Privacy Policy

1. Scope and operator

TextMyLink LLC, a California limited liability company, owns and operates Beanly ("Beanly," "we," "us," or "our"). This policy covers the Beanly Coffee Guide app, beanly.app, and related account, support, and other services that link to it (the "Services"). Other TextMyLink products and third-party services have their own privacy notices.

2. Important points at a glance

• Guest accounts use an identifier, even without an email address.
• Third-party AI requires a separate choice. Google Gemini analyzes package photos; OpenAI helps find public coffee information. Scanning requires AI permission, but saved-coffee, catalog, and taste tools remain available without new AI requests.
• Successful scans are saved privately. Verified-email backup includes a private copy of the front package photo; the optional back image is not a recovery photo.
• Email backup and marketing are separate choices. Marketing is off unless you enable it.
• We collect limited usage and crash information, and may earn commissions from affiliate links.
• We do not sell personal information or share it for cross-context behavioral advertising. We do not use scan photos to train our own general-purpose AI models.

3. Information we collect

We collect information you provide, information from your use of the Services, and information from the providers described below.

App information is generally associated with your guest account, email-linked account, or device promotion record. We do not use it to track you across other companies' apps or websites. We use privacy-filtered identifiers in provider-usage records. Release versions use Firebase Crashlytics for technical crash reports. Beanly does not attach a customer identifier, email, account ID, photos, coffee records, private notes, searches, or Analytics breadcrumbs to those reports. We do not use crash reports for advertising or cross-app tracking.

Beanly does not request government identifiers, financial-account credentials, precise location, health records, biometric identifiers, or protected-characteristic information. Avoid including sensitive information in photos, searches, notes, or messages.

4. Coffee photos, recommendations, and artificial intelligence

Your choice. Third-party AI is off until you separately enable it. Accepting the Terms or acknowledging this policy does not authorize it. You can change the setting in Beanly Settings. Turning it off stops future third-party AI requests for your account and disables scanning; catalog, saved-coffee, and taste features can still use information already held by Beanly. It does not reverse completed processing or remove public coffee facts retained without an account link.

What providers receive. With that permission:

• Google Gemini receives your front and optional back package photos, through Beanly, to identify coffee details. We do not intentionally include your taste profile, coffee library, private notes, email, password, or raw account ID in the request.
• OpenAI may receive public package facts to find missing product information, or your search text and limited coffee preferences to find recommendations. Preferences may include roast, decaf, format, brew method, or broad flavor interests. We do not intentionally include photos, private notes, email, passwords, raw account IDs, your complete library or rating history, or your complete taste profile. For package lookups, we do not include your private palate.

Providers may also receive network and request metadata; OpenAI receives a one-way safety identifier. Public-web sources and search infrastructure may receive ordinary lookup requests, but Beanly does not intentionally send them your email, raw account ID, private notes, scan photos, or complete taste profile. We show a source link when a recommendation relies on public-web information.

Private storage and public facts. Successful scans are saved to private Past Scans and may sync with your account. Front photos remain in private app storage. For verified-email accounts, Beanly may also store a compressed, private front-photo copy through Google Firebase to support display and recovery on a new or reinstalled device. Guest and unverified-email accounts do not receive cloud photo recovery. Optional back images are analyzed but not saved as recovery copies.

Private recovery photos are not published, contributed to the catalog, shared with merchants, used in marketing, or used to train Beanly's own general-purpose AI models. Beanly's scan service is designed to process submitted images temporarily without saving them in its database or operational logs; this is separate from private photo backup. Extracted facts, outputs, confidence results, and limited usage information may be retained.

We may retain public coffee facts and source links for reuse, verification, and catalog review without retaining your raw query, account identifier, private content, or personal match score in those public-source records. Temporary lookup records similarly exclude raw queries, account identifiers, photos, and private content. See Section 9 for retention.

Provider training and retention. Beanly uses Google's paid Gemini service. Google states that paid-service prompts, files, and responses are not used to improve its products. Google currently states that it retains prompts, contextual information, and outputs for 55 days for abuse monitoring; authorized Google personnel may review flagged content under access controls. Beanly disables optional request storage, but this does not eliminate Google's separate abuse-monitoring retention.

OpenAI states that API inputs and outputs are not used to train its models by default unless the customer opts in. Beanly disables optional response storage. OpenAI may nevertheless retain temporary request caches for up to 24 hours and standard abuse-monitoring logs, which may contain customer content, for up to 30 days. Longer abuse-log retention may apply when required by law or reasonably necessary to protect its services or third parties. Provider terms and practices may change.

Safe use. Photograph only retail coffee packaging you are authorized to submit. Keep people, private documents, addresses, screens, payment details, and other sensitive material out of the frame. Automated safety systems may analyze and reject inappropriate submissions. AI results can be wrong or fabricated; check the physical package before relying on them.

5. How we use information

We use information to:

• Provide accounts, scans, saved coffees, private backup and recovery, taste profiles, matches, and recommendations.
• Validate purchases, manage Beans, enforce one-time promotions, and prevent fraud or abuse.
• Operate, secure, measure, troubleshoot, and improve the Services and catalog, including review of extracted coffee facts and corrections without publishing private photos or notes.
• Measure recommendations, affiliate interactions, and commissions.
• Send account, purchase, security, support, and other service communications; send marketing only with your separate permission.
• Honor privacy choices, comply with law, enforce agreements, protect rights and safety, and handle legal claims.
• Produce aggregated or de-identified statistics that cannot reasonably identify you.

Before using personal information for a materially different purpose, we will provide any legally required notice or obtain consent.

6. When we disclose information

We may disclose information to:

• Service providers: Google Firebase for accounts, storage, recovery, and crash reporting; Google Gemini and OpenAI for the AI uses above; Netlify and other hosting or infrastructure providers; email, security, analytics, support, and operations providers; and Amazon Web Services, including SES, if separately consented marketing delivery is activated.
• Apple and Google: for app or device verification, fraud prevention, and promotion eligibility. Apple also processes purchases and supplies transaction, refund, revocation, storefront, and account-token information.
• Web sources, merchants, and affiliate partners: as described in Sections 4 and 7.
• Professional advisers and legal recipients: lawyers, accountants, insurers, auditors, regulators, courts, law enforcement, or other parties where reasonably necessary for advice, legal compliance, protection of rights and safety, fraud prevention, or legal claims.
• Business transaction participants: information may be reviewed, transferred, or assigned in connection with financing, due diligence, reorganization, merger, acquisition, bankruptcy, or sale or transfer of our business or assets.
• Others at your direction or with your consent.

Service providers receiving personal information from Beanly must use it only for authorized purposes and provide the same or equal protection described in this policy and required by applicable law and Apple rules. We support this through contractual, technical, and organizational safeguards appropriate to each provider's role.

We may disclose aggregated or de-identified information for lawful purposes and will not attempt to reidentify it except to test protections or as permitted by law.

7. Affiliate links, advertising, and marketing email

Beanly may earn a commission from product links. Affiliate compensation does not determine your taste-match score. Links ordinarily do not increase your price, although merchants control pricing. We disclose sponsored and affiliate relationships where required.

Following a link sends an ordinary web request and may send an affiliate code to the destination. Merchants may report pseudonymous or aggregated conversions and commissions. We do not send your private taste profile, notes, or scan photos merely because you follow a link.

Marketing is optional and separate from email backup and bonus Beans. With your permission, we may use limited preferences, such as roast, brew method, or decaf, to select emails containing news, offers, recommendations, or affiliate links. Unsubscribe in an email or contact support@beanly.app. We may retain a minimal suppression record to honor your choice. Essential service messages and account recovery continue.

We do not sell personal information or share it for cross-context behavioral advertising and have not done so in the preceding 12 months, including knowingly for anyone under 16. If that changes, we will update this policy and provide legally required choices before the change applies.

8. Website storage, cookies, and third-party links

The website uses ordinary browser features for navigation and does not currently use advertising cookies or third-party behavioral analytics. Hosting providers may process IP addresses, request headers, and security logs. We will provide updated notice and legally required consent controls before adding non-essential tracking.

We do not track activity across other companies' websites for behavioral advertising or permit third parties to do so through our website. We therefore do not currently take separate action on browser Do Not Track settings. We honor legally applicable opt-out preference signals.

Third-party sites, merchants, and app stores control their own content, security, transactions, and privacy practices. Review their terms before providing information or purchasing.

9. Retention

We retain personal information only for as long as reasonably necessary to provide the Services, preserve account and credit continuity, meet legal or accounting duties, resolve disputes, enforce agreements, prevent fraud, and maintain security. The following periods or criteria apply:

Disaster-recovery copies are isolated from ordinary product use. A restored copy may contain information later deleted or changed and is not automatically returned to customer-facing service. These copies are not available through the Services or ordinary account recovery. We do not intentionally retain a retrievable deleted recovery-photo copy after successful item or account deletion, subject to these backup and provider exceptions.

When information is no longer needed, we delete it, de-identify it, or securely isolate it, subject to technical and legal limitations.

10. Security

We use administrative, technical, and organizational safeguards, including access controls and transport encryption, designed to protect the information we handle. No system is perfectly secure; we cannot guarantee absolute security or uninterrupted availability.

Protect your device and email account, use a unique password, and report suspected unauthorized access to support@beanly.app.

11. Your choices and account deletion

• AI and camera: control third-party AI in Settings and camera access through your device. Scanning requires both; saved-coffee and catalog features remain available without new AI requests.
• Email backup: you can remain a guest, with limited recovery and benefits.
• Marketing: unsubscribe in an email or contact support without disabling account recovery or essential messages.
• Individual content: edit or delete saved items in the app. Removing the last Past Scan, Shelf, or Wish List reference removes the active local and cloud recovery photo.
• Account deletion: use "Delete account and data" in Settings for a guest or email-linked account. The process deletes the authentication account, active cloud data, private recovery photos, and app-managed device data. Completion may occur in stages with automatic retries.

If in-app deletion cannot complete, email support@beanly.app with "Account Deletion." We may verify your identity and account control. We normally complete verified support requests within 30 days and confirm completion; additional time may apply where legally permitted or reasonably needed for verification.

Deletion removes unused free, bonus, and purchased Beans; used Beans are not restored. Apple handles App Store refund requests. Limited records and provider or backup copies may remain as described above. Deletion cannot erase information retained by Apple or data outside Beanly's managed device storage. Deleting an account, reinstalling, or transferring a device does not reset prior promotion eligibility. Contact support if a used device affects your eligibility.

12. U.S. state privacy rights

Depending on your residence and whether the law covers TextMyLink LLC, you may have rights to access, correct, delete, or receive a portable copy of your information; learn about collection and disclosures; restrict processing; opt out of sale, targeted advertising, or certain profiling; or appeal a denied request. We do not engage in sale or cross-context behavioral advertising as described above.

Contact support@beanly.app. We will verify and respond as required by law, accept authorized agents where permitted, and explain any available appeal. We may require proof of an agent's authority and direct verification. We will not unlawfully discriminate for exercising privacy rights.

California notice at collection

In the preceding 12 months, to the extent people used beta or production Services, we collected the following categories. Section 3 identifies sources; Section 9 provides retention periods or criteria.

We have not sold or shared personal information for cross-context behavioral advertising in the preceding 12 months. We do not use or disclose sensitive information for purposes triggering California's right to limit. We do not disclose personal information for third parties' own direct marketing; California residents may contact us about applicable Shine the Light rights.

13. Notice of financial incentive: verified-email bonus Beans

Beanly may offer a one-time award of five bonus Beans for voluntarily linking and verifying an email. One Bean permits one eligible package scan; the offer shown before participation controls. Marketing is separate and is not required.

• Information and purposes: email, account identifier, verification status, one-way device promotion record, and award history, used for authentication, recovery, backup, service messages, and preventing repeated or fraudulent claims.
• Joining: choose email backup, review the offer, provide email and password, verify the email, and claim the award.
• Leaving: marketing opt-out does not affect backup or Beans. We do not currently offer email removal or a return to guest status for a linked account. To remove that account and cloud backup, use account deletion. This forfeits unused Beans, does not restore used Beans, and does not reset device promotion eligibility.
• Value estimate: five Beans have an approximate retail-equivalent value of $0.25 to $0.50 at current pack prices. We use that range as a practical good-faith estimate of the value provided. We do not sell the information. The estimate may change with prices, costs, or offer terms.

14. United States operation and regional availability

Beanly operates from the United States and is currently offered through the U.S. App Store. Providers may process information in other countries with different privacy laws. Section 12 describes potentially applicable rights. Additional disclosures, legal bases, transfer safeguards, or controls may be needed before intentional expansion outside the United States.

15. Age restriction and children

The Services are for adults 18 or older and are not directed to children. People under 18 must not use Beanly or submit information. We do not knowingly collect personal information from children under 13. Contact support if a minor has submitted information; we may delete it and terminate the account after appropriate verification.

16. Changes to this policy

We may update this policy as our Services, practices, providers, or legal obligations change. We will post the updated policy, revise its date, and provide additional notice or obtain consent for material changes where required. Changes apply prospectively from their effective date.

17. Contact

TextMyLink LLC, owner and operator of Beanly
Woodland Hills, California, United States
support@beanly.app

Use "Privacy Request" for privacy rights or "Account Deletion" for account deletion.