carries no account identifier, so it cannot be traced back to you, and lines that look like an email address, a phone number or a long number are discarded before it is stored. We keep it for 180 days.

When you join the Tamp waitlist, we collect:

• Email address — to notify you when Tamp launches and send you waitlist updates.
• Signup date — to track your position on the waitlist.

When you use the contact form, we collect:

• Name and email address — so we can respond to your message.
• Your message — the content of your inquiry.

We also process your IP address temporarily for rate limiting to prevent abuse. This is not stored.

Legal Basis

We process your data under the following legal bases (Article 6(1) GDPR):

• Performance of a contract (Article 6(1)(b)) — for creating and running your account: storing your beans and brew logs, syncing them across your devices, and sending the emails the service depends on, such as sign-in links.
• Consent (Article 6(1)(a)) — for waitlist signup, contact form submissions, and analytics where we ask you first.
• Legitimate interest (Article 6(1)(f)) — for operating, supporting and securing the service (e.g., rate limiting, fraud prevention, infrastructure monitoring, and answering your support requests).

Why We Collect It

We use your data solely to:

• Provide the Tamp coffee journal service — storing your beans, brew logs, and preferences.
• Authenticate your identity and secure your account.
• Sync your data across devices via cloud backup.
• Send transactional emails (sign-in links, account notifications).
• Respond to messages you send through the contact form.
• Notify waitlist subscribers when Tamp is available to download.
• Operate, support and secure the service — including answering your support requests, investigating abuse, and understanding which parts of Tamp people actually use.

We will not send marketing emails, share your data with third parties for their marketing purposes, or use your data for any purpose other than what is stated above.

Who Can See Your Data

Tamp is built and run by two people. To operate the service, we can see your account record — email address, display name, sign-in method, and how many beans and brews you have logged. We use this to answer support requests, investigate abuse, and understand how the app is being used.

We do not read the contents of your journal — your tasting notes, brew details, and bean photos are yours. Access to account records is restricted to us, requires a separate credential, and every access is written to an internal log.

How Long We Keep It

• Account and journal data — kept for as long as your account is active. When you delete your account, all data (beans, brew logs, images) is permanently deleted.
• Bean photos — stored in Cloudflare R2 for as long as the associated bean or account exists. Deleted when you remove the bean or delete your account.
• Waitlist data — kept until 30 days after Tamp's public launch, then permanently deleted.
• Contact form messages — kept for up to 12 months, then deleted.
• Search queries — what people search for in the app is logged without any account identifier, so it cannot be traced back to you. We keep it for 180 days to work out which roasters and coffees are missing from the catalogue, then it is deleted automatically.
• Unidentified bag scans — kept for 180 days, on the same basis and for the same reason as search queries, then deleted automatically. Photographs are never part of this: they are read on your device and never uploaded.
• Internal access log — a record of when we access account records, kept for 24 months so that access stays accountable.

Third Parties

We use the following services to process your data:

• Cloudflare (USA) — hosting, API infrastructure, database (D1), image storage (R2), and caching. Privacy Policy
• Resend (USA) — email delivery for sign-in links and transactional emails. Privacy Policy
• Apple (USA) — identity verification for Apple Sign-In. Privacy Policy
• Google (USA) — identity verification for Google Sign-In. Privacy Policy
• Sentry (Germany / EU) — crash reporting and session replay so we can fix bugs that hit real users. IP addresses are not collected. Privacy Policy
• PostHog (Germany / EU) — product analytics, hosted in Frankfurt. In the EEA, UK, and Switzerland this runs only after you opt in during onboarding. Elsewhere it runs by default and you can turn it off at any time in Settings → Privacy. Captures event names (e.g. "bean_logged") and small property bags (e.g. roaster id) — never tasting notes, brew details, or images. Privacy Policy

EU-hosted services (Sentry, PostHog) keep your data in the EU. Other providers process data under Standard Contractual Clauses (SCCs) or equivalent mechanisms for EU-to-US data transfers.

Data Export

You can export all of your data (beans, brew logs, and account information) in JSON format from the app settings at any time.

Account Deletion

You can delete your account from within the app settings. Account deletion is permanent and irreversible. It removes all of your data, including beans, brew logs, tasting notes, and bean photos stored in Cloudflare R2.

Your Rights

Under GDPR, you have the right to:

• Access — request a copy of the data we hold about you, or use the in-app data export feature.
• Rectification — ask us to correct inaccurate data, or edit it directly in the app.
• Erasure — delete your account and all associated data from the app settings. For the waitlist, you can use the unsubscribe link in any email we send.
• Data portability — export your data in a structured, machine-readable format (JSON) from the app.
• Withdraw consent — at any time, by deleting your account, unsubscribing, or contacting us.
• Lodge a complaint — with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Cookies

This website uses no tracking cookies, analytics scripts, or third-party trackers. We only store your theme preference (light/dark mode) in your browser's local storage, which is not personal data.

Contact

For any privacy-related questions or to exercise your rights, contact us via the contact form on our website.

Data Controller

Idea Fabriek
Amsterdam, the Netherlands