Privacy Policy

1. Introduction

Digital Dram ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information

We collect information that identifies you as an individual ("Personal Information"), including:

• Account Information: Name, email address, username, password, profile picture
• Profile Information: Bourbon preferences, tasting notes, collection details
• Contact Information: Email address for communications
• Age Verification: Date of birth to verify you are 21 or older

2.2 Usage Information

We automatically collect information about your use of the Service:

• Device Information: Device type, operating system, browser type, unique device identifiers
• Log Information: IP address, access times, pages viewed, app features used
• Location Information: Approximate location based on IP address; precise location if you grant permission
• Analytics Information: Usage patterns, feature interactions, performance metrics

2.3 User-Generated Content

Information you voluntarily provide through the Service:

• Bourbon reviews and ratings
• Drop reports and store availability updates
• Collection inventory and wishlist items
• Comments and messages to other users
• Photos and images you upload

2.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information:

• Essential Cookies: Required for Service functionality
• Analytics Cookies: Help us understand Service usage
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used to deliver relevant advertisements (if applicable)

For more information, please see our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision

• Create and manage your account
• Provide bourbon tracking and collection management features
• Process drop reports and availability updates
• Enable social features and user interactions
• Send service-related notifications

3.2 Service Improvement

• Analyze usage patterns to improve features
• Develop new functionality
• Conduct research and analytics
• Troubleshoot and fix bugs
• Ensure Service security and prevent fraud

3.3 Communications

• Send administrative information and updates
• Respond to inquiries and provide support
• Send marketing communications (with your consent)
• Notify about bourbon drops matching your preferences

3.4 Legal Compliance

• Comply with legal obligations
• Enforce our Terms of Service
• Protect our rights and property
• Protect the safety of users and the public

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on:

• Consent: You have given consent for specific purposes
• Contract: Processing is necessary to provide the Service
• Legal Obligations: Processing is necessary to comply with law
• Legitimate Interests: Processing is necessary for our legitimate interests, such as improving the Service

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

5.1 With Your Consent

We may share your information with your explicit consent.

5.2 Service Providers

We share information with third-party service providers that help us operate the Service:

• Firebase (Google): Authentication and analytics
• Google Cloud Platform: Hosting and infrastructure
• SendGrid: Email communications
• Google Maps: Location and mapping services

5.3 Other Users

Certain information is visible to other users:

• Public profile information (username, profile picture)
• Public reviews and ratings
• Drop reports you submit
• Public collection information (if you choose to share)

5.4 Legal Requirements

We may disclose information if required by law or in response to:

• Court orders or subpoenas
• Government requests
• Law enforcement investigations
• Protection of our legal rights

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5.6 Aggregated Information

We may share aggregated or anonymized information that cannot identify you individually.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Fulfill the purposes outlined in this Privacy Policy

Specific retention periods:

• Account Information: Retained while account is active plus 3 years
• Usage Analytics: 26 months
• Marketing Data: Until consent is withdrawn
• Legal Compliance Data: As required by law

8. Your Privacy Rights

Depending on your location, you may have the following rights:

8.1 GDPR Rights (European Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit processing of your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Automated Decision-Making: Not be subject to automated decisions

8.2 CCPA Rights (California Users)

• Know: Right to know what personal information we collect
• Delete: Request deletion of your personal information
• Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Non-Discrimination: Not be discriminated against for exercising rights

8.3 Exercising Your Rights

To exercise your privacy rights, contact us at:

• Email: [email protected]
• In-app: Settings → Privacy → Data Rights

We will respond to your request within the timeframe required by applicable law (typically 30 days).

9. Children's Privacy

The Service is not intended for individuals under 21 years of age. We do not knowingly collect personal information from anyone under 21. If we learn we have collected information from someone under 21, we will delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws than your country.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Your explicit consent where required

11. Third-Party Websites

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Marketing Communications

With your consent, we may send you marketing communications about bourbon drops, features, and promotions. You can opt-out at any time by:

• Clicking "unsubscribe" in any marketing email
• Updating preferences in Settings → Notifications
• Contacting us at [email protected]

Note: You cannot opt-out of service-related communications (e.g., account verification, security alerts).

13. Do Not Track Signals

Some browsers transmit "Do Not Track" signals. We do not currently respond to these signals, but you can configure your privacy preferences through our cookie settings.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for material changes
• Displaying an in-app notice

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

For GDPR inquiries, EU users may also contact our EU representative:
Email: [email protected]

16. Supervisory Authority

If you are in the European Economic Area and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.