Privacy Policy
Effective: May 2026
This is a small app. The privacy of the cup matters as much as the reading itself. The shorter version of this page: we collect what we need to give you a reading and remember it later, plus a device identifier if you allow it.
What we collect
When you sign in with Apple, Google, or your email, we receive your email address from that provider. That email becomes your account identifier and is the only personally-identifiable thing we store about you.
When you take a reading, you upload three photos of your cup. We send those photos to Anthropic's Claude API, which generates the reading text. The photos themselves are not retained after the reading is generated. Only the resulting reading text is stored, alongside your account.
With your permission, we also collect your device's Identifier for Advertisers (IDFA). This identifier is collected and stored so that we may use it in the future for analytics, advertising, or measurement purposes. You will be asked to grant or deny this permission through Apple's App Tracking Transparency prompt when you first open the app. You can change this choice at any time in your device's Settings under Privacy & Security > Tracking.
How we store it
Your readings are stored in a Supabase Postgres database. Row-level security ensures one user can never see another user's readings. Data at rest is encrypted by Supabase. Connections are HTTPS-only.
Third parties
The app uses three third-party services:
- Apple, Google, Email magic link for sign-in. We receive only your email and a stable user identifier.
- Anthropic Claude API to generate readings from your photos. Claude does not retain the photos after responding.
- Supabase to store your account and readings.
We do not currently use advertising networks or analytics platforms. There are no cookies on this site. If we integrate advertising or analytics services in the future, we will update this policy and, where required, request additional consent.
Device identifiers & tracking
When you first open Anush, Apple's App Tracking Transparency prompt will ask whether you allow the app to track your activity. If you grant permission, we collect and store your device's Identifier for Advertisers (IDFA). This identifier is not currently shared with any third party. If we begin using it for analytics, advertising, or measurement in the future, we will update this policy before doing so. If you deny the prompt, no device identifier is collected and the app functions identically.
AI processing & consent
When you take a reading, the app asks for your explicit permission before sending your cup photos to Anthropic's Claude API. No photos leave your device until you consent. This consent is requested each time you initiate a reading. You may decline at any point, though a reading cannot be generated without it.
Data retention
Your readings are kept for as long as your account exists. If you delete your account, all associated readings and your email address are permanently removed from our database within 30 days. Photos of your cup are not retained at all — they are sent to the Claude API in memory only and discarded once the reading text is returned.
Your rights
You can sign out from the Settings tab in the app at any time. You can delete your account directly from the Settings tab, or by emailing hello@anushcoffee.com. In either case, all your data is deleted within 30 days.
California residents (CCPA)
If you are a California resident, you have the right to know what personal information we collect and how we use it, the right to request deletion of your data, and the right to not be discriminated against for exercising these rights. We do not currently sell personal information or share it for cross-context behavioral advertising. If this changes in the future, we will update this policy and provide an opt-out mechanism as required by law. To exercise any of these rights, email hello@anushcoffee.com.
European residents (GDPR)
If you reside in the European Economic Area, our legal basis for processing your email address is the performance of a contract — providing you the service you signed up for. Our legal basis for processing your cup photos is your explicit consent, given each time you initiate a reading. Our legal basis for collecting your device identifier (IDFA) is your explicit consent, given through Apple's App Tracking Transparency prompt. You have the right to access, correct, or delete your personal data, to restrict or object to processing, and to data portability. To exercise any of these rights, email hello@anushcoffee.com.
Data controller
Anush is developed and operated by Vardan Kirakosyan, based in the State of California, USA. For all privacy-related inquiries, contact hello@anushcoffee.com.
Children
Anush is not designed for children. We do not knowingly collect data from anyone under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.
Changes
If we ever change this policy meaningfully, we will note the change at the top of this page with a new effective date. The older versions will remain accessible.
Contact
Email: hello@anushcoffee.com