Privacy Policy

This Privacy Policy describes how Spirited (“we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you use the Spirited mobile application (the “App”) and related services. By using Spirited, you agree to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create a Spirited account, we collect:

• Email address — used for account creation, login authentication, and transactional communications such as subscription confirmations and account notifications.
• Display name (optional) — if you choose to personalize your profile.
• Apple ID information — if you sign in with Apple, we receive a unique identifier and, depending on your Apple settings, your name and email address. Apple may provide a private relay email address if you choose to hide your real email.

We use passwordless authentication, which means we never collect or store passwords.

1.2 Usage Information

As you use the App, we collect information about your interactions to personalize your experience:

• Ingredient inventory — the ingredients you add to your bar so we can match you with recipes you can actually make.
• Recipe interactions — recipes you view, save to favorites, rate, or mark as made, so we can improve recommendations.
• AI mixologist conversations — the messages you exchange with our AI-powered mixologist feature, so the mixologist can provide relevant, context-aware suggestions. Conversations may be reviewed in aggregate to improve the quality of AI responses.
• Drink history — a log of cocktails you have made, enabling features like “make it again” and personalized suggestions based on your taste preferences.
• Search queries — what you search for within the App, so we can surface better results and understand what our users are looking for.

1.3 Device and Technical Information

We automatically collect certain technical information to keep the App running smoothly:

• Device type and model — such as iPhone 15 Pro or iPad Air, to optimize the App experience for your hardware.
• Operating system and version — such as iOS 18.3, to ensure compatibility and diagnose issues.
• App version — to identify which version of Spirited you are using when troubleshooting bugs or rolling out features.
• City-level location — derived from your IP address or, if you grant permission, from your device’s location services. We use this exclusively for weather-based cocktail suggestions (for example, recommending a hot toddy on a cold evening). We never collect or store precise GPS coordinates.
• General analytics — session duration, feature usage patterns, and crash reports, collected to improve App stability and user experience.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Personalized recommendations — matching cocktail recipes to the ingredients in your bar, your taste preferences, and your drink history.
• AI mixologist experience — powering conversational cocktail recommendations, answering your questions about spirits and techniques, and learning your preferences over time within the context of your conversations.
• Weather-based suggestions — recommending drinks suited to your local weather conditions using city-level location data.
• Subscription and payment processing — managing your subscription status, processing payments through Apple, and sending transaction-related communications.
• Account communications — sending essential notifications such as subscription confirmations, renewal reminders, and important policy updates. We do not send marketing emails unless you opt in.
• App improvement — analyzing aggregate usage patterns to improve features, fix bugs, and develop new functionality.
• Customer support — resolving issues you report and responding to your inquiries.
• Safety and security — detecting and preventing fraud, abuse, and unauthorized access to the App.

3. Information Sharing

We do not sell, rent, or trade your personal information to third parties. Period.

We share limited information with the following service providers, only as necessary to operate the App:

3.1 OpenAI

Our AI mixologist feature is powered by OpenAI’s language models. When you interact with the AI mixologist, the content of your conversation is sent to OpenAI for processing. OpenAI processes this data according to their API data usage policies, which means your conversations are not used to train their models. We do not send your email address, name, or other account identifiers to OpenAI — only the conversation content and relevant context such as your ingredient inventory.

3.2 Apple

Apple processes all subscription payments and in-app purchases through the App Store. When you subscribe to Spirited Premium, payment is handled entirely by Apple. We receive confirmation of your subscription status but never see your full payment details (such as credit card numbers). If you use Sign in with Apple, Apple facilitates authentication and shares only the information you authorize.

3.3 Resend

We use Resend as our email delivery service for transactional communications such as login verification links, subscription confirmations, and account-related notifications. Resend processes your email address solely to deliver these messages on our behalf and does not use your information for their own purposes.

3.4 Weather API Providers

We use third-party weather APIs to retrieve current weather conditions for your city-level location. Only your approximate location (city level) is shared with these providers — never your precise coordinates, name, email, or other identifying information.

3.5 Hosting and Infrastructure

Our App backend and data are hosted on secure cloud infrastructure providers. These providers store and process data on our behalf under strict data processing agreements and do not have independent rights to use your information.

3.6 Legal Requirements

We may disclose your information if required by law, legal process, or government request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Spirited, our users, or the public.

4. Data Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption in transit — all data transmitted between the App and our servers is encrypted using HTTPS/TLS protocols.
• Secure hosting — our servers and databases are hosted on infrastructure with enterprise-grade security controls, including firewalls, intrusion detection, and access controls.
• Passwordless authentication — by eliminating passwords entirely, we remove one of the most common attack vectors. Authentication is handled through secure, time-limited verification links and Sign in with Apple.
• Minimal data collection — we only collect the data we actually need to provide our services. Less data stored means less data at risk.
• Regular security audits — we periodically review our security practices, infrastructure, and code to identify and address potential vulnerabilities.
• Access controls — access to user data within our team is restricted to authorized personnel who need it to operate and improve the service.

No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a security breach that affects your personal information, we will notify you promptly in accordance with applicable law.

5. Your Rights

You have the following rights regarding your personal information:

• Access — you can request a copy of the personal data we hold about you. Within the App, you can view your profile information, ingredient inventory, favorites, and drink history at any time.
• Correction — you can update or correct your account information directly within the App. If you need to correct other data, contact us and we will make the changes promptly.
• Deletion — you can request deletion of your account and all associated data. You can initiate this from within the App or by contacting us at cheers@spirited.bar. Upon receiving a deletion request, we will remove your personal data within 30 days, except where we are required by law to retain certain information.
• Data export — you can request a copy of your data in a portable format. Contact us at cheers@spirited.bar and we will provide an export of your personal data within a reasonable timeframe.

To exercise any of these rights, email us at cheers@spirited.bar. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request to protect your account security.

6. Data Retention

• Active accounts — we retain your personal information for as long as your account is active and you continue to use the App.
• Account deletion — when you delete your account, we remove your personal data from our active systems within 30 days. Some data may persist in encrypted backups for a limited period as part of our standard backup cycle, after which it is permanently deleted.
• Aggregate data — we may retain anonymized, aggregate data (which cannot be used to identify you) indefinitely for analytics and service improvement purposes.
• Legal obligations — we may retain certain information beyond the standard retention period if required by law, such as transaction records needed for tax or financial reporting.

7. Third-Party Services

The App may contain links to third-party websites, services, or content that are not operated by us. This Privacy Policy applies only to Spirited. We are not responsible for the privacy practices of third-party services, and we encourage you to review their privacy policies before providing them with your information.

Your use of the Apple App Store is governed by Apple’s own privacy policy and terms of service. Subscription management and payment processing are handled by Apple, and their data practices apply to those transactions.

8. Children’s Privacy

Spirited is a cocktail recipe application intended exclusively for users who are of legal drinking age. You must be at least 21 years of age (or the legal drinking age in your jurisdiction, whichever is higher) to create an account and use the App.

We do not knowingly collect personal information from anyone under the age of 21. If we learn that we have inadvertently collected information from a user under 21, we will promptly delete that information and terminate the associated account. If you believe a minor has provided us with personal information, please contact us immediately at cheers@spirited.bar.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last updated” date at the top of this page.
• Notify you through the App or via email for significant changes.
• Where required by law, obtain your consent before applying material changes.

We encourage you to review this policy periodically. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, we would love to hear from you:

• Email: cheers@spirited.bar
• Subject line suggestion: “Privacy Question” or “Data Request”

We aim to respond to all inquiries within 5 business days.