Crema Ristretta — Privacy Policy

Last updated: July 28, 2026 · Developer: Yusuke Ishii · Brand: bossa crema™

Short version: The public app does not ask for an AI-service login, credential, or token. On Mac, it reads only compatible local usage files that you explicitly select. It has no ads or developer analytics and does not send usage data to a bossa crema collection server. For companion display, the Mac may place a bounded display-only snapshot in your private iCloud database so your iPhone or iPad, Widget, and paired Watch can display it.

1. Scope

This policy applies to the public Crema Ristretta app for Mac and its iPhone/iPad, Widget, and Watch companion surfaces. It does not describe private development builds, a separately distributed external helper, or unrelated bossa crema products.

2. Local usage sources

• The public Mac app does not include a provider-login helper and does not contact an AI provider to acquire your usage limits.
• You select a local folder or compatible JSON file through the macOS system picker. Crema Ristretta receives a read-only security-scoped bookmark for that selected location.
• The app reads only the selected compatible crema-usage.json file. It does not scan an AI tool's entire data directory, read credential files, or request tokens.
• The file may contain a source display name, observation time, bucket labels, usage percentages, window durations, and reset times. The app validates the file and rejects prohibited credential-like content.
• How a file is created and updated is chosen and managed by you. Any external tool, prompt, command, or separately obtained helper is governed by its own terms and privacy practices.

Guided and compatibility paths

The setup guide may describe a guided Codex JSON prompt, Claude Code Statusline compatibility, custom JSON, a future verified user-selected Codex snapshot, or a separately distributed optional Capsule. Availability is labeled in the app. Describing a path does not mean that Crema Ristretta operates, endorses, controls, or guarantees the external tool.

3. Information stored on your Mac

Source bookmarks, source order and visibility, language, window, theme, and display preferences are stored locally in the app's sandbox. Valid display snapshots may be cached locally. Removing a source forgets Crema Ristretta's bookmark and settings; it does not delete your file or change the tool that created it.

4. Companion display and iCloud

• The Mac converts valid local-source results into a bounded display snapshot containing source names, visibility, observation time, bucket labels, remaining percentages, reset times, and window durations.
• The Mac may store that snapshot in the private CloudKit database associated with your Apple Account. Apple operates iCloud and CloudKit under its terms and privacy practices. bossa crema does not operate a separate server that receives a copy.
• The iPhone/iPad companion reads that private snapshot when it uses the same Apple Account and iCloud is available.
• The iPhone/iPad app caches display-only data and preferences in the Crema Ristretta App Group for its Widget and may relay display-only data to a paired Watch through WatchConnectivity.
• Credentials, tokens, cookies, account email addresses, account IDs, raw source files, and security-scoped bookmarks are not included in companion payloads.

5. Information collected by bossa crema

Crema Ristretta does not automatically send personal information, usage values, account details, credentials, local files, analytics, diagnostics, or advertising identifiers to bossa crema. We do not sell app data, use it for advertising, or perform cross-app tracking.

6. Support email

If you email [email protected], we receive only the information you choose to send, such as your email address, message, and attachments. The report link may pre-fill the app version and build number; it does not automatically attach usage values, credentials, logs, diagnostics, or local files.

Support correspondence is used to reply, investigate the issue, maintain security, and meet applicable legal obligations. It is kept only as reasonably necessary for those purposes and is not sold. You may request deletion at the same address, subject to legal or security retention needs.

7. External services

Apple provides iCloud, CloudKit, App Groups, and WatchConnectivity. AI tools used to create a local file are provided by their respective operators. Information that you give directly to Apple, OpenAI, Anthropic, or another external service is handled under that operator's terms and privacy practices. Crema Ristretta is independent and is not endorsed by or affiliated with those providers.

8. Deleting data

• Removing a source forgets the saved read-only bookmark; it does not delete the source file.
• Removing the Mac app and its local container removes locally stored app settings and caches.
• Removing a companion app removes that device's local cache. It does not delete the source file on the Mac.
• Removing the apps may not automatically delete the latest snapshot already stored in your private iCloud database. That record remains under your Apple Account and may be overwritten by later Mac updates or managed through Apple's iCloud data controls.
• bossa crema has no separate app account containing these settings or snapshots.

9. Security

Crema Ristretta uses the macOS App Sandbox, read-only user-selected access, input validation, a private CloudKit database, an app-specific App Group, and WatchConnectivity. No security method can guarantee absolute protection. Do not place credentials or secrets in a local usage file or support message.

10. Children, changes, and contact

Crema Ristretta is a general-purpose utility and is not directed to children. We may update this policy when the public app or its data flow changes. Privacy questions or deletion requests: [email protected].