Privacy Policy

1. Introduction

d4mura Lab. (we, us, or our) operates BeanLog (the Service). This Privacy Policy explains how we collect, use, and protect your personal information.

2. Information We Collect

• Email address (upon account registration)
• Username and profile information
• Authentication identifiers from sign-in providers (Sign in with Apple, Google, Facebook), when used
• User-generated content (reviews, ratings, comments)
• Photos uploaded with reviews
• Location data (for the shop map feature, only with your permission)
• Device token (for push notification delivery)
• Device information (OS, browser type, screen size)
• Cookies and access logs
• Photos captured or uploaded via the package scan feature

3. How We Use Your Information

• Providing, operating, and improving the Service
• User authentication and account management
• AI-powered coffee bean recommendations
• Responding to inquiries
• Usage analytics for service improvement
• Delivering notifications (social notifications such as follows, likes, and comments, reminders, and important notices)

3-2. Public Visibility of Posted Content

Posted content such as reviews, comments, ratings, photos, and profiles (including username and bio) is generally made publicly available due to the nature of the Service. It may also be displayed on publicly accessible websites that do not require login and may be indexed by search engines (appear in search results). It may also be displayed outside the Service in formats such as shared images through sharing features.

Please do not post content you do not want to make public. Even after posted content is deleted, information may temporarily remain in search engine caches and similar systems.

4. Sharing of Information

We do not share your personal information with third parties except in the following cases:

• With your consent
• When required by law
• To protect the life, body, or property of individuals

5. Third-Party Services

We use the following third-party services. Please also review their respective privacy policies.

• Google Cloud / Firebase (authentication, database, file storage, and backend API hosting)
• Vercel (website hosting)

5-2. Use of AI

We use artificial intelligence (AI) to provide recommendation features. Based on your reviews and flavor ratings, we recommend coffee beans that match your preferences. AI processing does not make decisions that significantly affect your rights.

BeanLog is also available as an app within OpenAI's ChatGPT ('Apps in ChatGPT'). This integration allows ChatGPT users to discover coffee beans and roasters through natural conversation. Only publicly available catalog data (bean names, origins, ratings, shop information, and purchase links) is provided through this channel. No personal user data, account information, or review content attributable to individual users is shared.

6. Cookies

We use cookies to improve your experience and for analytics purposes. You can disable cookies through your browser settings, but some features may not work properly.

7. Data Security

We implement appropriate security measures to prevent unauthorized access, loss, or damage to personal information. All data transmissions are encrypted using SSL/TLS.

8. Your Rights

You have the right to request access, correction, or deletion of your personal information. You can manage your information through account settings. You can delete your account at any time from the settings screen within the app. Upon deletion, all personal data associated with your account will be permanently removed.

8-2. Legal Basis for Processing

We process your personal information based on the following legal bases, including the bases under the GDPR/UK GDPR that apply to users in the EEA/UK.

• Performance of a contract: Providing account, posting, notification, subscription, and other Service features
• Consent: Use of location data, receipt of push notifications, and similar features (you may withdraw consent at any time from settings)
• Legitimate interests: Service improvement and analytics, prevention of misuse, and content moderation
• Compliance with legal obligations: Responding as required by laws and regulations

8-3. Data Retention

We retain your personal information while your account is active. When you delete your account, personal data associated with your account is deleted immediately. However, deleted data may remain in automated system backups for up to approximately 7 days after deletion, after which it is fully erased as backup generations rotate. Operational records such as access logs are retained for a certain period (generally around 30 days) for security purposes and then deleted.

Photos captured via the package scan feature are analyzed by AI to extract bean information. Unless you opt out in Settings, these photos may be retained to improve service quality. Turning off “Use scan photos to improve quality” in Settings causes captured photos to be deleted after scan processing.

8-4. International Data Transfers

Your data is stored primarily on servers in Japan (Google Cloud Tokyo region). In providing the Service, data may be transferred to service providers outside Japan as described below. These transfers are made only to the extent necessary to provide the Service, and we implement appropriate safeguards through contracts and other measures with each provider.

• United States: PostHog (usage analytics), OpenAI (content moderation, translation, and recommendation processing)
• Regions including the United States: Vercel (website hosting and delivery)

8-5. Your Rights by Jurisdiction (EEA/UK & California)

Users in the EEA (European Economic Area) and the United Kingdom have rights under the GDPR/UK GDPR to access, correct, delete, restrict processing of, receive portability of, and object to processing of their personal data. You also have the right to lodge a complaint with a supervisory authority in your country of residence.

Users in California have rights under the CCPA/CPRA to know what personal information is collected, to request deletion and correction, and not to be discriminated against for exercising these rights. We do not sell your personal information or share it for cross-context behavioral advertising purposes.

To exercise these rights, please contact us using the contact information in the Contact section. Customers in other jurisdictions may also exercise rights available under the laws of their region.

9. Changes to This Policy

We may update this policy from time to time due to legal or service changes. Significant changes will be notified through the Service.

10. Contact

For questions about this Privacy Policy, please contact us at:

Email: contact@beanlog.coffee