Privacy Policy

Welcome to Drink Diary (“the App”), operated by jCode Studio (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our mobile application.

By using Drink Diary, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

Information You Provide

• Phone number — collected when you create an account via SMS verification (Firebase Authentication)
• Display name and username — chosen by you during profile setup
• Drink logs — drink name, category, notes, price, date/time, rating, and temperature preference
• Location — the place name you attach to a drink log, together with its precise latitude and longitude coordinates. Location is optional: you may log a drink without one. Location is private to you and is never shown to other users of the App — see “Location Data” below.
• Photos — images you capture or select from your photo library to attach to drink logs

Information Collected Automatically

• Device information — device type and operating system version, collected by Firebase for authentication and app integrity purposes
• Approximate device location — if you grant location permission, your current coordinates are used to rank nearby places when you search for a location to attach to a drink log. See “Location Data” below.
• Purchase information — if you subscribe to a premium plan, our payments provider records the transaction and a randomly generated subscriber identifier. We never receive your payment card details.
• Device motion — the App reads your device's accelerometer while you view your photo gallery, so the layout can respond to tilting and shaking. This is processed on your device in real time, is never stored, and is never transmitted to us or anyone else.
• We do not collect advertising identifiers or browsing history, and we do not track you across other apps or websites

Location Data

Because the App records where you had a drink, precise location is a core part of the service. You should understand two things about how it is handled:

• Coordinates you save with a drink log are stored on your device and, when you are signed in, in a private area of our cloud database that only your own account can read. They are not shared with your followers.
• When you search for a place, your search text and — if you have granted location permission — your current coordinates are sent to Photon, a third-party place-search service, in order to return nearby results. See “Third-Party Services” below.

You can use the App without granting location permission, and you can log drinks without attaching a location.

We use the information we collect to:

• Create and manage your account
• Enable social features (finding friends by username, following friends, viewing friends' drink logs)
• Sync your drink logs across sessions when you are signed in
• Show you where you logged a drink, including on a map of your own logs
• Suggest nearby places when you attach a location to a drink log
• Manage premium subscriptions and restore previous purchases
• Send you a daily reminder to log a drink, if you enable it. Reminders are scheduled on your device; we do not send push notifications from a server.
• Respond to your questions and support requests

We do not sell, rent, or trade your personal information to third parties. We do not use your data for advertising.

Drink Diary requests access to your device camera and photo library solely to allow you to attach photos to your drink logs. Photos are stored locally on your device and, if you are signed in, uploaded to Firebase Storage associated with your account. We do not use your photos for any other purpose.

We use the following third-party services to operate the App. We do not sell your data to any of them, and none of them are advertising networks.

Google Firebase (Google LLC) — account, data storage, and app integrity

• Firebase Authentication — handles phone number verification via SMS
• Firebase Firestore — cloud database for your profile, drink logs, and social data
• Firebase Storage — cloud storage for the photos attached to your drink logs
• Firebase App Check — verifies that requests come from a genuine copy of the App
• Subject to Google's Privacy Policy: https://policies.google.com/privacy

Photon, operated by komoot GmbH (Germany) — place search

• When you search for a location to attach to a drink log, your search text is sent to Photon so it can return matching places.
• If you have granted location permission, your current latitude and longitude are sent with that search so nearby results rank first. Requests are made as you type.
• We do not send your name, phone number, username, or any drink log to Photon, and no account identifier is attached to these requests.
• Subject to komoot's Privacy Policy: https://www.komoot.com/privacy

RevenueCat, Inc. (USA) — subscription management

• If you purchase or restore a premium subscription, RevenueCat processes the transaction receipt and stores a randomly generated subscriber identifier together with your subscription status.
• Payment is handled entirely by Apple. Neither we nor RevenueCat receive your payment card details.
• Subject to RevenueCat's Privacy Policy: https://www.revenuecat.com/privacy

We do not use Google Analytics, advertising networks, or cross-app tracking tools.

Your drink logs are stored locally on your device, protected by the device encryption iOS applies while your device is locked. When you are signed in, your data is also synced to Firebase Firestore and Firebase Storage, hosted on Google Cloud infrastructure with encryption at rest and in transit.

Your phone number is used only for sign-in verification. It is held by Firebase Authentication and is not stored in your public profile or shown to other users. Other users can only see your display name, username, and profile emoji.

Who can see your drink logs

• Drink logs you save while signed out stay on your device only.
• When you are signed in, your drink logs — the drink name, category, photo, price, rating, and notes — are readable by people who follow you.
• Location is never shared. Neither the place name nor the coordinates are visible to your followers. They are stored separately from the rest of the drink log, in an area only your account can read, so that your own map and history still work across devices.
• Anyone can search for your username and choose to follow you. There is currently no approval step before someone becomes a follower.
• Photo links generated for your drink photos remain valid to anyone who has previously obtained the link, even after that person stops following you.

While we take reasonable measures to protect your information, no method of transmission over the internet is 100% secure.

You may delete your account at any time from within the App: Profile → Delete account

Deleting your account permanently removes:

• Your profile (display name, username, phone number)
• All your drink logs from our servers
• All drink photos you uploaded to our cloud storage
• Your friends/following data, including the follow records other users hold for you

Local data stored on your device is also cleared. This action cannot be undone.

We keep your information only while you have an account. There is no automatic expiry: your drink logs, photos, and profile are retained until you delete them or delete your account.

• Profile (display name, username, emoji) — until you delete your account
• Phone number — held by Firebase Authentication for as long as your account exists, and removed when you delete it
• Drink logs — until you delete the individual log or your account
• Location records (place name and coordinates) — stored separately from the rest of the drink log, in an area only your account can read. Deleted when you delete the drink log they belong to, or your account.
• Photos — until you delete the drink log they belong to, or your account
• Following and follower records — until you unfollow, or delete your account
• Data stored on your device — until you delete it in the App or uninstall the App
• Subscription records — retained by our payments provider for as long as required for accounting and tax purposes, which may extend beyond the deletion of your account

Place searches sent to Photon are not stored by us and carry no account identifier. Any retention on their side is governed by komoot's own privacy policy.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the following applies to you.

Who is responsible for your data

jCode Studio is the data controller for the personal data described in this policy. You can reach us at joan@jcodestudio.com.

Legal bases for processing

• Performance of a contract (Art. 6(1)(b)) — creating and running your account, syncing your drink logs, providing social features, and managing subscriptions. Without this data the App cannot function.
• Consent (Art. 6(1)(a)) — access to your location, camera, photo library, and notifications. You grant these through iOS permission prompts and may withdraw them at any time in iOS Settings, without affecting processing carried out before withdrawal.
• Legitimate interests (Art. 6(1)(f)) — keeping the service secure and verifying that requests come from a genuine copy of the App (Firebase App Check), and preventing abuse of SMS sign-in. We consider these interests balanced against your rights because the data involved is limited and is not used to profile you.

Your rights

You have the right to:

• Access — obtain a copy of the personal data we hold about you
• Rectification — have inaccurate data corrected
• Erasure — have your data deleted. You can do this yourself at any time via Profile → Delete account.
• Restriction — ask us to limit how we process your data
• Portability — receive your data in a structured, machine-readable format, or ask us to transmit it to another provider
• Object — object to processing carried out on the basis of legitimate interests
• Withdraw consent — at any time, for anything based on consent
• Complain — lodge a complaint with your national supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, contact us at joan@jcodestudio.com. We will respond within one month.

International data transfers

Our cloud infrastructure and payments provider are operated by companies based in the United States, so your personal data is transferred outside the EEA and UK. These transfers are protected by the European Commission's Standard Contractual Clauses and, where the recipient participates in it, the EU–US Data Privacy Framework. Photon is operated by komoot GmbH in Germany, so place searches remain within the EEA.

You may request details of the safeguards that apply by contacting us.

Automated decision-making

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

Drink Diary records drinks, including alcoholic drinks, and is intended for adults. The App is rated 17+ on the App Store and is not directed to children.

You should not use the App if you are under 18, or under the legal drinking age where you live if that age is higher. We do not knowingly collect personal information from anyone under 18.

In the EEA and UK, where a child's consent is required for online services, the applicable age is between 13 and 16 depending on your country. We do not knowingly process the personal data of any child below the applicable age.

If you believe a child has provided us with personal information, contact us at joan@jcodestudio.com and we will delete it promptly.

Under the California Online Privacy Protection Act (CalOPPA), California residents have the right to:

• Know what personal data we collect
• Know whether we disclose personal data to third parties
• Access and request deletion of their personal data
• Not be discriminated against for exercising their privacy rights

We do not sell personal information. We do not track users across third-party websites. To exercise your rights, contact us at joan@jcodestudio.com.

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know — You may request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete — You may request deletion of your personal information, subject to certain exceptions
• Right to Correct — You may request correction of inaccurate personal information
• Right to Opt-Out — We do not sell or share personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information — The precise geolocation attached to your drink logs is sensitive personal information under the CPRA. We use it only to provide the features you asked for: showing where you logged a drink and finding nearby places. It is not disclosed to other users of the App, and we do not use it to infer characteristics about you. You may still ask us to limit its use by contacting us.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of these rights

Categories of personal information collected:

• Identifiers (phone number, username, subscriber identifier)
• Geolocation data (precise coordinates attached to drink logs)
• Photos and visual content
• User-generated content (drink logs)
• Commercial information (subscription status and purchase history)

Sensitive personal information collected: precise geolocation, which is kept private to your own account and is not disclosed to other users. We do not collect any other category of sensitive personal information, and we do not use it for purposes requiring an opt-out.

Purpose of collection: App functionality and social features only.

Retention: see “Data Retention” above. We do not sell or share personal information, and we have not done so in the preceding twelve months.

To submit a CCPA/CPRA request, contact us at joan@jcodestudio.com. We will respond within 45 days.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the “Last Updated” date at the top of this page. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy, your data, or your rights, please contact us:

• jCode Studio
• Website: https://www.jcodestudio.com/apps/drink-diary
• Email: joan@jcodestudio.com