Privacy Policy

Last updated: 2 July 2026

Pourtrait is a social discovery app for specialty coffee, built in Amsterdam. This policy explains what we collect, why, and what you can do about it. We have tried to keep it specific and honest. If something here is unclear, write to us at the address at the bottom.

Pourtrait is operated by RadTech, a sole proprietorship (eenmanszaak) registered in the Netherlands. RadTech is the data controller for the personal data described in this policy.

Your account

You sign in with your email address. There are no passwords. When you log in, we send a one time code to your email, and entering that code proves the account is yours. We store your email so we can recognise you on your next visit and send those codes. We also keep the display name and any profile details you choose to add.

Location

Location is optional. If you allow it, we use your device location only to find specialty cafes near you and to show them on the map. You can use the app without granting location access (you just look up cafes manually instead). We do not track your location in the background, and we do not build a movement history.

What you create in the app

The content you add is the heart of Pourtrait. This includes:

• Pours you log, including the cafe and the drink.
• Taste values you set with the sliders (aroma, body, acidity, sweetness).
• Notes you write about a drink.
• Ratings you give to baristas.
• Cafes and baristas you follow, and posts you publish.

Some of this is meant to be social. Your pours, ratings, follows, and posts can be visible to other people in the app. Treat anything you publish as public unless the app clearly says otherwise.

Photos

Today, Pourtrait does not let you upload photos. The image attached to each pour is a generated "pour signature" drawn from your taste values, not a picture from your camera or library, and logging a drink does not ask for camera or photo library access. If we add photo uploads in a future version, we will update this policy first and name the storage provider that processes them.

Companies that help us run the app

We use a small set of trusted providers to operate Pourtrait. They process data only on our instructions.

• Supabase, for our database and for sending the one time login codes that authenticate you.
• Resend, for delivering transactional email such as login codes.
• Mapbox, for the maps that show cafes near you.

When you open the map, your approximate location and map requests are handled by Mapbox so it can serve the right tiles. Each provider has its own privacy terms.

Resend and Mapbox are based in the United States, so some processing happens outside the European Economic Area. Where that happens, it is covered by standard contractual clauses or an equivalent safeguard recognised under GDPR.

We do not sell your data

We do not sell your personal data, and we do not share it with advertisers. Pourtrait has no advertising network and no third party advertising trackers built into it.

Why we are allowed to process this

Your email and login are processed because they are necessary to provide the app to you (contract). Location is processed only with your consent, and you can decline it and still use the app. Public content moderation and abuse prevention rely on our legitimate interest in keeping the app safe.

How long we keep it

We keep your account and content for as long as your account is active. If you delete your account, we remove your personal data and the content tied to it, except where we are required to keep records by law.

Your rights

If you are in the European Economic Area, the GDPR gives you rights over your personal data. These include the right to:

• Access the data we hold about you.
• Correct data that is wrong or incomplete.
• Delete your account and the personal data tied to it.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable form.

To exercise any of these, email us at the address below and tell us what you want. We will respond within the time the law allows. You also have the right to complain to your local data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens.

You can delete your account from inside the app at any time. If you no longer have the app installed, you can request deletion here instead.

Children

Pourtrait is intended for adults. It is not designed for, or directed at, children under 16.

Changes to this policy

If we change how we handle data, we will update this page and change the date at the top. Significant changes will be flagged in the app.

Contact

Questions, requests, or concerns about your data: contact@pourtrait.nl.