Privacy policy

Last updated: September 8, 2026

1. About this policy and who is responsible

This Privacy Policy covers Dial-In Coffee, Vellutto’s coffee-brewing application, including its Android and iOS versions, web interface, and online recipe and troubleshooting service (the “App”). Vellutto is the data controller responsible for the personal information described here. You can contact us at info@vellutto.eu, +31 6 31221023, or Vellutto, Torenlaan 5b, 1402 AT Bussum, Netherlands.

This policy applies to the App and its brewing service. It is separate from the privacy policy for purchases, customer accounts, and marketing on the Vellutto shop. No Vellutto account is needed to use the App. This policy explains our practices; using the App is not blanket consent to unrelated processing.

2. Information we process and its sources

• Brewing inputs: When you enter or change brewing settings, the App automatically requests or updates recommendations. To do this, the App sends relevant inputs to our online service. These include brewing method, coffee dose, ratio, temperature, roast level and date, bean characteristics you provide, grinder selection and setting, brewing technique, and pressure-profile settings such as pressure and duration at each stage. Troubleshooting also sends your selected brew problems and answers about the brew.
• Connection and security information: Our hosting provider, Cloudflare, receives your IP address and technical request information when the App connects. Our service uses the IP address to limit excessive requests and protect availability. Cloudflare also processes network and service information to deliver and secure its infrastructure.
• Information saved on your device: The App uses local storage on your device, including browser or embedded-webview storage, for saved recipes, equipment information, preferences, timer state, and saved results. It does not upload your entire saved recipe library or tasting-note history to a Vellutto account. Relevant inputs from a selected recipe are transmitted when an online calculation or troubleshooting request is made.
• Support communications: If you contact us, we process your email address and the information you choose to send so we can respond. Do not include sensitive information that is unnecessary for your request.

3. Information the App does not request

This policy covers the same brewing functions on Android and iOS. It does not offer account creation or login and does not request your name, email address, phone number, postal address, or payment information as part of brewing. Contact information you voluntarily send in a support enquiry is handled separately as described above. It does not access your contacts, calendar, photos, microphone, or precise device location, and it does not contain advertising, payment collection, or a dedicated analytics or crash-reporting SDK. It does not collect contact lists, installed-app inventories, browsing history, or advertising identifiers. Infrastructure providers still process the technical information described in this policy. It does not track health or fitness information. A coffee roast date is information about your coffee, not a calendar event or date of birth.

4. Purposes and legal bases

We use brewing inputs to calculate recipes, adapt recommendations to your chosen equipment and pressure profile, and provide troubleshooting. Core brewing inputs and a network connection are required for online recommendations and troubleshooting. Additional bean details are optional. If you do not provide the necessary inputs or permit a connection, we cannot provide those online functions. We use connection information to operate and secure the service, and support communications to respond to you.

Where the GDPR applies, we rely on performance of the service agreement with you for processing necessary to deliver requested brewing functions, our legitimate interests in protecting service availability and handling general support enquiries, and legal obligations where applicable. We do not use App brewing inputs for advertising or sell them. Recipe recommendations do not make decisions producing legal or similarly significant effects about you.

5. Providers and disclosure of information

Cloudflare hosts the App’s online recipe and troubleshooting service and processes request content on our behalf. Requests use HTTPS encryption in transit. Cloudflare may also process technical network information for its own infrastructure security and operational purposes as explained in its Privacy Policy. Our processor relationship is governed by the applicable Cloudflare Data Processing Addendum.

Apple (for iOS and the App Store), Google (for Android and Google Play), and your device manufacturer, backup provider, or email provider may separately process information when you use their services. This can include information connected with downloads, device backups, or diagnostics you choose to share with the platform. Their handling is governed by their respective privacy notices and your platform settings. An Apple or Google account used to install or back up the App is not a Vellutto App login. The App does not request access to those account credentials. If you visit this policy on our Shopify-hosted website or open the Vellutto shop, Shopify and website services may process page requests and cookies. Those website practices are described in the Vellutto store privacy policy. The App does not send brewing calculation inputs to Shopify.

We may disclose information where necessary to comply with a binding legal obligation, respond to lawful requests, or establish, exercise, or defend legal claims. If the App business is transferred, any transfer of personal information will be subject to applicable safeguards and legally required notice. We do not sell App personal information or disclose App brewing inputs to advertising partners.

6. Local storage, retention, and deletion

Recipe requests: Our recipe server processes brewing inputs in memory to return the requested result. It does not write these inputs to an application database or request-body logs. Selected inputs and results may remain saved locally in the App.

Security metadata: IP-based rate limiting maintains information across requests and is not limited to the lifetime of a single recipe calculation. Cloudflare may retain technical and security information under its applicable service terms and privacy policy. Retention depends on service operation, abuse prevention, incident investigation, and applicable legal requirements; the rate-limit interval is not a promise that all network records are deleted at that interval.

Local data: Local app data remains until you delete it, clear the App’s storage, or your device or browser removes it. To remove local data on Android, use the device’s Settings to find Dial-In Coffee and clear its storage. On iOS, use Settings > General > iPhone Storage > Dial-In Coffee > Delete App to remove the App and its local data; offloading the App retains its documents and data. For the web version, clear site data for the App’s web address. This removes locally saved recipes and settings.

On Android and iOS, app data may be included in operating-system backups or device transfers depending on the platform, app configuration, and your backup settings. This may include Google or manufacturer backups on Android, or iCloud and computer backups on iOS. Manage or delete those copies through your device or backup provider. Clearing local storage or deleting the App does not necessarily delete an existing backup, and restoring a backup may restore saved app data. These platform backups are separate from Vellutto account synchronisation; the App currently has no such account-sync service.

Support: We retain support communications as needed to resolve your enquiry, manage related disputes, and meet legal obligations. Contact us to request access, correction, or deletion of personal information we retain. We cannot remotely access or erase records held only on your device.

7. Security

App requests to our brewing service are encrypted in transit using HTTPS. We limit excessive requests and do not intentionally record recipe request bodies in application logs. Encryption in transit does not prevent our service provider from processing the request to deliver the service. No system is completely secure. Protect access to your device and backups, and avoid sending unnecessary sensitive information in support requests.

8. International transfers

Cloudflare operates internationally, so App information may be processed outside your country, including outside the EEA or UK. Where required, transfers from the EEA or UK rely on an applicable adequacy decision or contractual safeguards, such as the European Commission’s Standard Contractual Clauses and the relevant UK transfer provisions. Cloudflare’s Data Processing Addendum describes the safeguards for transfers it processes on our behalf. Contact us for information about applicable safeguards or how to obtain a copy.

9. Your rights and choices

Depending on applicable law, you may request access to personal information we hold about you, correction of inaccurate information, deletion, restriction of processing, and a portable copy of information where the right to portability applies. You may object to processing based on our legitimate interests. Where we rely on consent, you may withdraw it without affecting the lawfulness of earlier processing. These rights are subject to applicable conditions and exceptions, including information we must retain to meet legal obligations or defend legal claims.

Email info@vellutto.eu with the subject “Dial-In Coffee privacy request” and describe your request. You do not need an App account to contact us. We may request proportionate information to verify your identity or locate relevant records, but do not send passwords or identity documents unless we explain why they are necessary. We will respond within the applicable statutory period, normally one month for GDPR requests, and explain any permitted extension. We do not discriminate against you for exercising your rights.

Because the App has no user accounts and our recipe server does not retain brewing inputs, we may have no server-side recipe history associated with you to retrieve or delete. Clearing the App’s local storage removes locally saved information; backups must be managed separately as described above.

If you are concerned about how we handle your information, contact us. You may also complain to the Dutch Autoriteit Persoonsgegevens or the competent data protection authority where you live, work, or believe an infringement occurred.

10. Children

The App is intended for adult coffee enthusiasts and baristas and is not directed to children. We do not knowingly solicit personal information from children. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action, including deletion where required.

11. Changes to this policy

This policy describes the App features above without login or Vellutto cloud-account synchronisation. We will publish revisions on this page and update the date at the top. Before introducing accounts, cloud synchronisation, payments, or materially different data uses, we will update this policy and provide any notice or choices required by law.

12. Contact

For App privacy questions and requests, email info@vellutto.eu, call +31 6 31221023, or write to Vellutto, Torenlaan 5b, 1402 AT Bussum, Netherlands.