Cheesy Scribe is a cheese-tasting notebook for Android made by TK ForgeWorks LLC ("we", "us"). This policy explains what happens to the information you put into the app.
The short version: your notes stay on your phone unless you sign in. Signing in is optional. If you do, your tasting notes are backed up to your account so they follow you to your next phone, and you can delete the account, and everything in it, whenever you like. The only other thing that ever leaves your phone is feedback you choose to send us. We don't sell or share any of your data, and the app contains no advertising, analytics or tracking.
What the app stores on your device
Everything you enter is saved on your device, in the app's private storage:
- your tasting notes (cheese names, makers and origins, prices, ratings, texture and flavor scores, the notes and verdict you write, and tasting dates)
- your recent searches
- your settings (theme, units and the display name you choose)
None of this leaves the device unless you sign in and back up your notes, or you send us feedback (both below).
If you sign in
You can sign in with a Google account or with an email address and password. Either way an account is created for you with Supabase, the service that runs our sign-in and database, hosted in the United States (AWS us-east-1). The account holds:
- your email address (from Google, or the one you typed)
- a username, if you choose to set one in the app
- a random account ID that links your data to you, and which sign-in method you used (Google, email and password, or both if you link them)
- your tasting notes: one record per note, holding everything you typed into it (cheese name, maker, origin, price, rating, texture, flavor scores, free-text notes, verdict and dates)
- one profile record holding your "member since" date and your recent search terms
Your theme and units settings stay on the device and are not synced. Every note belongs either to your account or to nobody: notes you made while signed out are not uploaded unless you choose to add them to the account when you sign in (below).
With an email/password account we send you a confirmation email, and a reset email if you forget your password. Those go out through Resend, an email delivery service, from an @tkforgeworks.com address. If you sign in with Google, Google's own policy applies to that step (Google's Privacy Policy); we receive your email address and a Google account identifier, nothing else from your Google account.
Your data in the account is encrypted in transit, visible only to you (the database enforces that per record), and used for nothing but showing it back to you on your devices. We don't read it, analyse it or share it.
Signing out and deleting your account
Signing in with notes already on the phone: the app offers to add them to your account. Notes you add are backed up like any other; notes you leave out stay on the phone, hidden while you're signed in and shown again when you sign out.
Signing out removes the account's notes from the phone; the account keeps them on our side, and signing in again downloads them. Notes you made while signed out stay on the phone and are shown again. If some changes haven't been backed up yet, the app warns you before you sign out.
Deleting your account removes everything stored in it on our side: the sign-in itself, your email address and username, every backed-up note and your profile record. The account is closed the moment you confirm, so it can no longer be signed in to and every phone that was signed in is signed out. The purge finishes within a few minutes, and in any case within 24 hours. Nothing is kept, in anonymised form or otherwise.
You can delete from the app (Account → Delete account, then type DELETE to confirm) or, if you no longer have the app, at tkforgeworks.com/privacy/cheesy-scribe/delete-account: enter your address and confirm from the one-time link we email you through Resend. Notes kept on your phone while signed out are untouched by either.
Feedback you send
The About screen has a Send feedback form. Nothing is sent unless you fill it in and tap Send. When you do, the app sends:
- what the feedback is about (a bug, an idea, something confusing, or just saying hi)
- the rating you pick, if you pick one
- the comments you write
- your email address, only if you enter one so we can reply
- the app's version, your Android version and your phone's model (for example "Google Pixel 9"), shown on the form before you send
It does not send your notes, your display name or anything from your account.
The form goes over an encrypted (HTTPS) connection to our server at tkforgeworks.com, which runs on Cloudflare. The server emails it to our support inbox using Resend. Both process it only to deliver it to us. As part of handling any web request, Cloudflare also sees your IP address, which we don't store.
We use feedback only to improve the app and, if you gave an email address, to reply to you. We keep it in our support inbox for as long as it's useful and never sell or share it.
Who processes your data
- Supabase runs the sign-in and the database that holds your account and backed-up notes, in the United States (AWS us-east-1). Supabase privacy policy.
- Resend delivers our email: account confirmation, password reset, the account-deletion confirmation link, and your feedback to our inbox. Resend privacy policy.
- Google handles the Google sign-in step if you use it. Google's Privacy Policy.
- Cloudflare hosts tkforgeworks.com, including the feedback relay and the account-deletion page. Cloudflare privacy policy.
Each processes your data only to provide the service described. Nobody else gets it. We don't sell it, and there are no advertising, analytics or tracking services in the app.
Things outside the app
- Google Play. When you install the app from Google Play, Google handles the download under Google's Privacy Policy. Google gives developers anonymous, aggregated statistics such as install counts and crash rates. We can't use those to identify you.
- Device backup. If Android backup is turned on for your Google account, Android may include the app's data in your device backup. That backup is stored and managed by Google in your account; we can't access it.
- Links. The About screen links to tkforgeworks.com and this policy. Tapping a link opens it in your browser, outside the app.
Deleting your data
Without an account: delete individual notes in the app, or remove everything by clearing the app's storage in Android settings or uninstalling the app. Nothing of it exists on our side.
With an account: delete your account as described above; that removes everything we hold for you within a few minutes, and in any case within 24 hours.
Feedback: email support@tkforgeworks.com and tell us roughly when you sent it (and the email address, if you gave one). We'll delete it from our inbox.
Children
Cheesy Scribe isn't directed at children under 13 and doesn't knowingly collect personal information from them. If we learn that an account or feedback belongs to a child under 13 we'll delete it.
Changes to this policy
If the app starts handling data differently, we'll update this page and the "Last updated" date before that version is released.
Contact
Questions about this policy: info@tkforgeworks.com.
By mail:
TK ForgeWorks LLC
971 US Highway 202 N, Ste N #4605
Branchburg, NJ 08876