Privacy Policy

Last updated: 15 October 2026

1. Who we are

Kai Ali Kutsalcan ("we," "us") operates the The Selection mobile app (the "App"). This policy explains what data we collect, why, and what your options are. Contact: kai@sunraypm.com.

2. What we collect

Account information — email address, display name, and (if you sign in with a password) a securely hashed password. If you use Sign in with Apple or Google, we receive the identifier and email/name Apple or Google share with us under your permission — we never see your Apple/Google password.

Passkeys — if you register a passkey (biometric/device sign-in), we store a cryptographic public key and device metadata (device name, when last used). We never receive or store your fingerprint, face data, or device PIN — that never leaves your device, per the WebAuthn standard.

Brewing data — the brews you log: bean, method, dose, water, grind setting, temperature, time, your rating, and tasting notes. Also your coffee pantry (beans you own, roast dates, stock levels) and gear (grinders, brewers you've added).

Community content — anything you choose to make public (brew logs marked public, likes, follows). Other users can see your display name, public brew logs, and follower/following relationships.

Subscription/billing status — whether you have an active premium subscription and its expiry, provided to us by Apple/Google's server notification webhooks. We do not receive or store your payment card details — that's handled entirely by Apple/Google.

Usage and crash data — if enabled, we use Sentry for crash and error reporting, which may include device type, OS version, and the app state at the time of a crash.

Predictive/recommendation data — a baseline recipe-suggestion engine (scored against your own brew history only) runs for every user and needs no separate consent, the same way any other core feature doesn't. Separately, and only if you opt in (see below), your brew outcomes and ratings may also be used to train a shared machine-learning model that improves suggestions for you and every other opted-in user. This runs on our own infrastructure — it is not shared with a third-party AI vendor.

Data-sharing consent (opt-in, off by default). The first time you use suggestions, and any time after in Settings, we ask whether you're willing to let your brew data (recipes, ratings, bean details) be used to train that shared model. This is entirely optional — declining or leaving it off does not limit anything else in the App, including the baseline suggestions above. We record only that you said yes or no, and when.

Location consent (opt-in, off by default). Separately, we ask whether we can use your device's approximate location to suggest coffees available in your region. If you say yes, we resolve your location on your own device down to a 2-letter country code (e.g. "DE," "US") — the App never transmits or stores your precise coordinates, and we never request or read your location in the background, only at the exact moment you add a coffee to your pantry or ask for a region-based suggestion. What reaches our server is an anonymous tally: "one more pantry addition of Bean X from country Y." That tally has no user id attached to it at all — we cannot use it to reconstruct anyone's individual location history, including yours.

3. What we don't collect

We do not collect precise GPS location, ever, from anyone, regardless of consent — see "Location consent" above for exactly what a location opt-in actually sends us (a country code, transiently, never stored per- user). We do not access your camera roll or photos except when you explicitly choose to upload one (e.g. for a gear photo or a Daily Rituals post) — those images are stored on our own servers (see Section 9), not with a third-party cloud provider.

4. Why we use your data

• To provide the App's core functionality (tracking your brews, syncing across devices, generating recipe suggestions).
• To operate the Community feed (showing your public posts to other users, likes/follows).
• To process your subscription (via Apple/Google) and unlock premium features.
• To send you account-related email (verification codes, password resets) — we do not send marketing email unless you opt in.
• To diagnose crashes and improve app stability (Sentry, if enabled).
• To detect and prevent abuse (e.g. reported Community content).

We do not sell your personal data.

5. Who we share data with

• Apple / Google — for sign-in, and for subscription billing and webhooks (App Store / Play Store).
• Sentry — crash/error telemetry, if enabled.
• Other users — only what you choose to make public (display name, public brew logs, likes/follows). Your email, password, and private (non-public) brew logs are never shown to other users.
• We do not share data with advertisers or data brokers.

6. Data retention

We keep your account data for as long as your account is active. If you delete your account (available anytime in Settings), we permanently delete your profile, brew logs, pantry, gear, taste profile, grind log history, cupping sessions, prediction history, community activity (likes, follows, comments, reports), and any photos you uploaded for Daily Ritual posts, from our production database and file storage — all removed automatically, immediately, the moment your account is deleted. Backups. We keep daily database backups for up to 30 days, after which they are overwritten. A deleted account may therefore remain in those backups for up to 30 days; backups are used only to recover from a failure and are not used for any other purpose.

Legal retention. Where the law requires it, or where it is needed to establish, exercise or defend legal claims or to prevent abuse, we may keep limited data (for example subscription records or reports about Community content) for as long as that requirement lasts, and no longer.

Short-lived technical data is purged automatically, independent of account deletion: expired login sessions (30 days after expiry), expired passkey sign-in challenges (these are only ever valid for 10 minutes), and prediction-accuracy log entries that were never matched to an actual brew you logged (30 days). None of these are things you'd ever need to access or export — they're infrastructure bookkeeping, not content.

Reported content is retained during and pending review. Community content (recipes, photos) that has been reported by another user is removed from public feeds immediately but is not deletable by its author while it remains reported and unapproved — we retain it so it can be reviewed by our moderation team and, if required, disclosed to law enforcement or other authorities. Once content is approved through that review, it becomes deletable again under the normal rules above.

Suspended accounts. If we suspend ("ban") an account for violating our Terms of Use, that account's data is retained (not deleted) for the duration of the suspension, and all of that account's active sessions are immediately revoked.

The anonymous bean/region tally described in "Location consent" above is not account data — it carries no user id and isn't affected by account deletion, since there is nothing in it to trace back to any one account in the first place.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and data (self-service in Settings, or by contacting us).
• Withdraw the data-sharing or location consents described above at any time, in Settings, with no effect on the rest of the App.
• Export your data in a portable format.
• Object to or restrict certain processing.

Exporting your data is self-service, in-app: Settings → Privacy & My Data → Download My Data. This downloads a JSON file containing your account info (excluding credentials), brew logs, pantry, grind log history, cupping sessions, taste profile, gear, prediction history, and the Community comments you have written. Daily Ritual posts you have shared are not yet included in the download; email us if you would like a copy.

For anything not covered by self-service export or deletion, email kai@sunraypm.com and allow a reasonable time for a response.

8. Children's privacy

The App is not directed at children under 16 and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we'll delete it.

9. International data transfers

Our servers are located in Germany or in Türkiye, depending on which server is active at the time. Türkiye is outside the EU/EEA. Where your data is processed outside the EEA, we apply the safeguards that applicable law requires for such transfers and you can contact us for details. Apple and Google (and Sentry, if enabled) may also process data in other countries, under their own terms and safeguards.

10. Security

We use industry-standard measures to protect your data (encrypted connections, hashed passwords, access controls on our infrastructure). No system is 100% secure, and we can't guarantee absolute security.

Disclaimer on location data. If you opt in to location consent (Section 2), the location data we gather is anonymized: it is resolved to a coarse country code on your own device, is never transmitted or stored as raw coordinates, and is never stored against your account or user id — see "Location consent" in Section 2 for the full mechanism.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified in-app or by email before they take effect.

12. Contact

Kai Ali Kutsalcan, Schlesische Str. 12, Langenlonsheim, Germany kai@sunraypm.com