Privacy Policy
Last updated: 3 October 2026
1. Who we are
Passport Pours ("the app", "we", "us") is operated by Passport Pours LLC, a Wyoming limited liability company, 30 N Gould St, Ste N, Sheridan, WY 82801, USA. Contact us at hello@passportpours.com.
2. The short version
- We collect what you need to use the app: your email, a display name, and the tastings you choose to log.
- Your journal is private unless you join Community and choose to share. Community is optional.
- If you join Community, other users can find you by username or name. People who follow you see your map, stamps and badges, and the tastings you share, in full. New tastings are shared by default, and you can switch sharing off on any tasting.
- Your account is private by default: people must ask to follow you, and you approve each one.
- Beverages you add to the shared catalog (name, producer, country, product photo) are visible to other users.
- You can report content and block people. We review reports and remove content that breaks our Community Rules.
- We do not sell your personal information, show ads, or track you across other apps or websites.
- You can delete your account and your data at any time from inside the app.
3. Information we collect
Account information
- Email address and password. Passwords are stored in hashed form by our hosting provider; we never see them.
- Display name.
- The date and time you confirmed you are of legal drinking age. We do not store your date of birth.
What you add to your journal
- Tastings: beverage, rating, tasting notes, food pairing, your story, and a location you type in (we do not use your device's GPS).
- Photos you attach to tastings. Before a photo leaves your phone, the app resizes it and saves it as a new image without the hidden details cameras add, such as GPS location and phone model.
- Your "Want to Try" list, earned badges, and country progress (your map and stamps).
- Whether each tasting is shared with your followers (see "Community" below).
What you add to the shared catalog (visible to others)
- Beverage details you enter or confirm: name, category, style, producer, country, alcohol content, barcode, and a product photo.
Community (only if you join)
- Profile: your username, display name, whether your account is private or public, and when you accepted the Community Rules.
- Connections: who you follow, who follows you, and pending follow requests.
- Activity: tastings you share, "Cheers" you give and receive, and your Alerts (for example new followers, Cheers on your tastings, friends' new stamps, badges you earn).
- Safety: people you block, and reports you send (the reason and any details you write). If someone reports you, we keep that report and the content it refers to while we review it.
Barcodes you scan
- The barcode number is sent to our server to look it up in our catalog and, if needed, in Open Food Facts and UPCitemdb (see section 5). Only the barcode number is sent to them, never your identity.
Food pairing suggestions
- When you tap "Food pairings" (or "Suggest pairings" in the tasting form) for a drink that has no suggestions yet, our server sends the drink's catalog details (name, category, style, producer and country) to Anthropic, whose AI writes a few dish ideas (see section 5). Nothing about you (no name, email, journal or location) is sent. The suggestions are saved with the drink and shown to everyone who opens it.
- To keep this feature fair, we record which account asked for new suggestions, for which drink, and when, so we can apply a daily limit. These records are deleted after 30 days.
Trips (optional)
- Trips you plan: the trip name, an optional "when" you type (e.g., "Nov 2026"), the countries, and the drinks you tick off. Trips are private: only you can see them.
- The first time anyone plans a trip to a country, our server sends only the country's name to Anthropic, whose AI writes a list of drinks to try there (see section 5). Your trip, name and other details are never sent. The list is saved with the country and shown to everyone who plans a trip there.
- As with food pairings, we record which account asked for a new country list, for which country, and when, to apply a daily limit. These records are deleted after 30 days.
Device permissions (only when you allow them)
- Camera: to scan barcodes and take tasting photos.
- Photo library: to attach existing photos to tastings.
Technical information
- Our hosting provider automatically records basic technical data, such as IP address and request times, to run and secure the service.
- If the app crashes or hits an error, a crash report is sent to Sentry (see section 5).
4. How we use information
- To provide the app: your account, journal, badges, map and catalog.
- Community: to show your profile, shared tastings, map and badges to the people you allow (see "Who can see what" below), to let people find you, and to create your Alerts.
- Safety and moderation: to review reports, remove content or accounts that break our Terms or Community Rules, and apply blocks.
- To suggest food pairings for a drink (AI-generated from the drink's details only).
- To show your trips and a list of drinks to try in each country (AI-generated from the country name only).
- To send account emails (sign-up confirmation, sign-in links, password resets).
- To keep the service secure and prevent abuse.
- To enforce our minimum-age requirement.
We do not use your information for advertising or sell it to anyone.
Who can see what (Community)
| Anyone signed in to Passport Pours | Your followers | Only you | |
|---|---|---|---|
| Username, display name, private/public setting, number of followers and following | ✓ | ✓ | ✓ |
| Your map, country stamps and badges | ✓ | ✓ | |
| Tastings you share: drink, rating, notes, food pairing, location you typed, story, photos, when you posted, number of Cheers | ✓ | ✓ | |
| Tastings with sharing off, your Want to Try list, your email, your Alerts, who you've blocked, reports you've sent | ✓ |
- Private account (default): someone becomes a follower only after you approve their request. You can remove a follower at any time; they are not told.
- Public account: anyone signed in can follow you without asking.
- Your map and stamps are built from all your tastings, including ones with sharing off, but followers see only the countries, not those tastings.
- Cheers: anyone who can see a shared tasting sees how many Cheers it has. Only the tasting's author is told who gave them.
- Blocking: when you block someone, follows between you are removed, Cheers and Alerts between you are deleted, and neither of you can find or see the other in Community. They are not told.
- Reports: the person you report is not told who reported them.
- Tastings you logged before Community launched stay private unless you turn sharing on for them.
5. Who we share it with
Other users, as described in "Who can see what" above, and only for the parts of Community you use.
Service providers who process data on our behalf:
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Supabase | Database, sign-in, photo storage, server functions | All account and app data, including Community data | United States (Ohio) |
| Open Food Facts | Product lookup when a barcode isn't in our catalog | Barcode number only | France |
| UPCitemdb | Second product lookup, mainly for US products | Barcode number only | Not stated by the provider |
| Resend | Sending account emails | Email address | United States |
| Sentry | Crash and error reports, so we can fix bugs | Technical details of the error, device model, operating system and app version. Set up not to collect IP addresses, names or journal content | United States |
| Anthropic | AI food pairing suggestions and trip drink lists (Claude) | Drink catalog details (name, category, style, producer, country) or a country name. No personal information | United States |
We may also disclose information if required by law (for example, a valid legal request concerning content reported to us), to protect the safety of our users, or as part of a merger or sale of the business (with notice to you).
6. How long we keep it
- We keep your data while your account is open.
- Turning sharing off on a tasting, unfollowing, removing a follower, or blocking someone takes effect immediately.
- When you delete your account in the app (Profile → Delete account), we immediately delete your account, journal, photos, badges, lists, username and profile, follows, Cheers, Alerts and blocks, and any reports about you.
- Reports you sent are kept for our moderation records but are no longer linked to you.
- Beverages you added to the shared catalog stay available to other users but are no longer linked to you.
- Records of AI requests (used only for the daily limits on food pairings and trip lists) are deleted after 30 days.
- Reports are kept for 12 months after we resolve them, as a record of our moderation decisions, and then deleted.
- Copies may remain in our hosting provider's backups for up to 7 days before being overwritten.
7. Your rights
Depending on where you live (for example the EU, UK, or California), you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. You can do most of this directly in the app (edit your tastings and Community settings, change sharing, delete your account); for anything else, email hello@passportpours.com. We will not treat you differently for exercising these rights.
Why we're allowed to use your information (EU/UK). We use your information to provide the app you asked for, including your account, journal, catalog, Community, trips and AI suggestions, because it's necessary to provide the service under our terms (contract). We use limited technical information, crash reports, request records for daily limits, and reports to keep the app secure, prevent abuse and moderate Community, because we have a legitimate interest in doing so that doesn't override your rights. We keep or share information when the law requires it (legal obligation). You can object to processing based on legitimate interests by emailing hello@passportpours.com. You also have the right to complain to your local data protection authority.
California. We do not sell or share your personal information, as those terms are defined in California law, and we do not use it for targeted advertising.
8. Age requirement
Passport Pours is only for people who are of legal drinking age where they live, and never younger than 18 (at least 21 in the United States). The app checks your age against the drinking age for the country your phone is set to. We do not knowingly collect information from anyone younger. If we learn that we have (including through a report), we delete the account.
9. International transfers
Our servers and most of our service providers are in the United States (see section 5). If you use the app from outside the US, your information is transferred to and processed in the US, where privacy laws may differ from yours. For people in the EU, UK and Switzerland, we protect these transfers with safeguards recognised by those laws, such as the European Commission's Standard Contractual Clauses (and the UK Addendum) in our providers' data processing agreements, or a provider's certification under the EU–US Data Privacy Framework. You can ask us for more details at hello@passportpours.com.
10. Security
Data is encrypted in transit. Database rules restrict every record to the people allowed to see it: your journal to you, and shared tastings, maps and badges to your approved followers. Tasting photos are stored privately and can only be opened by you and, for shared tastings, your followers. No system is perfectly secure, but we work to protect your information.
11. Changes
We will post updates here and change the "Last updated" date. For significant changes, we will notify you in the app or by email.
12. Contact
Passport Pours LLC — hello@passportpours.com — 30 N Gould St, Ste N, Sheridan, WY 82801, USA