Privacy Policy
Last updated: May 25, 2026
Introduction
This Privacy Policy describes how WeBean and its affiliates (“WeBean,” “we,” “our,” or “us”) collect, use, disclose, and protect information when you use our mobile application (the “App”). This Privacy Policy applies to all users of the App.
BY USING THE APP, YOU CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY. IF YOU DO NOT AGREE, PLEASE DO NOT USE THE APP.
We reserve the right to modify this Privacy Policy at any time. Changes will be effective immediately upon posting. Your continued use of the App after changes constitutes acceptance of the modified Privacy Policy.
1. Information We Collect
1.1 Information You Provide Directly
Account Registration Information:
- Email address
- Username
- Password (encrypted and hashed)
- Profile picture (optional)
- Display name (optional)
- Date of birth (for age verification)
Profile and Preference Data:
- Coffee taste profile and preferences
- Brewing method preferences
- Favorite coffee types and roast levels
- Taste quiz responses and results
- Dietary restrictions or allergen information (optional)
- Coffee consumption habits
User-Generated Content:
- Coffee reviews, ratings, and written feedback
- Photos and images of coffee beans, packaging, and brewing
- Comments, replies, and discussions
- Coffee brewing logs and history
- Custom lists, collections, and favorites
- Any other content you choose to submit
Communication Data:
- Messages sent to our support team
- Survey responses and feedback
- Any correspondence with WeBean
1.2 Information Collected Automatically
Usage and Activity Data:
- Features and sections accessed
- Timestamps and duration of use
- Search queries and filters used
- Interaction with recommendations (views, clicks, dismissals)
- Content you view, like, save, or share
- Frequency and patterns of use
- In-app navigation and behavior
Device and Technical Information:
- Device type, model, and manufacturer
- Operating system type and version
- Unique device identifiers (UDID, advertising ID, IDFA, Android ID)
- Mobile network carrier and connection type
- IP address and approximate location based on IP
- Browser type and version (if applicable)
- Screen resolution and device settings
- Time zone and language settings
Location Information:
- Approximate location (city, state, region) derived from IP address
- Precise GPS location (only with your explicit permission)
- Location data is used to suggest nearby coffee shops, roasters, and cafes
OCR and Image Data:
- Photos and images you upload for scanning
- Text and data extracted through OCR processing
- Image metadata (may include EXIF data such as timestamp, device info, GPS coordinates if not stripped)
- Processing results and confidence scores
- Images may be stored, analyzed, and used to train and improve our OCR and machine learning models
Analytics and Performance Data:
- App performance metrics (load times, crashes, errors)
- Diagnostic and crash reports
- Error logs and debugging information
- Feature usage and adoption statistics
- A/B testing data and experiment results
Cookies and Similar Technologies:
- Session cookies and authentication tokens
- Local storage and cached data
- Analytics cookies and tracking pixels
- Preference cookies for settings
1.3 Information from Third Parties
Social Media Platforms:
- If you connect third-party accounts (Facebook, Google, Apple), we may receive:
- Profile information (name, email, profile picture)
- Friends list or social connections (if permitted)
- Public profile data according to your platform settings
Authentication Services:
- OAuth tokens and user identifiers
- Email addresses and verified account information from providers like Google Sign-In, Apple Sign-In, or similar services
Payment Processors (if applicable):
- Transaction IDs and payment confirmation
- Billing information (processed by third-party payment processors, not stored by us)
- Purchase history
Advertising and Analytics Partners:
- Device advertising IDs
- Attribution data for app installs and campaigns
- Aggregated demographic and interest data
Coffee Product Information:
- We may supplement your data with publicly available coffee product information, images, and descriptions from third-party sources
2. How We Use Your Information
We use collected information for the following purposes:
2.1 Provide and Improve Services
- Create, maintain, and authenticate your account
- Display and process your reviews, ratings, and content
- Generate personalized coffee recommendations using algorithms and machine learning
- Build, update, and refine your taste profile
- Process OCR scans and extract text from images
- Track your brewing history and provide insights
- Enable communication and interaction with other users
- Develop, test, and improve existing features
- Research and develop new features and functionality
- Analyze usage patterns to optimize user experience
- Conduct A/B testing and experiments
- Train and improve machine learning models and algorithms
2.2 Communication and Notifications
- Send important service announcements and updates
- Respond to your inquiries, support requests, and feedback
- Send transactional emails (account verification, password resets, etc.)
- Send push notifications about new reviews, replies, follows, or recommendations (with your consent)
- Send promotional content, newsletters, and marketing communications (only with your explicit opt-in consent)
- Conduct surveys and request feedback
2.3 Security, Fraud Prevention, and Safety
- Detect, investigate, and prevent fraudulent activity, abuse, and security threats
- Monitor for violations of our Terms of Service
- Verify user identity and authenticate accounts
- Protect the rights, property, and safety of WeBean, our users, and the public
- Investigate and respond to user reports and complaints
- Enforce our policies and legal agreements
2.4 Legal Compliance and Protection
- Comply with applicable laws, regulations, and legal processes
- Respond to court orders, subpoenas, and government requests
- Establish, exercise, or defend legal claims and rights
- Prevent illegal activities and potential harm
- Maintain records as required by law
2.5 Analytics, Research, and Business Operations
- Understand how users discover and interact with the App
- Analyze demographics, preferences, and behavior patterns
- Conduct research on coffee preferences and trends
- Generate aggregated, anonymized statistics and reports
- Evaluate and improve our business operations
- Assess and optimize marketing effectiveness
- Support mergers, acquisitions, or business transfers
2.6 Advertising and Monetization (if applicable)
- Display personalized advertisements (with your consent where required)
- Measure advertising effectiveness and attribution
- Work with advertising partners and networks
We may use information for other purposes disclosed to you at the time of collection or with your consent.
3. How We Share Your Information
WE DO NOT SELL YOUR PERSONAL INFORMATION TO THIRD PARTIES.
We may share your information in the following circumstances:
3.1 Public Information
The following information is publicly visible to other users and may be indexed by search engines:
- Your username and profile picture
- Your public bio and profile information
- Your reviews, ratings, comments, and replies
- Your public lists and collections
- Your followers and following lists (if your profile is public)
- Any content you choose to make public
- Coffee beans you’ve logged (depending on your privacy settings)
You control the visibility of much of this information through your privacy settings.
3.2 With Other Users
- When you interact with other users (follow, comment, reply)
- When other users view your public profile or content
- When you participate in community features
3.3 Service Providers and Vendors
We share information with third-party service providers who perform services on our behalf, including:
-
Cloud Infrastructure: Supabase (which hosts data on AWS)
-
Analytics: Google Analytics, Firebase Analytics, or similar platforms for usage analytics
-
Crash Reporting: Sentry, or similar tools for error tracking
-
Customer Support: Zendesk, Intercom, or similar platforms for customer service
-
Email Services: SendGrid, AWS SES, or similar providers for transactional and marketing emails
-
Push Notifications: Firebase Cloud Messaging, Apple Push Notification Service, or similar services
-
Authentication: Auth0, Supabase Auth, or similar identity management services
-
Payment Processing: Stripe, PayPal, Apple Pay, Google Pay, or similar payment processors (if applicable)
-
OCR and Machine Learning: Google Vision API, AWS Rekognition, or similar AI/ML services
-
Content Delivery: Cloudflare, Fastly, or similar CDN providers
-
Database Services: MongoDB Atlas, Amazon RDS, or similar database providers
-
Advertising Partner: Google AdMob for serving advertisements, which may collect device identifiers and usage data for ad personalization
These service providers are contractually required to:
- Use your information only for specified purposes
- Protect your information with appropriate security measures
- Not disclose your information to unauthorized parties
- Comply with applicable data protection laws
3.4 Business Transfers and Corporate Transactions
Your information may be transferred in connection with:
- Mergers, acquisitions, or consolidations
- Sale of all or substantially all of our assets
- Bankruptcy, reorganization, or similar proceedings
- Corporate restructuring or changes in ownership
We will notify you before your information becomes subject to a different privacy policy.
3.5 Legal Requirements and Safety
We may disclose your information when required or permitted by law:
- In response to subpoenas, court orders, or legal processes
- To comply with government or regulatory requests
- To enforce our Terms of Service or other agreements
- To protect our rights, property, safety, or security
- To protect the rights, property, safety, or security of our users or the public
- To prevent fraud, abuse, or illegal activities
- To investigate potential violations of our policies
- In connection with legal claims or disputes
3.6 With Your Consent
We may share your information for other purposes with your explicit consent or at your direction.
3.7 Aggregated and De-Identified Data
We may share aggregated, anonymized, or de-identified information that cannot reasonably identify you, including:
- Overall usage and demographic statistics
- Popular coffee trends and preferences
- Industry reports and research
- Marketing and promotional materials
This data is not considered personal information and may be used and shared without restriction.
3.8 Publicly Available Information
Information you post publicly (reviews, comments, profile) may be:
- Viewed by anyone, including non-users
- Indexed by search engines (Google, Bing, etc.)
- Shared or reposted by other users
- Archived by third parties
4. Data Retention and Deletion
4.1 Retention Period
We retain your information for as long as:
- Your account is active
- Necessary to provide you with services
- Required to fulfill the purposes described in this Privacy Policy
- Required by law, regulation, or legal obligation
- Necessary for legitimate business purposes (fraud prevention, dispute resolution, etc.)
4.2 Account Deletion
When you request account deletion:
- Your personal information is deleted or anonymized within 3-7 business days of your request
- Some information may be retained in anonymized or aggregated form
- Backup copies may persist for up to 90 additional days before permanent deletion
- Your public reviews and content may remain visible but will be anonymized (disconnected from your identity)
- Information required for legal, security, or fraud prevention purposes may be retained longer
To request account deletion, contact us at support@webean.app or use the in-app account deletion feature.
To request account deletion:
- In-app: Go to Profile > Settings > Delete Account
- Online: Submit a request at our deletion request form
- Email: Contact us at support@webean.app
4.3 Extended Retention
We may retain certain information longer when:
- Required by law (tax records, transaction logs, etc.)
- Necessary to resolve disputes or enforce agreements
- Essential for security, fraud prevention, or safety purposes
- Stored in backup systems that are periodically purged
- Part of legal holds or ongoing investigations
4.4 Deletion Limitations
Even after deletion, information may persist:
- In cached or archived systems temporarily
- If shared with third parties prior to deletion (subject to their policies)
- In de-identified or aggregated form used for analytics
- As required by legal or contractual obligations
5. Your Privacy Rights and Choices
5.1 Access and Portability Rights
You have the right to:
- Access your personal information we hold
- Request a copy of your data in a structured, commonly used format
- Download your data for personal use or transfer to another service
5.2 Correction and Update Rights
You have the right to:
- Update your account information at any time through app settings
- Correct inaccurate or incomplete information
- Request correction if you cannot update information yourself
5.3 Deletion Rights
You have the right to:
- Request deletion of your account and personal information
- Understand that some information may be retained as described in Section 4
- Receive confirmation when deletion is complete
5.4 Opt-Out and Objection Rights
Marketing Communications:
- Unsubscribe from promotional emails via the unsubscribe link in each email
- Opt out of marketing communications in app settings
- You will continue to receive transactional emails (receipts, security alerts, etc.)
Push Notifications:
- Disable push notifications in your device settings
- Manage notification preferences in app settings
Personalized Recommendations:
- Opt out of personalized recommendations in app settings
- This may limit certain app functionality
Location Tracking:
- Disable location access in your device settings
- We will only access location with your permission
Advertising (if applicable):
- Opt out of personalized advertising through device settings (iOS: Limit Ad Tracking; Android: Opt out of Ads Personalization)
- Use NAI opt-out tools: http://www.networkadvertising.org/choices/
- Use DAA opt-out tools: http://www.aboutads.info/choices/
Analytics:
- Some analytics can be limited through app settings
- Complete analytics opt-out may limit app functionality
Cookies (web version):
- Adjust browser settings to refuse cookies
- Clear cookies and browsing data
- Note that some features may not function properly without cookies
5.5 Do Not Track
We do not currently respond to Do Not Track (DNT) signals. We may adopt a DNT standard if one is established in the future.
5.6 Regional Privacy Rights
A. For Users in the European Economic Area (EEA), UK, and Switzerland (GDPR)
You have the following rights under the General Data Protection Regulation (GDPR):
- Right of Access: Request confirmation of what personal data we process and obtain a copy
- Right to Rectification: Correct inaccurate or incomplete personal data
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data in certain circumstances
- Right to Restriction of Processing: Request that we limit how we use your data
- Right to Data Portability: Receive your data in a portable format and transmit it to another controller
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
- Right Not to be Subject to Automated Decision-Making: Object to decisions based solely on automated processing, including profiling
- Right to Lodge a Complaint: File a complaint with your local supervisory authority
Legal Basis for Processing: We process your data based on:
- Consent: For optional features, marketing, and certain data uses
- Contract Performance: To provide services you’ve requested
- Legitimate Interests: For analytics, security, and service improvement
- Legal Obligation: To comply with applicable laws
Data Transfers: We transfer data from the EEA to the United States and other countries. We use appropriate safeguards such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions
- Other lawful transfer mechanisms
Data Protection Officer: Contact our DPO at support@webean.app for GDPR-related inquiries.
B. For Users in California (CCPA/CPRA)
California residents have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
Right to Know:
- Categories of personal information collected
- Categories of sources from which information is collected
- Business or commercial purposes for collecting information
- Categories of third parties with whom we share information
- Specific pieces of personal information we hold about you
Right to Delete:
- Request deletion of your personal information (subject to exceptions)
Right to Opt-Out:
- We do not sell your personal information
- We do not share your personal information for cross-context behavioral advertising
- If this changes, you will have the right to opt out
Right to Correct:
- Request correction of inaccurate personal information
Right to Limit Use of Sensitive Personal Information:
- We do not use or disclose sensitive personal information for purposes other than those specified in CCPA regulations
Right to Non-Discrimination:
- We will not discriminate against you for exercising your CCPA rights
- We will not deny goods or services, charge different prices, or provide different quality of service
Authorized Agents:
- You may designate an authorized agent to make requests on your behalf
- We may require verification of the agent’s authority
Categories of Personal Information Collected: See Section 1 for detailed information.
How We Use Information: See Section 2 for business and commercial purposes.
Retention Period: See Section 4 for retention periods.
Sensitive Personal Information: We may collect the following sensitive personal information:
- Precise geolocation data (with permission)
- Account login credentials (encrypted)
C. For Users in Nevada
Nevada residents have the right to opt out of the “sale” of their personal information as defined by Nevada law.
We do not sell personal information as defined by Nevada law.
If our practices change, we will update this Privacy Policy and provide Nevada residents with an opt-out mechanism.
D. For Users in Virginia, Colorado, Connecticut, Utah, and Other States with Privacy Laws
If you are a resident of Virginia, Colorado, Connecticut, Utah, or another state with comprehensive privacy legislation, you may have additional rights including:
- Right to access personal data
- Right to correct inaccuracies
- Right to delete personal data
- Right to data portability
- Right to opt out of targeted advertising, sale of personal data, and profiling
- Right to appeal our decisions regarding your requests
5.7 Exercising Your Rights
How to Submit Requests:
- Email: support@webean.app
- In-App: Use the privacy request feature (if available)
- Mail: Shop It First LLC, 2054 S. Euclid St, Ste H, #3112, Anaheim, CA 92802
Verification: We may require verification of your identity before fulfilling requests to protect your privacy and security. Verification may include:
- Matching information you provide with information we have on file
- Requesting additional identifying information
- Asking you to confirm your request through your registered email
Response Time:
- We will respond to verified requests within the timeframe required by applicable law (typically 30-45 days)
- We may extend this period by an additional 30-45 days when reasonably necessary, with notice
Fees:
- We generally do not charge fees for requests
- We may charge reasonable fees for excessive, repetitive, or manifestly unfounded requests
Limitations: Some requests may be denied or limited if:
- We cannot verify your identity
- The request is legally not required or permitted
- Information is necessary for legal compliance
- Information is required for security or fraud prevention
- The request conflicts with our legal obligations
6. Data Security and Protection
6.1 Security Measures
We implement industry-standard security measures to protect your information, including:
Technical Safeguards:
- Encryption of data in transit using TLS/SSL (HTTPS)
- Encryption of sensitive data at rest (passwords, payment info)
- Secure authentication protocols and password hashing (bcrypt, Argon2, or similar)
- Firewall protection and intrusion detection systems
- Secure API design and access controls
- Regular security updates and patches
- Database security and access restrictions
Organizational Safeguards:
- Access controls and role-based permissions (least privilege principle)
- Employee training on data security and privacy
- Background checks for employees with access to sensitive data
- Confidentiality agreements and data handling policies
- Incident response and breach notification procedures
- Regular security audits and assessments
- Third-party security reviews and penetration testing
Physical Safeguards:
- Secure data centers with physical access controls
- Environmental controls and monitoring
- Redundant systems and backup power
Monitoring and Response:
- Continuous monitoring for security threats
- Automated threat detection and alerts
- Regular security assessments and vulnerability scans
- Incident response team and procedures
6.2 Limitations and Disclaimers
No Absolute Security:
- While we strive to protect your information, no method of transmission or storage is 100% secure
- We cannot guarantee absolute security against all potential threats
- Unauthorized access, hardware/software failure, and other factors may compromise security
Your Responsibility: You are responsible for:
- Keeping your password secure and confidential
- Using strong, unique passwords
- Enabling two-factor authentication (if available)
- Logging out from shared or public devices
- Not sharing your account with others
- Promptly reporting any unauthorized access or security concerns
Third-Party Security: We are not responsible for the security practices of third-party services, websites, or platforms linked from our App.
6.3 Security Incidents and Breach Notification
In the event of a data breach that may affect your personal information:
- We will investigate and assess the incident promptly
- We will notify affected users as required by applicable law
- We will notify relevant regulatory authorities when required
- We will take steps to mitigate harm and prevent future incidents
- Notification will include information about the breach, affected data, and steps you can take to protect yourself
To report a security vulnerability, contact us at support@webean.app.
7. Children’s Privacy
7.1 Age Restriction
The App is not intended for children under 13 years of age.
We do not knowingly collect, use, or disclose personal information from children under 13. If you are under 13, please do not use the App or provide any information.
7.2 Parental Rights
If you are a parent or guardian and believe your child under 13 has provided personal information to us:
- Contact us immediately at support@webean.app
- Provide sufficient information to verify you are the child’s parent or guardian
- We will promptly delete the child’s information from our systems
7.3 Age Verification
We may implement age verification measures to prevent access by children under 13.
7.4 Teen Users (13-17)
For users between 13 and 17 years old:
- We recommend parental guidance and supervision when using the App
- Parents can review and request deletion of their teen’s information
- Certain features may be restricted for teen users
We encourage parents to monitor their children’s online activities and educate them about safe internet use.
8. International Data Transfers
8.1 Data Transfer
Your information may be transferred to, stored in, and processed in countries other than your country of residence, including the United States, where our servers and service providers may be located.
These countries may have data protection laws that differ from those in your country.
8.2 Safeguards for International Transfers
When we transfer data internationally, we implement appropriate safeguards, including:
For EEA/UK/Switzerland:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK International Data Transfer Agreement/Addendum
- Swiss-U.S. Data Privacy Framework (if applicable)
- Adequacy decisions by the European Commission
- Binding Corporate Rules (if applicable)
- Other legally valid transfer mechanisms
For Other Jurisdictions:
- Contractual protections with service providers
- Adherence to recognized international frameworks
- Additional security measures for sensitive data
8.3 Consent to Transfer
By using the App, you consent to the transfer of your information to countries outside your country of residence, including countries that may not provide the same level of data protection as your country.
9. Cookies and Tracking Technologies
9.1 Types of Technologies We Use
Cookies: Small text files stored on your device that help us recognize your browser and remember information about your visit.
Local Storage: Data stored locally within the App on your device.
Device Identifiers: Unique identifiers associated with your device (UDID, advertising IDs, etc.).
SDKs (Software Development Kits): Third-party tools and libraries integrated into our App for analytics, advertising, and other purposes.
Pixels and Beacons: Small images or code snippets that track activity (primarily used in emails and web versions).
9.2 How We Use These Technologies
Essential/Functional:
- Authenticate your account and maintain your session
- Remember your preferences and settings
- Enable core App functionality
Analytics and Performance:
- Understand how users interact with the App
- Measure feature usage and adoption
- Identify and fix bugs and performance issues
- Conduct A/B testing and experiments
Personalization:
- Provide personalized recommendations
- Customize content and features based on your preferences
- Remember your past interactions
Advertising (if applicable):
- Deliver targeted advertisements
- Measure ad performance and attribution
- Limit ad frequency
Security:
- Detect and prevent fraud and abuse
- Monitor for security threats
- Enforce our Terms of Service
9.3 Third-Party Tracking
We use third-party services that may set their own cookies or tracking technologies:
- Google Analytics
- Firebase Analytics
- Facebook/Meta SDKs (if applicable)
- Advertising networks (if applicable)
- Other analytics and marketing platforms
These third parties may collect information about your activities across different apps and websites over time.
9.4 Your Choices Regarding Tracking
App Settings:
- Adjust privacy and analytics preferences in app settings
- Some features may require certain tracking to function
Device Settings:
- iOS: Settings > Privacy > Advertising > Limit Ad Tracking
- Android: Settings > Google > Ads > Opt out of Ads Personalization
- Manage location permissions
- Manage push notification permissions
Web Browser (if applicable):
- Adjust browser cookie settings
- Use browser privacy features (Private/Incognito mode)
- Install browser extensions that block tracking
Opt-Out Tools:
- Network Advertising Initiative: http://www.networkadvertising.org/choices/
- Digital Advertising Alliance: http://www.aboutads.info/choices/
- Google Analytics Opt-Out: https://tools.google.com/dlpage/gaoptout
Consequences of Opting Out:
- Disabling certain cookies or tracking may limit App functionality
- You may not receive personalized recommendations or content
- Some features may not work properly
10. Third-Party Links, Services, and Content
10.1 Third-Party Links
The App may contain links to third-party websites, services, or platforms, including:
- Coffee roaster and retailer websites
- Social media platforms
- Coffee-related content and blogs
- E-commerce platforms
10.2 No Responsibility
We do not control, endorse, or assume responsibility for:
- The privacy practices of third-party services
- The content or accuracy of third-party websites
- The terms of service of external platforms
- Data collected by third parties
10.3 Third-Party Privacy Policies
Each third-party service has its own privacy policy and terms of service. We encourage you to review these policies before providing information or using these services.
Your interactions with third parties are governed solely by their policies, not this Privacy Policy.
10.4 Social Media Features
The App may include social media features and widgets (e.g., Facebook Like button, Twitter share button). These features:
- May collect your IP address and page activity
- May set cookies to enable proper functionality
- Are hosted by third parties or directly on our App
- Are governed by the privacy policy of the company providing the feature
11. Changes to This Privacy Policy
11.1 Right to Modify
We reserve the right to modify, update, or replace this Privacy Policy at any time, at our sole discretion.
11.2 Notification of Changes
We will notify you of material changes by:
- Updating the “Last Updated” date at the top of this Privacy Policy
- Posting the updated Privacy Policy in the App
- Sending an email notification to your registered email address (for significant changes)
- Displaying a prominent in-app notice or push notification
- Requiring your acceptance for material changes (where required by law)
11.3 Effective Date of Changes
Changes become effective:
- Immediately upon posting for non-material changes
- 30 days after notification for material changes (or as otherwise specified)
- Upon your acceptance if required by law
11.4 Your Options
If you do not agree to changes:
- You may stop using the App
- You may request deletion of your account and information
- Continued use of the App after changes become effective constitutes acceptance of the modified Privacy Policy
11.5 Review Responsibility
It is your responsibility to periodically review this Privacy Policy for updates. We recommend checking this Privacy Policy regularly to stay informed about how we protect your information.
12. California-Specific Disclosures
12.1 California Consumer Privacy Act (CCPA) Metrics
In compliance with CCPA, we provide the following metrics for the previous calendar year:
Number of Requests Received:
- Right to Know requests: No requests received during the first year of operation
- Right to Delete requests: No requests received during the first year of operation
- Right to Opt-Out requests: No requests received during the first year of operation
Response Information:
- Average response time: No requests received during the first year of operation
- Requests complied with (in whole or in part): No requests received during the first year of operation
- Requests denied: No requests received during the first year of operation
12.2 California “Shine the Light” Law
California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes without your consent.
12.3 Financial Incentives
We do not offer financial incentives or price differences related to the collection, sale, retention, or deletion of personal information.
13. Contact Information and Data Protection Officer
13.1 General Privacy Inquiries
Email: support@webean.app
Subject Line: Privacy Inquiry
13.2 Data Protection Officer (DPO)
For GDPR-related inquiries or to contact our Data Protection Officer:
Email: support@webean.app
Subject Line: GDPR/Data Protection Inquiry
13.3 Privacy Rights Requests
To exercise your privacy rights (access, deletion, correction, etc.):
Email: support@webean.app
Subject Line: Privacy Rights Request
Include: Your full name, registered email address, and specific request details
13.4 Security Concerns
To report security vulnerabilities or incidents:
Email: support@webean.app
Subject Line: Security Report [URGENT if applicable]
13.5 Mailing Address
WeBean
Shop It First LLC
2054 S. Euclid St, Ste H, #3112
Anaheim, CA 92802
13.6 EU Representative (if applicable)
For users in the European Union:
EU Representative: Not currently required
13.7 Supervisory Authority
For EEA/UK users: You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.
For California users: You may contact the California Attorney General’s Office regarding CCPA complaints.
14. Additional Information
14.1 Data Controller
For the purposes of GDPR and other data protection laws, the data controller is:
WeBean
Shop It First LLC
2054 S. Euclid St, Ste H, #3112
Anaheim, CA 92802
14.2 Legal Basis for Processing (GDPR)
We process your personal data on the following legal bases:
- Consent: When you have given clear consent for specific purposes
- Contract: When processing is necessary to perform our contract with you
- Legal Obligation: When we must comply with legal requirements
- Legitimate Interests: When processing is in our or a third party’s legitimate interests (and not overridden by your rights)
- Vital Interests: When processing is necessary to protect someone’s life
14.3 Automated Decision-Making and Profiling
We use algorithms and automated systems to:
- Generate personalized coffee recommendations
- Create taste profiles based on your preferences
- Suggest content you might enjoy
- Detect fraud and abuse
You have the right to:
- Request human review of automated decisions
- Express your point of view
- Challenge automated decisions
14.4 Data Processing Addendum (DPA)
For business customers, partners, or enterprise users, a separate Data Processing Addendum (DPA) may be available upon request. Contact support@webean.app for more information.
14.5 Privacy by Design
We incorporate privacy considerations into our:
- Product design and development
- Data collection and processing practices
- Security architecture and infrastructure
- Business operations and decision-making
14.6 Transparency and Accountability
We are committed to:
- Being transparent about our data practices
- Providing clear, accessible privacy information
- Responding promptly to privacy inquiries and requests
- Regularly reviewing and updating our privacy practices
- Maintaining compliance with applicable privacy laws
15. Summary of Key Points
We want to make it easy for you to understand our privacy practices. Here are the key points:
✓ We collect account information, usage data, device info, and content you create
✓ We use your data to provide services, personalize recommendations, and improve the App
✓ We do NOT sell your personal information to third parties
✓ We share data with service providers, for legal compliance, and with your consent
✓ You have rights to access, correct, delete, and control your information
✓ We protect your data with encryption, access controls, and security measures
✓ We retain data while your account is active and as required by law
✓ We’re here to answer your privacy questions at support@webean.app
BY USING THE APP, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY.