Overview
Foamo is operated by Cold Start Labs LLC, a New York limited liability company ("we," "us," "our"). Foamo is an iOS app that helps you improve your latte art by photographing your pours and receiving AI-powered feedback. This policy explains what data we collect, why, and how it's handled.
Account & Authentication
Foamo uses Sign in with Apple for authentication. When you sign in:
- Apple ID — Apple provides us with a unique identifier and, optionally, your email address (you can choose to hide it)
- No passwords stored — Authentication is handled entirely by Apple's secure infrastructure
- Trial use — You can try Foamo once without creating an account
Photos & Images
When you photograph your latte art:
- Camera access — Foamo requests camera permission solely to capture photos of your latte art
- Local storage — Photos are saved on your device for offline access
- Cloud storage — If you're signed in, photos are uploaded to our secure cloud storage (hosted by Supabase) so you can access them across sessions
- AI grading — Photos are sent to Google's Gemini AI service for analysis and scoring. Google processes the image to generate your grade and feedback
Photos sent to Google Gemini are processed via Google's API and are not used by Google to train AI models (per Google's API Terms of Service). Google does not retain your photos after processing. We do not use your photos to train AI models or share them with other users.
Your photos are stored in a private, authenticated bucket. Only you can access your images.
Data We Store
For signed-in users, we store the following in our database:
- User profile — Your Apple ID identifier and credit balance
- Pour records — Scores, feedback, milk type, pattern type, and timestamps for each graded pour
- Images — Your latte art photos, stored securely and accessible only to you
Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance — Processing your photos for AI grading and storing your pour history is necessary to provide the service you signed up for.
- Legitimate interests — Maintaining service security and preventing fraud.
- Consent — Where required by law, such as for camera access, we obtain your explicit consent before processing.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — Request a copy of the personal data we hold about you.
- Rectification — Request correction of inaccurate data.
- Erasure — Request deletion of your data (available in-app via Settings > Delete Account).
- Data portability — Request your data in a structured, commonly used format.
- Restriction — Request that we limit how we process your data.
- Objection — Object to processing based on legitimate interests.
- Withdraw consent — Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, email us at support@coldstartlabs.dev. We will respond within 30 days.
Data Retention
We retain your personal data for as long as your account is active. When you delete your account, all associated data (profile, pours, photos) is permanently deleted from our servers. Photos sent to Google Gemini for grading are processed in real-time and are not retained by Google after processing.
International Data Transfers
Your data may be transferred to and processed in the United States, where our service providers (Supabase, Google, RevenueCat) operate. These transfers are protected by Standard Contractual Clauses and our providers' compliance with applicable data protection frameworks. By using Foamo, you acknowledge that your data may be processed in the United States.
Third-Party Services
Foamo uses the following third-party services:
- Supabase — Authentication, database, and image storage
- Google Gemini — AI-powered latte art grading (processes your photos)
- RevenueCat — Subscription and purchase management
- TelemetryDeck — Anonymous, privacy-first app analytics (no personal data collected)
Each service processes data according to their own privacy policies, linked above.
Subscriptions & Payments
Foamo offers optional subscriptions managed through Apple's App Store. We use RevenueCat to manage subscription status. We never see or store your payment information — all billing is handled by Apple.
California Privacy Rights (CCPA)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and not be discriminated against for exercising these rights.
Categories of personal information we collect:
- Identifiers — Apple ID, email address
- Visual information — Latte art photos
- Commercial information — Subscription status, credit balance
We do not sell your personal information. We do not share your data for cross-context behavioral advertising.
To exercise these rights, email support@coldstartlabs.dev or delete your account in the app.
Analytics & Tracking
Foamo uses TelemetryDeck for anonymous, privacy-first analytics. TelemetryDeck collects only anonymized usage data (such as which screens are viewed and which features are used) to help us improve the app. No personally identifiable information is ever collected or stored. TelemetryDeck uses differential privacy techniques, meaning even we cannot identify individual users from the data.
You can opt out of analytics at any time from Settings within the app. For more information, see TelemetryDeck's privacy policy.
Data Breach Notification
In the event of a data breach that poses a risk to your rights, we will notify affected users via email (if available) and post a notice in the app within 72 hours of becoming aware of the breach, as required by applicable law.
Data Deletion
You can delete your data at any time:
- Individual pours — Delete any pour and its image from within the app
- All data — Delete your account from Settings within the app. This permanently removes your profile, all pours, photos, and progress from our servers
Children's Privacy
Foamo is not directed at children under 13. We do not knowingly collect personal information from children.
Changes to This Policy
If we change this policy, we will update this page and the "Last Updated" date above.
Contact
If you have questions about this privacy policy, please email us at support@coldstartlabs.dev.