Privacy Policy

MyDrams (“we”, “us”, “our”) is a personal whisky tasting journal available at mydrams.app and on Android via Google Play. The data controller is the MyDrams service operator, contactable at whisky@mydrams.app.

• Email address — provided when you sign in. Used solely for passwordless authentication (magic-link email).
• Tasting records — bottle names, distilleries, scores, tasting notes, flavour tags, and dates you enter yourself.
• Bottle photos — label images you choose to upload.
• Collection data — ownership status, prices, volume remaining, and wishlist entries you record.
• Profile information — display name and username you set.
• Technical data — crash reports and error diagnostics collected automatically to keep the app stable (see Section 4).

We do not collect location data, advertising identifiers, or any data from your device beyond what you explicitly submit.

• Contract (Art. 6(1)(b)) — processing your email and tasting data is necessary to provide the service you signed up for.
• Legitimate interests (Art. 6(1)(f)) — crash reporting and error monitoring to maintain a stable, secure service.
• Consent (Art. 6(1)(a)) — where we ask for your explicit permission, such as camera access for label scanning.

We share data only with the following processors, each bound by a Data Processing Agreement:

• Supabase Inc. (USA / EU regions) — database, authentication, and file storage. Your data is stored in the EU region. Privacy policy.
• Vercel Inc. (USA) — application hosting and edge delivery. Privacy policy.
• Sentry (Functional Software Inc.) (USA) — error and crash reporting. Crash reports may include device type, OS version, and a stack trace. No personal tasting data is included. Privacy policy.

We do not sell, rent, or share your data with advertisers or any other third parties.

We retain your data for as long as your account is active. If you delete your account, all personal data — including your email, tasting records, and uploaded photos — is permanently deleted within 30 days. Anonymised, aggregated statistics (e.g. total number of tastings) may be retained indefinitely as they cannot identify you.

If you are in the European Economic Area or United Kingdom, you have the following rights:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data (“right to be forgotten”).
• Portability — receive your data in a structured, machine-readable format.
• Restriction — ask us to limit how we process your data in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email whisky@mydrams.app. We will respond within 30 days.

MyDrams uses a session cookie set by Supabase to keep you signed in. No advertising or tracking cookies are used. The app may store preferences in your browser's local storage for performance; this data never leaves your device.

MyDrams is intended for users of legal drinking age in their country of residence. We do not knowingly collect data from anyone below the legal drinking age. If you believe a minor has created an account, contact us and we will delete it promptly.

Our processors (Supabase, Vercel, Sentry) are based in the USA. Transfers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection.

We may update this policy from time to time. If we make material changes, we will notify you by email or via an in-app notice. The date at the top of this page always reflects the most recent revision.

For any privacy questions, contact us at whisky@mydrams.app.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In the UK this is the Information Commissioner's Office (ICO). In the EU, contact the supervisory authority in your member state.