Beanrova

Privacy Policy

Effective 6 November 2026 · Developer: Yukun Sun · Contact: sunyukun9@gmail.com

Beanrova is a coffee brewing guide and journal. There is no advertising, analytics or tracking and no developer-operated server. Everyday brewing needs no app account. Community in version 1.1 and later uses an iCloud identity and a username.

Records, notes and local drafts

Beans, recipes, brews, photos, taste ratings and sensor readings are saved locally. Finished brews and subsequent note edits save automatically. Unpublished Community drafts, including their selected photos and attachments, stay on the device and can be resumed. JSON backups contain record photos; CSV exports contain text and measurements. Files are shared only where you choose. Deleting the app removes its local data; copies already exported or shared remain elsewhere.

Optional iCloud sync

If you enable sync, personal records are mirrored to your private CloudKit database using your Apple account. The developer cannot read that private database. Removing the app does not necessarily remove existing iCloud or exported copies.

Public Community

When you publish a post or comment, its text, cited library items, selected photos, username and CloudKit user identifier are stored in CloudKit's public database and are linked to your Community identity. Other app users can read and save public content. Reports, moderation decisions and optional comment/mention subscriptions also use CloudKit. Moderators can review reported content. You can delete your own posts or remove your Community username, posts and reports in My Community. Copies other people have saved may remain. Blocking hides that user's content on your device.

Camera and selected photos

The camera and system photo picker are used when you choose to scan labels or recipes, add brew photos or share photos. OCR runs on device. Before Community upload, photos are resized and redrawn to remove metadata, including location. Do not publish private information visible in the photo itself. Brew photos remain private unless you explicitly share them, enable private sync, export them or choose to send them for AI analysis.

Optional AI

Apple on-device AI runs locally where supported. Cloud AI is off by default and needs your own provider key, cloud-transfer permission and a notice naming the provider and data categories. Requests go directly to that provider under its terms. Images need separate permission; brew photo analysis also has an explicit include-photos switch, off by default. Requests may contain selected measurements, recipes, bean details, taste notes, recent brew context, pasted text and permitted photos. The full history is not sent by default. Revoke permissions in AI Settings. Brewing works without AI.

Keys and equipment

API keys are held in the device's Keychain and excluded from app backups, exports and logs. Bluetooth connects only to equipment you choose. Local-network connections are used for supported coffee equipment or your own AI server. Device debug logs stay local unless you export them. A pasted recipe URL is downloaded when you request import.

Sharing, retention and contact

The system share sheet sends local image cards, recipes or exports to the destination you select. Community publishing is a separate, public action. Local drafts are retained until replaced, removed or the app is deleted. We do not sell personal data or use it for tracking. Beanrova is not directed at children under 13. For privacy or moderation help, contact sunyukun9@gmail.com. Changes to this policy will be dated here.

隐私政策

生效日期：2026 年 11 月 6 日 · 开发者：孙宇坤（Yukun Sun）· 联系：sunyukun9@gmail.com

Beanrova 是咖啡冲煮引导与记录工具，没有广告、分析统计、跟踪或开发者自建服务器。日常冲煮无需 App 账号；1.1 及后续版本的社区使用 iCloud 身份和你设置的用户名。

记录、笔记与本地草稿

咖啡豆、配方、冲煮记录、照片、口味评分和传感器数据保存在本机。冲煮完成后及后续编辑会自动保存。未发布的社区草稿及其中的照片、附件保存在本机，可继续编辑。JSON 备份包含记录照片，CSV 导出包含文字和测量数据；文件只分享到你选择的位置。删除 App 会删除本地数据，但已导出或分享的副本可能仍然存在。

可选 iCloud 同步

开启后，个人记录使用你的 Apple 账号同步到私有 CloudKit 数据库，开发者无法读取。删除 App 不一定删除 iCloud 或导出文件中的副本。

公开社区

主动发布的帖子和评论，会将正文、引用内容、所选照片、用户名和 CloudKit 用户标识保存在公共数据库，并与社区身份关联。其他用户可以阅读、保存公开内容。举报、管理决定和可选的评论或提及通知订阅也使用 CloudKit；管理员可查看举报内容。你可以删除自己的帖子，也可在“我的社区”移除用户名、帖子和举报；他人已经保存的副本可能保留。屏蔽会在你的设备上隐藏对方内容。

相机与所选照片

仅在你选择扫描标签、配方，添加冲煮照片或分享照片时使用相机和系统照片选择器，文字识别在本机运行。社区上传前会压缩并重绘照片，去除位置等元数据；请自行避免发布照片画面内的隐私信息。冲煮照片默认私有，只有你主动分享、开启私有同步、导出，或选择发送给 AI 分析时，才会离开本机。

可选 AI

支持的设备上，Apple 本机 AI 在设备运行。云端 AI 默认关闭，需要你提供服务商 Key、允许云端传输，并确认列出服务商和数据类别的提示。请求直接发送给服务商，受其条款约束。图片需单独授权；冲煮照片分析另有默认关闭的“附上照片”开关。按所用功能，发送内容可能包括选定的测量数据、配方、豆子、品尝笔记、近期冲煮摘要、粘贴的文字和允许的照片，默认不会发送完整历史。可在 AI 设置撤销授权，冲煮不依赖 AI。

密钥与设备

API Key 仅保存在本机钥匙串，不进入 App 备份、导出或日志。蓝牙只连接你选择的设备；局域网用于支持的咖啡设备或你自己的 AI 服务器。设备调试日志默认保存在本地，仅在你导出时分享。只有请求导入配方网址时，才下载该网页。

分享、保留与联系

系统分享面板将本机图片卡片、配方或导出文件交给你选择的目标；社区发布是单独的公开操作。本地草稿会保留至被替换、移除或删除 App。我们不出售个人数据，不用于跟踪；本 App 不面向 13 岁以下儿童。隐私或管理问题可联系 sunyukun9@gmail.com。政策变化会在此更新日期。