RATIO
← ALL RECIPES
LEGAL

Privacy Policy

Effective date: 2026-07-15

1. Who we are

Ratio (xbloomratio.com) is an unofficial community recipe exchange for xBloom coffee-brewer owners, operated by Ratio(the “data controller” for the purposes of this policy). This policy explains what personal data we collect, why, and the rights you have over it. Ratio is not affiliated with xBloom — see our Terms of Service.

2. What data we collect

We collect the following categories of personal data:

  • Account data: your email address and a password, which is hashed and managed for us by our authentication processor (Supabase Auth) — we never see or store your password in plain text.
  • Log and device data: IP address and basic request/log data collected automatically for security, abuse prevention, and diagnostics.
  • User content: anything you choose to post or store, such as saved recipes, comments, ratings, and your profile handle/display name.

3. Who processes your data

We use Supabase (Postgres database, authentication, and file storage) as our infrastructure processor. Your data — including account data and user content — is hosted on Supabase infrastructure in the ap-northeast-1 (Tokyo) region. Because this means your personal data may be processed outside the Kingdom of Saudi Arabia, this constitutes an international transfer of data; we rely on our processor's contractual and technical safeguards for that transfer. We do not sell your personal data, and we do not share it with third-party advertising or data-broker networks.

4. Cookies

We use a small number of strictly-necessary cookies:

  • An authentication session cookie, set by Supabase Auth, so you can stay signed in.
  • NEXT_LOCALE, which remembers whether you last viewed Ratio in English or Arabic.

We do not use third-party advertising or tracking cookies. If we add analytics in the future, we will update this policy first.

5. Why we process your data (legal basis and purpose)

We process account data and user content to provide the service you sign up for — creating your account, letting you save/rate/comment on recipes, and keeping your saves in sync across devices (performance of a contract with you). We process log/IP data on the basis of our legitimate interest in keeping Ratio secure and functioning correctly. Where required by applicable law, we rely on your consent (for example, the consent you give when you agree to these policies at signup).

6. Your rights

Subject to applicable data-protection law (including Saudi Arabia's Personal Data Protection Law), you have the right to:

  • Access the personal data we hold about you;
  • Correct inaccurate or incomplete data;
  • Delete your account and associated personal data;
  • Object to or restrict certain processing, and withdraw consent where processing is based on consent.

To exercise any of these rights, email us at [email protected]. We will respond within a reasonable time and may need to verify your identity first.

7. Data retention

We keep your account data and user content for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain limited data to comply with legal obligations, resolve disputes, or enforce our agreements.

8. Children

Ratio is not directed at, and is not intended for use by, individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

9. Security

We rely on our processor's (Supabase) security controls — including encryption in transit and password hashing — and apply access controls on our end. No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard practices.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the effective date above and, where appropriate, notify users.

11. Language

This policy is drafted in English, which is the authoritative version. Any Arabic translation is provided as a courtesy for convenience; in the event of any conflict or inconsistency between the English and Arabic versions, the English version prevails.

12. Contact

Questions about this policy, or want to exercise your data rights? Contact us at [email protected].