TampDial

Who this covers

This policy applies to the TampDial mobile application for iOS and Android (package com.tampdial.tampdial), published by Safelyo. It does not cover the espresso machine itself or any third-party service you connect the app to.

TampDial is not affiliated with the GaggiMate project. It talks to compatible machines using only their open WebSocket API.

Data we collect

None. We operate no servers and receive nothing from the app. Specifically, TampDial contains no analytics SDK, no crash reporting, no advertising identifiers and no social-network integrations.

Data stored on your device

The app keeps the following in a private local database, readable only by the app itself:

• brew profiles you create or import;
• shot history and its measurements — pressure, flow, weight, temperature, duration;
• connection settings for your machine, such as its address on your network;
• app preferences: language, theme, units.

You can clear history from inside the app, and uninstalling TampDial removes all of it along with the app.

Your local network

TampDial finds your machine over your own Wi-Fi using mDNS/Bonjour discovery, then exchanges control commands and telemetry with it over HTTP and WebSocket. That traffic runs directly between your phone and your machine on your local network. It is not routed through us — we have no servers for it to pass through.

Because espresso machine firmware serves plain HTTP rather than HTTPS, this local connection is not encrypted. It never leaves your network.

iOS asks for Local Network permission the first time; this is what it is used for.

Optional backup and sync

Backup is off by default and only ever runs because you set it up. When you do, the app writes a backup file containing your profiles, shot history and settings to a destination you pick:

• a WebDAV server you specify, such as your own Nextcloud;
• Google Drive;
• iCloud Drive;
• a folder chosen through your device's file browser.

The file travels directly from your device to that destination. We never see it. Once it arrives, the privacy policy of whichever provider you chose applies to it.

For Google Drive the app requests only the drive.file scope, which grants access solely to files the app itself creates — it cannot see the rest of your Drive.

Credentials

If you configure WebDAV or sign in to Google Drive, the password or refresh token is stored in your operating system's secure keystore — the iOS Keychain or the Android Keystore. It is never written to the backup file and never sent anywhere except to the service it authenticates you to.

Third parties

The app makes no network connections other than these two, and only when you have asked for them: your espresso machine on your local network, and the backup destination you configured. There are no other outbound requests.

Children

TampDial is a utility for kitchen equipment and is not directed at children. We do not knowingly collect information from anyone, of any age.

Your control over the data

All of it lives on your device, so you hold it directly. Clear the history in the app's settings, delete individual profiles and shots, or uninstall the app to erase everything at once. Backups you have already uploaded are removed through the storage provider you sent them to.

Changes to this policy

Any future version will be posted on this page with a new effective date. Material changes will also be noted in the app's release notes.

Contact

Questions about this policy: safelyo@gmail.com