App privacy policy

Privacy Policy

Last updated: September 25, 2026

18/36 helps you record coffee beans, recipes and shots and dial in your espresso.

At a glance

• Your coffee data is stored on your device. The developer cannot access it.
• No advertising or separate user account. Optional beta usage statistics are off by default.
• Automatic local backups; when iCloud is available, an additional file in your personal iCloud storage.
• Purchases and TestFlight are handled by Apple.

1. Controller

Elias Sebastian Baumann
Falkenberg 24 · 85665 Moosach · Germany
Email: elias.baumann@ymail.com

2. Data on your device

The app stores beans, including roaster, roast date, quantity, price, flavour notes and favourites; recipes and settings such as grind setting, dose, yield and temperature; shots with dates, duration, amounts and ratings; equipment such as grinders, machines and baskets; optionally your first name and coffee bag photos; and app preferences. This data supports the app’s functionality. No separate 18/36 user account is required. The developer cannot access your local storage or your personal iCloud backup file.

3. Camera and photos

The camera or photo library is used when you take or choose a bag photo. Text recognition runs on your device using Apple’s image recognition. Photos are not uploaded to the developer for recognition. Saved photos may be included in backups or exports you initiate. You can manage access permissions in iOS Settings.

4. Apple purchases and trial

The free seven-day trial and one-time Pro unlock use Apple StoreKit. The app uses the purchase status and purchase date supplied by Apple to determine access and trial duration and to restore purchases. There is no subscription or automatic charge after the trial. Apple processes payment details; you do not enter them in 18/36. Apple’s additional notice applies: apple.com/legal/privacy/data/en/app-store/.

5. Automatic backups and iCloud Drive

When the app moves to the background, the native app requests a copy of its saved data. Up to three local backup versions are retained in the app’s folder. If iCloud is signed in and available for the app, the file “18-36-Sicherung.json” is also updated in your personal iCloud Drive folder “18/36”. It may contain your coffee data, preferences, optional first name and saved photos. This is a backup, not continuous synchronisation between multiple running apps. Local backups remain possible when iCloud storage is unavailable. You control availability through your Apple/iCloud settings. Apple’s privacy policy and iCloud terms also apply to storage provided by Apple (apple.com/legal/privacy/).

If the app starts without saved data and finds a suitable backup, it displays the source and date. Data is restored only after your confirmation. iOS device backups may also contain app data, depending on your backup settings.

6. Export and deletion

Under “Your profile”, you can export and import your data. If you share a file through AirDrop, email or a cloud service, you choose the recipient or storage location. That service’s privacy terms also apply. A backup contains private app content; share it only deliberately.

Deleting the app removes its local storage, including local backups. Previously exported files, iCloud Drive files and older device backups may remain. Delete these separately in Files or your backup management settings if needed. Resetting app data is therefore not a promise that every copy stored outside the app is also deleted.

7. TestFlight and support

For TestFlight, Apple processes technical information, crash reports and feedback you submit, including screenshots, under its TestFlight terms. Apple may provide this information to us for troubleshooting. If you contact us by email, we receive your sender address and message. We use this information for support and app improvements. We delete TestFlight feedback after the testing phase ends.

7a. Optional beta usage statistics

In beta versions that include this feature, you can choose to share usage statistics. No usage events collected by us are transmitted without your consent. The statistics use a random local identifier and, optionally, the source you specify, such as a Reddit community. Events cover the first observed app start after consent, active days, onboarding completion, the first newly added bean and the first and third newly saved shots. Names, photos, recipe contents and taste ratings are not transmitted. Existing data, samples and imports are not counted retroactively.

Events and their UTC calendar day are processed on our STRATO server. Website and app identifiers are not linked. Reports consider the last 90 days; older events are deleted when the next event arrives or maintenance runs. You can withdraw consent in your profile at any time. This stops collection immediately and requests deletion of the events as soon as the server is reachable. Further information about the identifier, storage and deletion is available under Optional beta statistics. This consent is independent of processing by Apple TestFlight.

8. Your rights

For personal information we hold, contact the email address above to request access, correction, deletion, restriction or portability, or to object to processing. You can also lodge a complaint with a data protection supervisory authority. For data Apple processes independently, Apple’s privacy information and contact channels also apply.

9. Changes and external pages

We update this policy when functionality or processing changes. It is available through the privacy link in the app and on the App Store. The published support and privacy documents are hosted on our website, 18to36.com. Our website privacy notice also applies when you visit the website (18to36.com/en/datenschutz.html).