Privacy Policy

Last updated: June 26, 2026

1. Who We Are

First Crack App LLC ("First Crack," "we," "us," or "our") operates the First Crack web platform and Bridge, our native desktop app for macOS and Windows that connects roaster hardware to the platform. This Privacy Policy explains how we collect, use, and protect your personal information.

2. Data We Collect

We collect the following data when you use First Crack:

  • Account information: Email address and display name, provided during sign-up via magic link or Apple Sign-In.
  • Profile information: Username, display name, avatar, and temperature unit preference.
  • User-entered coffee data: Roast profiles, bean information, recipes, cupping logs, dispositions, and inventory data that you create within the app.
  • Beta waitlist information: If you request Bridge beta access, we collect the email address and roaster brand/model you submit on the beta form, before and independent of any account.
  • Usage analytics: Aggregate, privacy-friendly page and visit metrics gathered through a cookieless analytics provider, plus share link view counts. These are not tied to advertising profiles and we do not sell them.
  • Diagnostic and error data:When the app encounters an error, we capture crash and error reports through our error-monitoring provider. This can include a session replay of the interactions leading up to an error, and, if you are running Bridge, a short trace of your roaster's communication attached to the report. We use this only to diagnose and fix problems.

3. How We Use Your Data

  • To provide and maintain the First Crack service
  • To authenticate your identity and manage your account
  • To sync your data between the web platform and Bridge
  • To enable public sharing of roast profiles when you choose to share
  • To send transactional and beta-related email (for example, magic-link sign-in and Bridge beta confirmations)
  • To diagnose errors and improve reliability
  • To improve First Crack and develop new features — using only de-identified and/or aggregated data, as described below

Product improvement with de-identified and aggregated data. We may use the data you create in First Crack — such as roast profiles, roast curves, bean information, recipes, and how features are used — to understand how the product performs, to improve it, and to develop new features. We do this only with data that has been de-identified and/or aggregated:

  • De-identifiedmeans we have removed or severed the link between the data and your account (including your email), so that the data can no longer reasonably be used to identify, relate to, describe, or be linked — directly or indirectly — back to you.
  • Aggregated means the data is combined across many users into summary form that does not describe or relate to any single person.

When we use data this way we commit to maintaining it in de-identified and/or aggregated form, and we will not attempt to re-identify it — except solely to verify that our de-identification process works. We do not sell this data, and using it for product improvement is never a "sale" or "sharing" of your personal information.

This use applies to data collected on or after the effective date of this policy (June 28, 2026). We will not retroactively apply it to data collected before that date without giving you separate notice and, where required, obtaining your consent. Where the EU/UK GDPR applies, the legal basis for de-identifying data for this purpose is our legitimate interest in maintaining and improving First Crack; once data is de-identified or aggregated it is no longer personal data, so this use does not affect your rights over your identifiable information.

4. Cookies

First Crack uses essential cookies provided by our authentication and database provider for authentication and session management. These cookies are necessary for the service to function and cannot be disabled. Our usage analytics are cookieless. We do not use advertising or cross-site tracking cookies.

5. Data Sharing

We do not sell, rent, or trade your personal information. Your roast data is shared publicly only when you explicitly create a share link or publish a roast. To run the service we rely on a small set of sub-processors, each handling only the data needed for its function:

  • Cloud database, authentication, and storage — to store your account and coffee data securely.
  • Hosting and cookieless analytics — to serve the platform and measure aggregate usage.
  • Error monitoring and diagnostics — to detect and fix crashes and connection problems.
  • Transactional email delivery — to send sign-in and beta-related messages.

We will provide the current names of these sub-processors on request — email privacy@firstcrack.app.

6. Data Storage & Security

Your data is stored securely on our cloud database provider's infrastructure with row-level security (RLS) policies ensuring that only you can access your own data. All data is transmitted over HTTPS.

7. Your Rights

You have the right to:

  • Access your data: Export all your data as JSON from the Settings page.
  • Delete your data: Permanently delete your account and all associated data from the Settings page.
  • Correct your data: Update your profile information at any time.
  • Data portability: Download your data in a machine-readable JSON format.

If you joined the Bridge beta waitlist without creating an account, email privacy@firstcrack.app to access or delete the information you submitted.

These rights apply globally, including under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

8. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data is permanently removed from our systems. Beta waitlist information is retained until the beta concludes or you ask us to remove it, whichever comes first.

9. Children's Privacy

First Crack is not intended for children under 13 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: privacy@firstcrack.app