Privacy Policy
Last updated: 12 June 2026 · Brio is currently a Research Preview.
Who we are
Brio is an independently operated AI espresso coach based in Switzerland. The operator is the controller for your personal data. For anything privacy-related — questions, objections, requests, or to ask who we are — write to support@brio-barista.com.
What we collect
- Account data — your email address and login activity.
- Profile & setup — what you tell Brio about yourself and your gear (e.g. your name, machine, grinder, basket, preparation method).
- Coffee data — the coffees you add, journal entries, brewing profiles, and shot telemetry Brio reads from your machine when you ask it to.
- Conversations — your chat messages with Brio, including photos you attach (coffee bags, your setup).
- Billing & usage data — subscription status and per-conversation usage metering (tokens, estimated cost, latency) used to operate quotas.
- Diagnostics (only with your consent) — crash reports and coaching-session traces. You choose this on first launch and can change it anytime in Settings.
How we use it, and on what legal basis
- To run Brio for you (performance of contract): your messages and photos are sent to our AI provider, Anthropic, to generate Brio’s replies; your profile, coffee data, and chat history are stored so Brio can coach you across sessions.
- To improve Brio (legitimate interest): your chats stay saved in your account, and parts of conversations may be reviewed by us to make the coaching better. You can object to this at any time via the contact above.
- Diagnostics (consent): if you accept, crash reports go to Sentry and coaching-session traces go to LangSmith — both hosted in the EU. If you decline, nothing is sent to either. Withdrawing consent in Settings stops future sharing.
- Billing and quotas (performance of contract / legitimate interest): we meter usage to enforce fair-use limits and process subscriptions.
Who processes data for us
These providers process personal data on our behalf, only as needed to run Brio:
| Provider | What for |
|---|---|
| Anthropic | Generates Brio’s replies from your messages and photos. Your data is not used to train their models. |
| Supabase | Database, authentication, and photo storage (bean photos live in a private bucket, accessible only via short-lived signed links). |
| Cloudflare | Hosting and edge infrastructure that serves the app and routes AI requests. |
| Sentry | Crash reports — EU-hosted, and only if you consented. |
| LangSmith (LangChain) | Coaching-session traces — EU-hosted, and only if you consented. |
| RevenueCat & payment providers (Stripe, Apple) | Subscription management and payment processing. We never see or store your card details. |
International transfers
Where a provider processes data outside Switzerland or the EU/EEA (for example Anthropic and Cloudflare operate globally), transfers are protected by recognised safeguards such as the EU Standard Contractual Clauses or equivalent mechanisms.
How long we keep it
For as long as your account exists. Deleting your account (Settings → Delete account) removes your data from our database and triggers deletion requests at our diagnostics providers (Sentry, LangSmith) as well.
Your rights
Under the GDPR and the Swiss FADP you can ask for access to your data, correction, deletion, or a copy to take elsewhere; you can object to processing based on legitimate interest (including conversation review); and you can withdraw diagnostics consent anytime in Settings. Write to support@brio-barista.com — we’ll respond within 30 days. You can also complain to your supervisory authority (in Switzerland, the FDPIC).
What we don’t do
We don’t sell your data, we don’t show ads, and your conversations are not used to train third-party AI models.
Children
Brio is not directed at children under 16.
Changes
If this policy changes in a way that matters, we’ll say so in the app. The date at the top always reflects the latest version.