Privacy
Last updated:
Mizan turns a photo of your coffee bag into a recipe. To do that we need a little data from you. This page says what we collect, why, who helps us, how long we keep it, and how you stay in control. We wrote it for the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
Who we are
Mizan is a coffee-recipe service based in Dubai, United Arab Emirates. We decide how your data is used, so we are responsible for it.
- Contact: hello@mizanae.app
What we collect
- Bag photos you send us. We read them, then delete them. We do not keep a copy.
- The bean details we read from the bag: roaster, origin, process, roast level, roast date and similar.
- Your phone number, if you use Mizan on WhatsApp or add it to your account. We keep it in full to reply to you on WhatsApp and to keep free recipes fair. We also turn it into a code that cannot be read back as the number, and use that code to link your chat, your free-recipe count, usage counts and fair-use limits.
- Your email address, when you sign in with the code we email you.
- Your brew feedback: the taps you give after a cup, your notes and your brew journal.
- A random device id stored in your browser, so we can count free recipes before you have an account.
- Usage events, such as "recipe made" or "brew started". They are linked to your account or hashed number, never to your name, number or email in full.
- A coded form of your network address, to stop abuse. Cleared after about a day.
- Invites: your invite code, and when a friend joins with it.
- Number-link codes, kept in coded form and valid for 10 minutes.
- Your WhatsApp chat settings: language, brewer and your last recipe, linked to the coded number.
- If you join the Pro waitlist: the contact you leave us.
- Your last 20 recipes, saved in your browser so they work offline. Signing out clears them.
We do not collect your precise location or your contacts. We note only your country, for counting.
Why we use it
- To make your recipes and improve them from your feedback.
- To count your 3 free recipes, and link your WhatsApp number to your account when you ask.
- To send the WhatsApp replies and emails you asked for, such as a recipe or a sign-in code.
- To keep the service running, safe and free of abuse.
- Only if you reply start on WhatsApp: a short note now and then when it has been a while. Reply stop any time.
We do not sell your data or use it for ads. We only message you first if you said yes, or about something you asked for.
Who helps us run Mizan
A few companies process data for us, only to provide the service.
- Vercel: hosts the website and app, with our functions running in Mumbai, India, under a contract that protects your data to the standard UAE law requires.
- Supabase: our database, stored in Mumbai, India, under a contract that protects your data to the standard UAE law requires.
- Anthropic: reads your bag photos and coffee details to write your recipe, in the United States, under a contract that protects your data to the standard UAE law requires.
- Meta: carries WhatsApp messages between you and Mizan, on its systems around the world, under a contract that protects your data to the standard UAE law requires.
- Resend: sends our emails, such as sign-in codes, from Ireland, under a contract that protects your data to the standard UAE law requires.
- Sentry: tells us when something breaks. We strip personal details from error reports.
These companies process data outside the UAE. We only use providers that protect it to the standard UAE law requires.
Our lawful basis
We use your data to give you the service you asked for: a recipe, a reply, an account. Where we need your consent, we ask clearly and keep a record: when you agree to these pages at sign-in, add your number, or reply start on WhatsApp. You can withdraw consent at any time; it does not affect what we did before.
Your rights
Under the UAE Personal Data Protection Law you can:
- Ask what data we hold about you and get a copy.
- Export your data in a common format.
- Correct anything that is wrong.
- Delete your data. See Delete your data.
- Withdraw your consent.
- Object to or ask us to limit how we use your data.
- Complain to the UAE's federal data protection regulator if you think we got it wrong. Please write to us first so we can put it right.
Email hello@mizanae.app from the address you signed in with, or message us on WhatsApp. We reply within 30 days, usually much sooner.
How long we keep it
- Bag photos: deleted as soon as we have read them.
- Account, recipes, feedback and journal: while your account is open.
- Guest data on a device with no account: until you clear it or stop using Mizan.
- Usage events: linked to you until you delete your data; after that we remove your account and number from them.
- Coded network address: cleared after about a day.
- WhatsApp message and photo ids: 2 days.
- Number-link codes: expire after 10 minutes.
- Invites: until you delete your account.
- WhatsApp chat settings: until you delete your data.
- Records of admin actions: kept for security, under a code and without your details, with no end date.
- Backups: gone within 7 days.
When you delete your data, we finish within 24 hours.
Age
Mizan is for people aged 18 and over. If you think someone younger has used it, email us and we will delete their data.
Cookies
We use essential cookies and browser storage only: to keep you signed in, remember your language and count free recipes. No advertising or tracking cookies.
Keeping data safe
Data is encrypted in transit, only the people who need it can see it, and our logs leave out personal details. If a breach puts your data at risk, we will tell you.
Changes to this page
If we change how we use your data, we will update this page and the date above. If a change matters, we will tell you in the app or on WhatsApp before it applies.