Privacy Policy

1. Data Controller

• Operator: nezuzuapps (independent developer)
• Contact email: nezuzuapps+support@gmail.com
• Country: Japan

The App is operated by an independent developer. We have not appointed an EU representative under GDPR Article 27, as the scale of our data processing falls below the threshold requiring such an appointment. Users in the EU/EEA may contact us directly via the email address above.

2. Information We Collect

2.1 Information processed within the App

The following content, entered by users, is stored on the user's device and (if signed in to iCloud) in the user's own iCloud account:

• Coffee brewing recipes (dripper, dose, water amount, steps, etc.)
• Coffee bean information (origin, farm, processing method, roast level, etc.)
• Tasting scores and notes

The App does not collect your name, email address, location, device identifiers, usage analytics, or advertising IDs.

2.2 Information from email inquiries

When you contact us via email, we receive the following:

• Your email address
• Your name (if voluntarily provided)
• The content of your message

This website does not use any contact forms, analytics tools, or third-party scripts. All inquiries are sent directly from your own email client.

3. Purposes of Use

• To provide the App's features (recipe management, iCloud sync, etc.)
• To respond to inquiries and provide support
• To investigate and fix bugs
• To comply with legal obligations

4. Legal Basis for Processing (GDPR / EU/EEA Users)

For users in the EU/EEA, we process personal data on the following legal bases (GDPR Article 6(1)):

• Performance of a contract (Art. 6(1)(b)): processing necessary to provide the App's functionality.
• Legitimate interests (Art. 6(1)(f)): responding to inquiries, fixing bugs, and ensuring service safety.
• Legal obligation (Art. 6(1)(c)): responding to lawful requests from authorities.

5. Where Data Is Stored

• On-device: Stored locally with SwiftData and protected by iOS file encryption.
• iCloud (Apple CloudKit): If you are signed in to iCloud, data is synced and backed up via your own iCloud account. Apple operates data centers in multiple countries. See the Apple Privacy Policy for details.
• Inquiry emails: Stored on the email service providers' servers used to send and receive messages.

6. International Data Transfers

Personal data of users in the EU/EEA or the UK may be transferred to Japan, the United States, or other countries through iCloud sync or email correspondence with the developer.

• For Apple iCloud / CloudKit transfers, Apple has implemented appropriate safeguards including the EU Standard Contractual Clauses (SCCs).
• Japan has been recognized by the European Commission as providing an adequate level of data protection (Adequacy Decision), so no additional safeguards are required for transfers to Japan.

7. Sharing with Third Parties

We do not sell or share personal data with third parties. We do not provide data to advertising networks, analytics providers, or data brokers.

Apple iCloud / CloudKit serves as infrastructure to store the user's own data in the user's own iCloud account; the developer cannot view that data.

8. Data Retention

• In-App data: Retained until you delete it or uninstall the App.
• iCloud data: Retained until you delete it from the iCloud Storage settings on iOS.
• Inquiry emails: Generally deleted within one year after the inquiry has been resolved, except where retention is required by law.

9. Your Rights

Subject to applicable law, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability — receive your data in a machine-readable format
• Right to object to processing
• Right to withdraw consent at any time, where processing is based on consent

Because the App is designed so that you control your own data, most of these rights can be exercised directly within the App and iOS Settings. For other requests, please contact us via the Contact page. We will respond within 30 days (or within one month, extendable up to three months, where GDPR applies). No fee is charged for exercising your rights, except for manifestly unfounded or excessive requests.

10. Right to Lodge a Complaint (EU/EEA Users)

If you are located in the EU/EEA and have concerns about how we handle your personal data, you have the right to lodge a complaint with the Data Protection Authority (DPA) in your country. A list of DPAs is available on the European Data Protection Board members page.

11. California Residents (CCPA / CPRA)

California residents have the following rights under the CCPA / CPRA:

• The right to know what personal information is collected and how it is used
• The right to request deletion of personal information
• The right to request correction of inaccurate personal information
• The right to opt out of the sale or sharing of personal information
• The right to non-discrimination for exercising these rights

Do Not Sell or Share My Personal Information: We do not sell or share your personal information. We do not share data for cross-context behavioral advertising.

Under the CCPA, the categories of personal information we collect are limited to "identifiers (email)" and "commercial information (inquiry content)". We have not sold or shared this information in the preceding 12 months.

12. Japan (APPI)

• Personal Information Handler: nezuzuapps (independent developer)
• Complaints: Use the contact information at the end of this policy.
• Disclosure / correction / deletion requests: Submit requests by email to the address below. We will respond within a reasonable period after verifying your identity.
• Authorized Personal Information Protection Organization: We are not a member of any such organization.

13. Security Measures

We protect user data using the iOS security features (App Sandbox, file encryption) and Apple iCloud security features (encryption in transit and at rest). The developer has no means of accessing your in-App data directly.

This website is served over HTTPS via GitHub Pages.

14. Advertising, Analytics & Tracking

• The App does not display advertisements.
• We do not use third-party analytics tools such as Google Analytics, Firebase Analytics, or Crashlytics.
• We do not perform cross-app tracking subject to Apple's App Tracking Transparency (ATT) framework.
• This website uses no cookies, tracking technologies, or third-party scripts.

15. Children's Privacy

The App is not intended for children under the age of 13 (or up to 16 in certain EU/EEA Member States). We do not knowingly collect personal information from individuals in this age group. If we receive such information by mistake, we will promptly delete it after verification.

16. Cookies

This website does not use cookies or any similar tracking technologies (local storage, web beacons, fingerprinting, etc.).

17. Changes to this Policy

We may update this Privacy Policy in response to changes in laws, App functionality, or our operations. When we make material changes, we will update the "Last Updated" date at the top of this page and notify users in the App's release notes.

18. Contact Us

If you have questions about this Privacy Policy, would like to exercise your rights, or have any feedback, please contact us:

• Email: nezuzuapps+support@gmail.com
• Contact page: contact.html