Your Privacy Choices.

1. Access Your Data

You may request a copy of all personal data we hold about you at any time.

How

• Send an email to dev@thirstyc.com
• Subject line: "Data Access Request"
• Response time: 30 days maximum
• Delivery format: structured JSON file (readable and portable)

2. Correct Your Data

If any information we hold about you is inaccurate (misspelled name, outdated email, etc.), you can have it corrected.

How

• Directly in the Thirsty Cellar app: Profile → Edit
• Or by email to dev@thirstyc.com with the requested correction

3. Delete Your Account and Data

You may request the complete deletion of your account and all associated data. This action is irreversible.

How

• In the app: Profile → Settings → Delete My Account
• Or by email to dev@thirstyc.com with the subject line "Account Deletion Request"
• Processing time: 30 days maximum
• Data retained after deletion: none, except where required by law (e.g. Apple billing records, retained in accordance with tax regulations)

4. Opt Out of Usage Analytics (PostHog)

We use PostHog (hosted in Germany, GDPR-compliant) to understand how the app is used and improve it. You can disable this data collection at any time.

How

• In the app: Profile → Settings → Privacy → Disable Usage Analytics
• Crash reporting (Sentry) will continue to operate — it is essential for fixing bugs and does not individually identify users

5. Opt Out of AI Label Scanning

The label scanning feature temporarily sends the photo to an AI service (Anthropic Claude, hosted in the USA) for identification. The photo is not retained.

How

• You can choose to never use this feature (manual entry of wine information is always available)
• Before each scan, the app requests your explicit consent
• You can revoke this consent at any time in: Profile → Settings → Privacy

6. Download Your Data (Data Portability)

You have the right to receive your data in a structured, portable format so you can transfer it to another service if you wish.

How

• Send an email to dev@thirstyc.com
• Subject line: "Data Portability Request"
• Delivery format: structured JSON file
• Processing time: 30 days maximum

7. Do Not Sell My Personal Information (CCPA/CPRA, California)

Thirsty Cellar does not sell any of your personal data to third parties, under any circumstances. This practice is prohibited within our organization, regardless of California's requirements.

If you are a California resident and would like formal confirmation of this status, write to dev@thirstyc.com with the subject line "Do Not Sell Confirmation."

8. Withdraw Your Consent

For all data processed on the basis of your consent (analytics, AI label scanning, etc.), you may withdraw that consent at any time.

How

• For analytics: see Section 4
• For label scanning: see Section 5
• For any other consent: email dev@thirstyc.com

Withdrawing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

9. File a Complaint

If you believe your rights are not being respected, you may file a complaint with the appropriate authority:

• Quebec: Commission d'accès à l'information du Québec (CAI) — cai.gouv.qc.ca
• France: Commission nationale de l'informatique et des libertés (CNIL) — cnil.fr
• European Union: the data protection authority of your country
• California: California Privacy Protection Agency (CPPA) — cppa.ca.gov

10. Contact Us

For any questions, requests, or concerns regarding your personal data:

We are committed to responding to all requests within a maximum of 30 days.