Privacy Policy

Serene Leaf Infusion · Effective 21 August 2026

1. Data stored on your device

The following stays in the app’s local store (SwiftData and files on the device) unless you choose to sync it:

• Teas on your shelf, recipes, stock levels and optional photos you add
• Brewing sessions, ratings, flavour tags and tasting notes
• Steep Sense game results
• Display name, reminder preferences and an optional avatar
• Cached copies of the brewing guide, daily tip, aggregates and leaderboard

A random anonymous device identifier is kept in the iOS Keychain so this server can recognise the same phone without a login. It is not your name, Apple ID or email.

2. Data sent to this server

When the device is online, Serene Leaf Infusion may send:

• Device identifier — the anonymous Keychain UUID, in the X-Device-Id header, so history and scores stay attached to that phone.
• Brewing history — sessions you log (tea name, type, steep times, vessel, rating, flavour tags, optional tasting note) so they can be stored for you and so your statistics can be computed here.
• Anonymous contributions — tea type, first-steep duration, infusion count, rating and temperature, without tea names or free text, used only for global steep-habit aggregates.
• Steep Sense scores — numeric score and round count for the global board. The board shows a short hashed alias, not your display name.
• Push tokens — if you grant notification permission, a device token is registered with Apple Push Notification service through OneSignal so we can send operational alerts.

The brewing guide and the daily tip are downloaded from this server and cached on the device so they remain readable offline. Local brew and restock reminders are scheduled on the device and do not require our servers. You can revoke notification permission in iOS Settings at any time.

3. What we do not collect

• No account, password or email address from inside the app
• No precise location, contacts, photos (unless you pick an avatar or tea photo, which stay on the device)
• No advertising identifier or tracking pixels. Push delivery uses OneSignal if you allow notifications.
• No payment information — the app does not sell subscriptions through this server

4. How the data is used

• To keep a backup of your tasting journal and return it to this device
• To compute your practice statistics (session counts, streaks, favourite tea type, flavour trends)
• To publish anonymous, aggregated first-steep ranges by tea type
• To rank Steep Sense runs on a global board

We do not sell personal data. We do not use journal text for advertising or for training unrelated models.

5. Retention

Device records, history and scores are kept while they are useful for the service. History is capped per device. Anonymous contributions and scores are capped globally. You can delete local data from Profile in the app (that clears the on-device store and regenerates the identifier). To delete server-side history attached to a previous identifier, email Ashby Winthrop at Ashby1993Winthrop@icloud.com.

6. Sharing

This server is operated by Ashby Winthrop. Hosting, push delivery (OneSignal) and transport providers (for example the cloud host that serves https://api.sereneleafinfusion.cc) may process the same technical data as any HTTPS site — IP address, timestamps, TLS logs — under their own terms. We do not share tasting notes or tea names with other users. Leaderboard aliases are derived hashes, not display names.

7. Security

Traffic uses HTTPS. The device identifier is a random UUID, not a personal name. No method of transmission or storage is perfectly secure; we take reasonable steps appropriate to a small companion API.

8. Children

Serene Leaf Infusion is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has sent us data, contact Ashby1993Winthrop@icloud.com and we will delete it.

9. Your choices

• You can use the core brewing and journal features offline; sync is opportunistic.
• You can export your journal as text from the app and delete all local data from Profile.
• You can email Ashby1993Winthrop@icloud.com to ask what is stored for a device identifier or to request deletion.

10. International users

The server may be hosted outside your country. By using the companion API you understand that anonymous device data and any history you sync are processed in the region where the host operates.

11. Changes

If this policy changes in a material way, the effective date at the top of this page will be updated. Continued use of Serene Leaf Infusion after that date means you accept the revised policy.

12. Contact

Questions about privacy for Serene Leaf Infusion:
Ashby Winthrop
Ashby1993Winthrop@icloud.com