Privacy Policy

1. Who we are

SpiritSafe is operated by SpiritSafeSoftware. References to "we", "us" or "our" in this policy refer to that entity. If you have any questions about this policy, contact us at hello@spiritsafe.app.

2. Age restriction

SpiritSafe is intended solely for adults who meet the minimum legal drinking age in their country — at least 18 years old, or 21 in the United States. We do not knowingly collect data from anyone below that age. If you believe a minor has created an account, please contact us and we will delete it promptly.

3. What data we collect

We collect the following categories of personal data:

Account information

• Email address — used to create and authenticate your account
• Display name (optional) — if you choose to provide one
• Authentication provider details — if you sign in with Google or Apple, we receive a unique identifier and email address from that provider

Collection data you provide

• Bottle entries — names, distilleries, spirit types, ABV, volume, fill levels, purchase details, and any notes you add
• Tasting notes — any flavour or review notes you write
• Wishlist and commitment entries — bottles you want to acquire and associated targets
• Storage locations — the names of physical locations you define to organise your collection
• Custom lists — any named groupings of bottles you create
• Preferences — your chosen sort order, volume units, currency, and other in-app settings

Photos

• Photos you attach to bottle entries are uploaded to and stored in Firebase Storage (operated by Google)

Technical data

• Device type, operating system version, and app version — collected automatically by Firebase to help us diagnose crashes and improve the app
• We do not collect precise location data

4. How we use your data

We use your data only for the following purposes:

• To provide the service — authenticating you, storing and syncing your collection across your devices, and displaying it back to you
• To improve the app — crash reports and technical diagnostics help us identify and fix bugs
• To communicate with you — transactional emails only (e.g. password reset, account verification). We do not send marketing emails unless you explicitly opt in

We do not use your data for advertising, and we do not sell or rent your data to any third party.

5. Third-party services

SpiritSafe is built on Firebase, a platform operated by Google LLC. Firebase provides our authentication, database (Firestore), and file storage. Your data is stored on Google's servers. Google processes this data on our behalf under a Data Processing Agreement that includes Standard Contractual Clauses for transfers outside the EEA.

For more information on how Google handles data, see the Firebase Privacy and Security documentation and Google's Privacy Policy.

We do not currently use any other third-party analytics, advertising, or tracking services.

6. Data storage and retention

Your data is stored on Firebase infrastructure in the United States. We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and collection from our systems within 30 days, except where we are required to retain it for legal or regulatory reasons.

7. Your rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — ask us to correct inaccurate data
• Deletion — ask us to delete your account and all associated data
• Portability — request your data in a portable format
• Objection — object to certain types of processing

To exercise any of these rights, contact us at hello@spiritsafe.app. We will respond within 30 days. EU/EEA residents also have the right to lodge a complaint with their local data protection authority.

8. California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of your personal information. We do not sell personal information. To make a request, contact us at hello@spiritsafe.app.

9. Cookies and local storage

This website uses localStorage in your browser solely to remember whether you have confirmed you meet the minimum age requirement. No tracking cookies or advertising pixels are used on this website.

10. Security

We use Firebase's built-in security features including Firestore security rules and Firebase Authentication to protect your data. All data in transit is encrypted using TLS. While we take reasonable measures to protect your information, no system is completely secure and we cannot guarantee absolute security.

11. Children's privacy

SpiritSafe is not directed at children. We do not knowingly collect personal data from anyone below the minimum legal drinking age in their country. If we become aware that a minor has provided personal data, we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes take effect constitutes acceptance of the revised policy.

13. Contact

If you have any questions, requests, or concerns about this privacy policy or how we handle your data, please contact us at hello@spiritsafe.app.