Privacy Policy
Effective date: October 29, 2026
This Privacy Policy describes the App Store version of DrinkByMe (the "App") and the drinkbyme.com website (the "Website"). Skydrop Apps LLC, 14767 NW Cosmos St, Portland, OR 97229, United States, is responsible for this policy and is the controller under GDPR and UK GDPR. Questions may be sent to support@drinkbyme.com.
1. Summary
The App has no accounts. It does not ask for your name, email address, password, birth date, or exact age. It has no ads and sends no push notifications. If you accept the optional trial-end reminder, it schedules one local notification on your device (Section 2). It offers an optional backup to your own iCloud account (Section 2).
Subscriptions and Lifetime Access are sold by Apple and managed for the App through RevenueCat. The App Store version sends anonymous product-usage analytics to PostHog only if you choose to allow it, and never for users under 21 (Section 4). It also makes the service requests described below.
The App Store privacy label reports Purchases > Purchase History for App Functionality, Usage Data > Product Interaction and Identifiers > Device ID for Analytics, not linked to you. The App does not use data for cross-app tracking.
Most app data stays on your device. It may be included in backups made through iOS, and you can choose to back it up to your own iCloud. We cannot view local data unless you choose to share it or send it to us.
2. Data stored on your device
| Data | Examples | Storage |
|---|---|---|
| Bar and recipe data | Inventory, bundled and user-created recipes, favorites, history, shopping list, notes, ratings, and substitutions | Local SwiftData database |
| Preferences | Drink Preference, flavor preferences, display units, layout settings, and onboarding state | Local app preferences |
| Recent Picks | The recipes you opened from Search results, how many times, and when; up to 20 recipes. No search text is saved. Cleared by Delete All Data | Local app preferences |
| Age Bracket | Under 21 or 21 or Older, never a birth date or exact age | iOS Keychain, with a local fallback if the Keychain is unavailable |
| Trial reminder | Whether you accepted the reminder, and one scheduled local notification 48 hours before a free trial ends. Nothing is sent to us. Cleared by Delete All Data | Local app preferences and the iOS notification system |
| Photos and files | Drink photos, recipe cover photos, cached images, and temporary share files | Local app storage and temporary storage |
| AI recipe import | Pasted text while it is being turned into a draft | Processed on the device; the source text is not saved |
The App does not sync its local database between devices. Apple may include local app data and photos in your iCloud or computer backups, depending on your device settings. We do not receive those backups.
Optional iCloud Backup
The App can back up your data to your own iCloud account. It is off until you turn on Back Up to iCloud in Settings.
- What is backed up: your own recipes and their cover photos, favorites, mixing history with ratings, notes and photos, bar ingredients, shopping list, Drink Preference, flavor preferences, and display units. It does not include your Age Bracket, analytics choice, or onboarding progress.
- Where it is stored: in your private iCloud database for DrinkByMe, under your Apple account and counted against your iCloud storage. We run no server for backups and have no account system. We do not receive your backups. Apple processes iCloud data under its own terms and privacy policy.
- How long it is kept: the App keeps the newest three backups from each of your devices and removes older ones from that device after a new backup is verified. Backups stay until you delete them.
- Restoring: on a new device or from Settings you can restore a backup. Restore only adds what is missing and never deletes or overwrites data already on the device. The age rules still apply: if your Age Bracket is Under 21, alcoholic content stays hidden.
- Deleting: Delete All Data removes data on this device only and does not remove your iCloud backups. Use Delete iCloud Backups in Settings to delete every DrinkByMe backup in your iCloud, including those made by your other devices.
3. Data that leaves your device
| When | Data sent | Recipient and purpose |
|---|---|---|
| You scan a barcode | Barcode, IP address, and User-Agent | Open Food Facts, to look up product data. Returned product images may load from a remote URL. |
| A recipe image loads | IP address, User-Agent, and requested image URL | Cloudinary at res.cloudinary.com, to deliver the illustration. The App does not upload your photos to Cloudinary. |
| You visit the Website, or a recipe link or App Clip route opens | IP address, User-Agent, and requested path; recipe and App Clip paths may include a public recipe ID | Cloudflare, to serve and secure the Website, including the home, Support, /privacy, /terms, and /safety pages, recipe links, and App Clip routes. |
| You buy, renew, or restore a subscription or Lifetime Access | Anonymous app user ID, purchase history, subscription and Lifetime Access status, receipt and transaction data, and device and app version | RevenueCat, to confirm Premium access and restore purchases. |
| You use the iOS share sheet | The text, link, image, note, rating, or other content you choose | The person, app, or service you select. |
| You allow analytics and use the App | Named usage events, a random Analytics ID, and your IP address, which is discarded and not stored | PostHog on its EU cloud, to understand and improve the App (Section 4). Nothing is sent unless you allow it. |
| You contact support | Your email address, message, attachments, and mail-routing data | Cloudflare Email Routing for forwarding and Google Gmail for the mailbox. |
The Website sets no cookies and runs no analytics, advertising, session replay, or other tracking code. Its fonts and images are served from drinkbyme.com. Links to Apple open Apple's websites, where Apple's privacy policy applies.
Cloudflare processes these requests to serve and secure the Website. We do not receive request logs for ordinary visits, and Cloudflare Workers Logs are turned off. Cloudflare may keep aggregate traffic statistics. For requests that Cloudflare's security features block or challenge, its dashboard may show us a sample of recent events, including the IP address, for up to 24 hours. Cloudflare may also ask your browser to report failed connections to drinkbyme.com (Network Error Logging). Successful visits are not reported, and Cloudflare states that it does not store the IP address of these reports.
Website legal basis and rights. We process Website requests and support emails based on our legitimate interests in serving and securing the Website and answering your messages. You may object to this processing, or ask for access, correction, or deletion, at support@drinkbyme.com. If you are in the EU, EEA, or UK, you may also complain to the data protection authority where you live or work.
The App does not set a custom RevenueCat user ID. RevenueCat uses an anonymous app user ID and keeps purchase data according to its privacy policy.
We keep support emails as long as needed to answer you and for up to 12 months after our reply, then delete them. You may ask us at any time to delete them sooner.
Open Food Facts product data is used under ODbL / CC BY-SA terms. Settings > Legal > Acknowledgements lists Open Food Facts, Nuke, PostHog, PLCrashReporter, libwebp, and their applicable licences.
We do not sell personal data. The App Store version does not use advertising identifiers, cross-app tracking, session replay, or remote crash reporting.
4. Analytics in the App Store version
The App Store version collects product-usage analytics only if you choose "Allow Analytics" when the App asks during setup, or later in Settings > Privacy. Until you allow it, the App sends nothing to PostHog and creates no analytics identifier. You can turn analytics off at any time in Settings > Privacy.
The App does not ask for analytics from users who choose Under 21, and no analytics events are sent to or about them.
What is sent. When analytics is on, the App sends named events such as onboarding progress and completion, recipe opening, saving, removal, creation, import, deletion, and sharing (with the recipe ID), mixing start, completion, and abandonment, searches, filters, Drink Preference changes, ingredient changes, and scan outcomes. Each event carries a random Analytics ID generated on your device, the App version, and a build type. PostHog's software also adds device and session details: the operating system name and version, device model and type, screen size, language, time zone, whether the device is on Wi-Fi or cellular, the PostHog software version, and a random session ID that groups events from one use of the App. Network requests also disclose your IP address and User-Agent to PostHog, which discards the IP address when it processes the event and does not store it. The App does not send your name, email address, advertising identifier, location, photos, or the text of your recipes or notes. It does not record your screen or sessions, does not capture app lifecycle or screen-view events, does not use PostHog surveys or feature flags, and does not create a person profile for you.
Provider and location. Analytics events are sent to PostHog's EU cloud at eu.i.posthog.com and stored in data centers in Frankfurt, Germany. PostHog may also process them outside the EU and EEA, including in the United States. The data processing agreement between PostHog and Skydrop Apps LLC covers these transfers through PostHog's participation in the EU-US, UK and Swiss-US Data Privacy Frameworks and through standard contractual clauses. PostHog is our processor. We use the data only to understand and improve the App.
Legal basis. Where the law requires a basis, we rely on your consent. You can withdraw it at any time in Settings > Privacy. Withdrawing does not affect processing before you withdrew.
Retention. PostHog keeps analytics events available for querying for the retention period of our plan, which is currently one year. After that they may stay in PostHog's storage until deleted. We can ask PostHog to delete events earlier or after that period, for example when you send a deletion request.
Turning it off. When you turn analytics off, the App stops sending events and stops the analytics session. Events already sent stay with PostHog until we delete them at your request or PostHog removes them.
Your Analytics ID, access and deletion. Each time you allow analytics after turning it off, the App can create a new Analytics ID. Profile > Analytics ID lists every ID this installation has used, with a copy button, including after you turn analytics off. To ask for access to, or deletion of, the events linked to them, email support@drinkbyme.com and include the IDs. We verify the request by replying to the sending address and answer within 30 days. The App also offers a prefilled email with the ID when you use Delete All Data and always copies the IDs. If you choose Email Support, the App keeps the IDs on your device after deleting your data so you can finish the request. If you skip the email, it clears them. If you no longer have the IDs, we cannot find your events, because they are not linked to your name or email address.
RevenueCat requests used for subscriptions are for App Functionality, not product-usage analytics. Debug builds send no analytics unless a developer turns on a test option.
5. TestFlight builds
TestFlight builds use PostHog for beta analytics. They send the same named events as the App Store version (Section 4) and the same device information, including an IP address and User-Agent, but without the analytics consent screen. Nothing is sent for users who choose Under 21.
TestFlight events go to a separate PostHog project on its United States host at us.i.posthog.com, never to the EU project. The App creates a random anonymous ID and stores it on the device. It never identifies users to PostHog, so it does not create person profiles. PostHog keeps beta analytics according to its privacy policy. App Store builds never send events to the United States project.
This notice is also included in the TestFlight Beta App Description. TestFlight analytics use notice only, without a separate consent screen.
6. Device permissions and on-device processing
The App may ask for:
- Camera access when you scan a barcode or take a drink or recipe photo.
- Photo Library add-only access when you save an image through the share sheet.
- Photo selection through Apple's system picker, which does not give the App general access to your library.
- Notification permission, only if you accept the optional reminder before a free trial ends. If you decline the offer, the App does not ask. The reminder is scheduled on your device and sends nothing to us.
AI recipe import uses Apple FoundationModels on the device. Pasted recipe text does not leave the device. The App also performs supported scan classification on the device.
7. Age Bracket and children
The App Store age rating is 18+, and you must be at least 18 to use the App. There is no parental-consent path for anyone under 18. Alcoholic content is available only to users who select 21 or Older. Users aged 18 through 20, and anyone who chooses Under 21, see mocktails only.
The Age Gate asks for a self-declared Age Bracket. It does not verify identity or exact age. A missing answer is treated as Under 21.
If you select 21 or Older during onboarding, the App asks Apple's Declared Age Range service for a best-effort result. A range with an upper bound below 21 sets the Age Bracket to Under 21. A declined, unavailable, or inconclusive result does not change your selected answer. The App stores only the resulting Age Bracket, not the range Apple shared.
The App is not directed to children, and we do not knowingly collect children's data. If you believe a child contacted us, write to support@drinkbyme.com and we will delete the correspondence.
8. App Clip
The App Clip has no product-usage analytics and stores no app data. It reads the recipe ID from the invocation link, loads the bundled recipe, may load its illustration from Cloudinary, and asks for age confirmation before showing an alcoholic recipe. Its invocation and requested recipe path reach drinkbyme.com through Cloudflare.
9. Your choices and rights
You can:
- Use Profile > Delete All Data to delete the local database, inventory, user recipes, favorites, history, shopping list, preferences, photo files, cached images, and temporary share files. The bundled recipe catalog is then loaded again.
- Delete individual items and photos through the App.
- Change the Age Bracket in Profile. Delete All Data keeps the Age Bracket.
- Avoid barcode lookups, remote recipe images, sharing, or support email by not using those actions.
- Delete the App to remove its local database and files. The Keychain Age Bracket may remain after reinstall. You control existing device backups through Apple settings.
- Allow or turn off analytics at any time in Settings > Privacy.
- Email support@drinkbyme.com to ask for access to or deletion of support correspondence, or of the analytics events linked to your Analytics ID (Section 4).
Use Settings > Delete iCloud Backups to delete every DrinkByMe backup stored in your iCloud, including backups from your other devices.
Profile > Delete All Data affects only data stored by the App on that device, and it clears your analytics consent so the App asks again. It also removes the trial reminder and its preference from the device. It does not delete support email, analytics events already sent, or data processed by providers. It does not cancel or remove purchases: your subscription or Lifetime Access, and the records Apple and RevenueCat keep about them, are not affected, and Restore Purchases brings Premium back.
We directly hold support correspondence and, if you allowed analytics, anonymous analytics events linked only to your Analytics ID. We verify a privacy request by replying to the same email address and answer within 30 days. Tell us the email address and approximate date needed to find the correspondence. We honour access and deletion requests for everyone, subject to any retention required by law.
10. Security
Network requests use HTTPS. The App applies iOS complete file protection to app files. The Age Bracket is stored in the iOS Keychain. These measures do not guarantee absolute security.
11. International use
The App is intended for worldwide distribution except mainland China and storefronts where alcohol-related apps or content are prohibited. Our providers, including Cloudflare, Google, Cloudinary, Open Food Facts, Apple, RevenueCat, and PostHog (EU cloud for the App Store version, United States for TestFlight), may process data in the United States and other countries under their own transfer safeguards.
Our processing is occasional and limited. We do not have an EU or UK representative.
12. Changes to this policy
We will post updates at drinkbyme.com/privacy, update the effective date, and note material changes in the App Store release notes. Continued use after a revised policy takes effect means you accept it.
We do not ask for renewed consent unless a change starts collecting new data. If that happens, we will show a separate consent screen before collection starts, as we do for analytics.
13. Contact
Skydrop Apps LLC
14767 NW Cosmos St, Portland, OR 97229, United States
support@drinkbyme.com