Infusion Lab — The ClubSign in

Infusion Labs LLC

Your details,
with care.

Privacy Notice · Updated September 29, 2026

Your Club account.

Infusion Labs LLC uses your name and verified phone number to create and manage your account. Email is optional; existing email records remain associated with their accounts. You may also provide your birthday month and day and choose whether to receive optional Club news. We record account activity needed to manage access, profile changes and requests concerning your information.

How the service operates.

The Club website uses Sites hosting and a Cloudflare D1 database to store account records. Resend delivers account emails. Twilio Verify processes phone numbers and verification requests to deliver and check SMS sign-in codes. These services process information needed to provide their functions. We do not use advertising trackers or sell account information. Hosting and email providers may process operational request and delivery information.

When you choose order texts at checkout, Twilio also processes your verified account phone number, message content and delivery information to send the messages you select. Confirmation and ready-for-pickup texts are a separate choice from the optional Google review request. We record your choices, consent wording version, time, order reference and originating app or website, and retain these records and delivery results for up to 90 days. The phone snapshot is encrypted in our database. Reply STOP to unsubscribe; we retain a protected suppression identifier to honor that choice. Replying START permits new checkout opt-ins but does not restart previous messages.

We do not sell or share mobile numbers, SMS opt-in information or consent with third parties, affiliates or lead generators for their marketing or promotional purposes. Service providers process only the information needed to deliver the selected messages and operate the service. Your sign-in verification alone does not subscribe you to order or review texts. Choices are optional and apply only to the specific order, with up to three messages per opted-in order. Message and data rates may apply. Reply HELP for assistance. See the SMS terms and checkout choices.

Square processes purchases, payments, membership billing and connected loyalty records. Its in-app payment software also processes payment information, user and device identifiers, product interaction information and crash information for payment functionality and analytics. We retain transaction references and records needed to manage orders, balances, membership, rewards and refunds. We do not store full card numbers or card security codes.

If you enable app notifications, we associate a device notification identifier and your notification preferences with your account. Expo and the platform notification services, including Apple Push Notification service on iPhone, deliver permitted order updates, account-related reminders and optional Club messages. Notifications can include an order status and a link to its details. Delivery records help us identify failures and avoid duplicate messages. You can change your choices in the app or disable notifications in your device settings. SMS sign-in consent is separate from these choices.

On supported iPhones, a Live Activity can show a confirmed pickup order's progress on the Lock Screen and Dynamic Island. We associate its delivery identifier with that order and your signed-in session, encrypt the delivery token and use Apple Push Notification service to update its status. The card does not include your name, contact information or order notes. We request the activity to end when the order is collected or canceled, access ends, or its time limit is reached. Delivery tokens are removed after Apple accepts an end update or expiration cleanup; limited delivery records are kept for up to 30 days. You can dismiss the card or disable Live Activities in iPhone settings.

Location is optional. If you allow access while using the app and choose Check distance, the app obtains a foreground location to estimate straight-line distance to the house. It calculates this on your device and discards the coordinates. Infusion does not send your coordinates to its servers or OpenAI, save them, or track your location in the background. The device's mapping service may resolve the house's public street address. Granting permission alone does not request your location; you can use the app without it.

If you choose to add your Club card to Apple Wallet, the app requests a signed pass containing your member name, Club details and personal redemption code and presents Apple's add-card screen. This is separate from using Apple Pay to pay for a purchase. Keep your member code private; staff use it to find your account and record eligible redemptions.

Your private entrance.

You may save a phone number for staff to find your Club account and match your existing Square customer profile. A saved contact number becomes a sign-in number only after explicit SMS verification in the app or website. Requesting a sign-in code does not authorize SMS marketing. Authorized team members can view eligible privileges and record their use. Square may receive your contact number and a Club membership summary, including your Founding number and remaining privileges. The Club remains the source of the actual redemption record; Square Loyalty points remain separate.

We use essential cookies to verify an SMS code in the browser where it was requested and to keep you signed in. Six-digit codes expire after 10 minutes and work once. Five incorrect attempts require a new code. Browser sessions expire after thirty days; signing out ends your current session. Keep sign-in codes private. Security credentials are stored as hashes; pending email content is encrypted and removed after provider acceptance or expiration cleanup.

Optional website analytics.

On our public Club website, you can allow Google Analytics to measure visits and app download link clicks, or choose essential cookies only. Analytics is not loaded before you allow it. Global Privacy Control is honored. You can change your choice through Analytics preferences in the homepage footer. We do not send account pages, sign-in codes, contact details, order notes or payment information to Google through this measurement.

App download links also keep daily totals by website and button, without saving an IP address, device identifier, name or contact details in these totals. These counts represent link requests, not individual people or confirmed downloads. Apple's App Store Connect campaign reports measure attributed downloads separately and may withhold small counts under Apple's privacy thresholds. Completed orders are measured separately from our verified production order records.

The Infusion Lab mobile app connects to your existing Club account. It stores sign-in credentials in your phone's protected storage and remembers your sign-in when you close and reopen the app. Regular use renews the session; 30 days of inactivity requires a new sign-in. Short-lived access credentials are renewed securely. The server stores credential hashes and a brief encrypted response to recover an interrupted renewal. Signing out clears account information from the app; if your phone is offline, it requests server sign-out when a connection is available again. A verified email change or account closure ends mobile access. The app displays your existing personal Club QR and current privileges without creating a second balance.

When joining by SMS in the app, you provide your name, phone number and birthday month and day, then verify a six-digit code sent to that number. Pending registration details are encrypted until verification or expiration cleanup. Existing email accounts can verify and link a sign-in phone without transferring membership to a new account. Codes expire after 10 minutes, with resend limits and at most five check attempts per request. Standard message and data rates may apply. A short-lived link opens a separate payment session on our website; it cannot grant access to website administration. Your account becomes a paid membership only after payment is confirmed.

Your choices.

In the app, you may save named recipes and their selected options, reserve a place at a Club gathering, or ask for help with a verified order. Saved recipes belong to your account. A recipe you choose to share creates a public link containing the menu item and selected options, without your name, personal recipe nickname or written notes. Deleting the recipe disables its shared links.

We read recent orders associated with your verified Square customer record to display order history, pickup updates and repeat recipes. Team members can see gathering reservations and order-care requests and respond in the app. Account closure removes saved recipes, their shared links, gathering reservations and app order-care messages. Square retains its own transaction records under its policies.

Gift drafts store the names and personal note you choose to save. Saving a draft does not purchase or send a gift. Your balance history keeps paid funds and promotional credit separate. If you accept a friend’s invitation, we record the connection and check qualifying payment, collection and refund records before issuing a coffee gift. Your friend sees invitation progress, without your order details. The team records gift collection to prevent repeat use.

Your monthly recap uses available historical Square records and confirmed gift records. Sharing is optional and includes only the summary you choose to share. Account closure deletes gift drafts and revokes your invitation links and unused gift codes. Necessary transaction and reward records may remain for reconciliation and preventing duplicate use.

You can edit your profile and optional news preference in your account. Adding or changing an optional email requires verification. Essential account and service messages are separate from optional Club news. Square processes card payments. We retain payment references and membership billing records to manage payments, renewals and refunds; we do not store full card numbers or security codes.

Service reliability.

Infusion uses limited first-party service measurements to detect failures and keep sign-in, ordering and voice features working. Records contain a random event identifier, a fixed feature and outcome category, response status, duration and environment. They do not contain names, phone numbers, email addresses, chat text, audio, API keys, authentication codes, account identifiers or payment tokens. Device measurements are sent only while the app is active with a valid sign-in; failed submissions are not retained for later delivery. Detailed reliability events expire after 30 days through bounded cleanup. Internal service alerts may remain up to 90 days after they are acknowledged. These service measurements are separate from optional product learning and do not train a model or create a customer profile.

Ask Infusion and personal offers.

Ask Infusion is optional. When you send a message or allow sharing in Privacy, your message, recent messages in the current conversation and any selected menu recipe are sent with a limited current menu to OpenAI to answer and suggest drinks. This choice is saved securely with your login on this device. You can turn sharing off in Privacy at any time; signing out also resets it. Starting a new chat clears the conversation without asking you to enable the feature again. Do not include personal, payment or health information. The chat stays in memory for your current app session and can be cleared with New chat; signing out clears it. Our application does not save the raw conversation to its database. It keeps an encrypted temporary answer and menu decision for up to 24 hours for request recovery, and a minimal usage record. OpenAI may retain information under its own service and security policies.

Voice features are optional and depend on your app version. In versions with dictation, microphone and speech permissions enable on-device recognition; you review the words before sending, and Infusion does not upload or save that audio. In versions with Talk with Ask Infusion, tapping the microphone starts a live AI voice conversation with OpenAI. The short notice beside the conversation controls explains this sharing; no separate confirmation dialog is required to start. Your audio is transmitted to OpenAI, and temporary text from the conversation is used with your recent Ask Infusion chat and selected menu recipes to check answers and prepare order choices. The voice is AI-generated. Our application does not save a voice recording or raw voice transcript to its database; the temporary text sent to the answer service follows the request-recovery and usage practices above. OpenAI may retain information under its own service and security policies. We retain limited voice-session identifiers, consent version, timestamps, connection state and usage for access control and cost accounting. Temporary connection details are encrypted and removed when the session ends or expires; settled session records are removed after 24 hours through scheduled cleanup. If final provider usage is unresolved, minimal session accounting is retained until it can be reconciled. Account deletion stops voice access and clears temporary connection details; unresolved usage accounting may remain until settlement. Granting microphone permission alone does not start a conversation. You can mute the microphone or end the conversation, and leaving the screen or backgrounding the app ends it. Voice cannot place or pay for an order without your final confirmation in the app. You can always type instead.

An optional device setting, off by default, lets Infusion measure limited account-linked Ask Infusion activity: whether an answer was shown, a recipe selected or reviewed, optional fixed-choice feedback, response-time ranges, accepted Ask activity starts, explicit recipe edits, cancelled requests, menu openings, server fallbacks and whether an Ask-origin checkout led to a verified paid or zero-pay order, including multiple items, edits and choices from your account. We measure time from accepted Ask activity start to the first verified completion, repeated measured use on different days, and actual linked Club or Drops redemption. These counts cover opted-in sessions only. Turning usage measurement off stops new observations from this device; previously received records follow the retention period below. Your choice persists on this device across New chat and sign-out. This measurement stays with Infusion and is not sent to OpenAI. It does not store chat text, contact details, health information, order notes or a customer-profile copy. It does not automatically train a model or change prices or rewards. Detailed measurement is removed after 30 days through scheduled cleanup and when account deletion is completed; your information export includes the retained activity. A suggestion or payment attempt is not treated as a completed purchase.

Personalized offers are a separate, optional choice in Notifications. When enabled, we use verified purchase history to assess visit frequency and send a numerical activity summary without your name, contact details or payment details to OpenAI. Names, phone numbers, email addresses, payment details and order notes are excluded. We may offer a limited incentive based on this activity. The same optional setting can also allow reminders based on a current Club expiry or Drops balance; those benefit checks stay within Infusion and do not use OpenAI. You can turn this off at any time; asking a menu question does not turn it on.

Offers have individual conditions and expiry dates. Turning off personalization stops new analysis and promotional delivery. Necessary usage, transaction and redemption records may remain for accounting and preventing duplicate use. Account deletion removes temporary AI content and detaches these AI usage and offer records from your account after outstanding transactions are resolved.

You can optionally save and clear taste choices for milk, drink temperature, sweetness and caffeine. Infusion stores only the listed choices you explicitly save; a single order does not become a saved preference. These choices and temporary patterns from available completed-order recipes and saved Rituals help rank current menu suggestions within Infusion. The stored taste profile, private ordering history and Ritual nicknames are not sent to OpenAI. If you choose a menu recipe in Ask Infusion, its current menu selections may become part of that conversation under the Ask Infusion notice. Derived patterns are computed for the current request, are not stored as saved preferences, and may reflect incomplete history from the current location. Clearing preferences removes their values; a revision number remains to prevent older requests from restoring them. Completing account deletion removes the preference record. Taste choices do not establish ingredients, caffeine content or allergy safety.

Recommendations are suggestions. Review the actual menu options and final checkout price. Ask the house to confirm ingredients, allergies and preparation; AI recommendations do not establish dietary safety.

Notes for the house.

You may add an optional preparation or allergy note to an order. Allergy notes may contain health information. After you agree, we share the note with the Infusion team and Square to prepare that order. Notes are linked to the order and stored in encrypted order records on Infusion’s systems. They may remain with the order under our retention and account-deletion policies; Square retains its own order records under its policies.

These order notes are not sent to OpenAI, saved to your rituals or profile, or used for personalized offers. You can remove a note before submitting the order. Completing account deletion removes the note from Infusion’s order payloads after outstanding transactions are resolved. An allergy note does not confirm that an order can be prepared safely; contact the house before ordering.

Help with an order.

When you use Order help in Ask Infusion, we record the order you select, the problem category, your confirmation and the house’s decision. A health-related category may reveal health information; this form does not ask for a medical description. These records stay with Infusion and are not sent to OpenAI or used for personalized offers.

Structured replacement requests, verification references, decisions and reward records may remain after account closure to resolve service matters and prevent repeated compensation. Closure removes your account contact details and separate free-text order-help messages, but does not automatically erase these structured transaction and support records. Contact us with a request about this information.

The Founding register.

Creating an account does not publish your name or reserve a Founding number. If you later become one of the first one hundred paid members, your full name and assigned number will appear in the public Founding register under the conditions disclosed before enrollment. The register does not display your email, birthday or private account records.

Nothing in these terms waives or limits privacy rights provided by applicable law.

Keeping and removing information.

We keep account information while it is needed to operate your account and respond to your requests. After closure, information may be retained where needed to complete outstanding service matters, maintain transaction records, prevent misuse or meet applicable obligations. A Founding number is never reassigned. Requests affecting a public name are reviewed separately under applicable privacy rights.

Requests about your information.

In the app, open Account, then My details & privacy, then Delete my account. After your confirmation, we remove your private account data and sign you out. Deleting now ends your Club membership and future renewals, including any unused membership benefits. Necessary historical transaction records may remain as described above.

If a payment, remaining balance, purchased gift or provider operation needs to be resolved first, you can submit a deletion request directly in the app. You do not need to contact customer service to initiate it. You can also submit access or correction requests through your account, or contact info@infusionlabcoffee.com. We may need to verify your identity.

For deletion requests that require review, we aim to complete deletion within 7 days. Your request does not itself confirm that deletion is complete. Outstanding payments or other unresolved account obligations may require additional review. These requests made in the mobile app include a private status receipt, available on that device even after sign-out. Check “Deletion request status” in the app for the target date and confirmation once deletion is complete. Keep your receipt; it is available for 90 days after it is issued. If a request takes longer, its receipt will say that it is still being reviewed, and you can contact the Infusion Team for an update. Necessary historical records may be retained as described above.

For privacy questions or account assistance, contact Infusion Labs LLC, care of Infusion Team, at the same email address or at 4638 Mission Blvd, San Diego, CA 92109. Updates to this notice will show a new effective date here.

Your profile and information requests