Privacy Policy

This Privacy Policy explains how Whisky Label Scanner (“the App”, “we”, “us”) collects, uses, shares, and deletes information.

At a glance: We do not sell personal data. Account, scan, and purchase data are used to provide and improve the App. You can turn off advertising measurement in Settings.

Information We Collect

Account and profile information

If you create or use an account, Firebase Authentication and Firebase services process identifiers and profile information needed to authenticate you, synchronize your data, protect the service, and support account deletion.

Scans, analyses, and images

When you choose to analyze a whisky label, the selected image is uploaded to Firebase and sent through OpenRouter to a selected AI model provider to identify the bottle and generate an analysis. The App stores the image, recognized label information, analysis results, timestamps, and journal data that you save. Camera preview frames are not uploaded merely because the camera is open.

OpenRouter routes analysis and translation requests to model providers. Their handling of request data can differ; see OpenRouter’s Privacy Policy and its linked model-provider policies. Generated results can contain errors. Avoid including unrelated personal information in a label photo.

Editorial reviews

The App displays read-only editorial whisky reviews sourced from The Whisky Edition. Viewing a feed or review may create a product-interaction event unless you have opted out of advertising measurement in Settings. Editorial reviews are external content and are not user endorsements.

Purchases

Apple processes payments. RevenueCat processes your App account identifier, transaction identifiers, product identifiers, entitlement and subscription status, purchase dates, renewal, cancellation, expiration, and billing-status events. Our service checks subscription access with RevenueCat using the authenticated account identifier. We store verified access information and request counts to enforce feature access, limit abuse, and avoid duplicate processing. We do not receive your full payment-card number.

Optional eBay searches

When you choose Search on eBay, our Firebase service sends the identified public bottle name, a distinct producer when available, and the regional marketplace to eBay to retrieve listings. We do not include your App account ID, uploaded photos, full analysis, personal notes, advertising identifiers, or purchase history in the eBay search request. Our service uses your authenticated account and search counts to limit abuse.

Listing images load from eBay image hosts, which receive the image network request, including your IP address. Opening a listing takes you to eBay, where its own terms and privacy policy apply. The App does not provide eBay checkout.

Optional advertising measurement

AppsFlyer may process attribution data and limited product-interaction events such as tutorial completion, paywall views, and checkout initiation. Revenue events are sent server-to-server by RevenueCat to avoid duplicate reporting. We do not send scan contents, review text, email addresses, or other free-form personal content in these events.

The App requests Apple’s App Tracking Transparency (ATT) permission after onboarding begins. If ATT is denied or restricted, the App does not collect the advertising identifier (IDFA), but AppsFlyer measurement may continue without it. The App does not present a separate advertising-measurement permission prompt. You can opt out of advertising measurement in Settings; this stops AppsFlyer measurement and partner sharing without affecting access to the App. ATT permission can be changed in iOS Settings.

If you opt out, a previously observed AppsFlyer identifier may remain in secure storage on your device solely to help fulfill a later account-deletion request. Reading this retained identifier does not restart measurement. It is sent to our deletion service when you request account deletion and is cleared from the device after successful account cleanup. Opting out does not itself erase information already received by service providers.

Diagnostics and support

Apple and our service providers may process crash, device, operating-system, app-version, and security diagnostics. If you contact support, we process your email address and the information you include in the request.

How We Use Information

• Authenticate users and provide scanning, analysis, journal, editorial review, optional eBay search, purchase, and restore features.
• Maintain subscription entitlements, prevent fraud and abuse, secure the service, and troubleshoot failures.
• Measure campaign performance subject to your Settings choice and applicable device permissions.
• Respond to support, privacy, and account-deletion requests and comply with legal obligations.

Service Providers and Sharing

We use Apple, Firebase/Google, OpenRouter and its selected AI model providers, RevenueCat, and AppsFlyer. eBay supplies listings when you request a search. These providers process the relevant information to deliver authentication, hosting, image storage, AI processing, purchases, subscriptions, diagnostics, security, attribution, and listing features. Their own privacy policies and data-handling terms also apply. AppsFlyer may provide permitted attribution results to enabled advertising partners such as Meta or X only when the applicable privacy choices allow partner sharing.

We do not sell personal data. We may disclose information when required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards.

Retention and International Processing

Account, analysis, image, and purchase records are retained while needed to provide the App and for security, fraud prevention, accounting, legal obligations, and dispute handling. Provider records and backups may remain for a limited period after deletion. Service providers may process data outside your country using contractual safeguards and other lawful transfer mechanisms.

Account and Data Deletion

You can request permanent account deletion in the App under Settings → Delete My Account. The process blocks further account-data writes and removes your Firebase profile, analyses, saved journal data, analysis and search request records, and owned uploads. It removes personal fields from or hides eligible legacy community contributions and deletes the Firebase Authentication account. If cleanup is interrupted, the request remains available for retry and follow-up.

Provider-related work is tracked separately. AppsFlyer and RevenueCat requests, and applicable Apple authorization revocation, may require identity verification and manual follow-up; they are not all completed automatically when Firebase cleanup finishes. We retain a limited deletion-request record with the identifiers, status, and evidence needed to handle and verify that work. A submitted provider request remains pending until its outcome is verified. Contact us for access, correction, deletion, objection, or help with a provider-related request.

Apple and other service providers may retain limited purchase, security, attribution, or backup records under their own legal and operational requirements. Where information must be retained, we record the applicable basis. Account deletion does not cancel an App Store subscription; you can manage subscriptions through your Apple account.

Device Permissions

• Camera: used to capture whisky labels for scanning.
• Photo Library: used only when you choose to import or save an image.
• Tracking: ATT is requested after onboarding begins. Access to the advertising identifier depends on the resulting permission; measurement may continue without that identifier. The in-app Settings opt-out stops AppsFlyer measurement and partner sharing.

Security

We use reasonable technical and organizational safeguards, but no transmission or storage method is completely secure.

Age Restrictions

The App is intended only for people at or above the legal drinking age in their jurisdiction. We do not knowingly collect information from people below that age.

Changes

We may update this policy as the App or legal requirements change. The date above identifies the latest version.

Contact

For privacy questions or requests, email hpapphelp@gmail.com.