1. Introduction

Stillory ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and retain information when you use the Stillory mobile application and website (collectively, the "Service").

2. Information We Collect

Information you provide directly

Account information: Email address and display name when you create an account.
Collection data: Whiskey bottle details, tasting notes, ratings, and photos you add to your collection.
Cooper conversations:The questions you ask Cooper, the in-app whiskey assistant, any photos you attach, and Cooper's answers. Cooper requires an account, and conversations are stored on our servers (see Section 5).
Feedback and support: Messages you send us through the in-app feedback form or by email.

Information collected automatically

Usage data: Features used, screens visited, interaction patterns, and in-app actions (via PostHog analytics).
Device information: Device type, operating system version, and app version.
Purchase information: Subscription status and in-app purchase history, managed by RevenueCat. We do not collect or store payment card details.

Information we do not collect

We do not collect precise geolocation.
Guest mode (unauthenticated use) stores data locally on your device only; no personal data is transmitted to our servers.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Personalize your experience and deliver tasting intelligence features
Answer your Cooper questions using your collection and tasting data, and review stored conversations to improve the quality and accuracy of Cooper's answers
Process in-app purchases and manage your subscription
Send transactional communications (e.g., account confirmations)
Send marketing communications and newsletters, only with your consent, which you may withdraw at any time
Respond to your feedback and support inquiries
Analyze usage trends to improve the Service
Detect, investigate, and prevent fraudulent or unauthorized activity

4. Third-Party Services

We use the following third-party service providers to operate the Service. Each processes data as described and is governed by its own privacy policy.

Service	Purpose	Data shared
Supabase	Database, authentication, file storage	Account info, collection data
PostHog	Product analytics	Usage data, device info (no personal tasting content)
Google Gemini	AI-powered bottle label scanning, and generating Cooper's answers	Bottle label images you submit for scanning; your Cooper questions, attached photos, and the collection and tasting data needed to answer them
RevenueCat	Subscription and in-app purchase management	Purchase history, device identifiers
Resend	Transactional and marketing email delivery	Account email address

We do not sell your personal information to third parties.

5. Cooper

Cooper is the whiskey assistant inside Stillory. When you use it, we store the messages you send, the replies you receive, and any photo you attach. We store these to keep the feature working properly, to investigate problems, and to improve the quality of its answers.

Your messages are processed by Google's Gemini models in order to generate a reply. Google processes this content on our behalf as part of providing that service.

To answer questions about your own collection, Cooper reads the bottles, tastings and wishlist items in your Stillory account. He does not read another person's collection, and no one else's Cooper can read yours.

Cooper conversations are kept for 90 days and then deleted. If you delete your Stillory account, your Cooper conversations and any photos you sent are deleted with it.

Stillory staff can read Cooper conversations in order to improve the feature. Every time a conversation is opened, that access is recorded.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and all associated data at any time (see Section 7). Following deletion, we may retain anonymized, aggregated data that cannot identify you.

7. Your Rights and Choices

You have the right to:

Access the personal information we hold about you
Correct inaccurate personal information
Delete your account and associated personal data — available in-app under Settings > Account > Delete Account, or by contacting us at hi@stillory.com
Opt out of marketing communications at any time via the unsubscribe link in any email or by contacting us
Data portability — request a copy of your data in a portable format

Requests will be fulfilled within 30 days. We may need to verify your identity before processing certain requests.

8. Age Requirement

The Service is intended only for adults aged 18 or older. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us personal information, please contact us at hi@stillory.com and we will delete it promptly.

9. Data Security

We implement industry-standard technical and organizational measures to protect your information, including encrypted data transmission (TLS), access controls, and row-level security on our database. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date and, where required, by in-app notice or email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at hi@stillory.com.