Privacy Policy

Last updated: May 7, 2026

1. Information We Collect

When you use bottlist, we collect the following information:

Phone number	Required to create and authenticate your account via one-time passcode (OTP).
Name	Collected during registration to personalize your experience.
Inventory data	Information about the bottles and spirits you add to your collection, including names, brands, categories, and quantities.
Saved recipes	Cocktail recipes you save within the app.
Usage data	Basic information about how you interact with the App, such as features used and general session information.
Device diagnostics	Crash logs and basic device information (such as device model and OS version) collected to improve app stability and performance.
Subscription data	Entitlement status and transaction identifiers associated with in-app purchases. Payment card details are handled by Apple and are never received or stored by bottlist.

2. How We Use Your Information

We use the information we collect to:

• Authenticate your identity and maintain your account session
• Store and display your personal bottle inventory and saved recipes
• Generate personalized cocktail recipe suggestions using AI
• Improve the App's features and performance
• Manage in-app subscriptions and entitlements
• Communicate important updates about the service via SMS

3. Third-Party Services

Twilio — We use Twilio to deliver one-time passcodes via SMS for account authentication. Your phone number is transmitted to Twilio solely for this purpose. Twilio's privacy policy governs their handling of this data: twilio.com/legal/privacy. Data sent to Twilio may be processed on servers located outside your country of residence; by using SMS authentication, you consent to this transfer.

Anthropic (Claude AI) — Our AI-powered recipe generation and bottle identification features use Anthropic's Claude API. When you use these features, bottle and recipe information needed to generate a response (such as bottle names, brands, categories, and quantities) is transmitted to Anthropic's servers. We do not send your phone number, name, email address, or other personally identifying information to Anthropic. By creating an account and using AI-powered features, you consent to this data being processed by Anthropic. Anthropic's privacy policy governs their handling of this data: anthropic.com/privacy. Data sent to Anthropic may be processed on servers located outside your country of residence; by using AI features, you consent to this transfer.

Serper — We use Serper to perform web searches for bottle and barcode lookups (for example, identifying products from a scanned UPC). Only the search query (such as a product name or UPC code) is transmitted; no user account information, phone number, or personal data is sent to Serper. Serper's privacy policy governs their handling of search queries: serper.dev/privacy

RevenueCat — We use RevenueCat to manage in-app subscriptions and entitlements. When you make or restore a purchase, your bottlist user identifier, anonymized device information, and Apple-issued purchase/receipt data are transmitted to RevenueCat so it can verify your subscription status and notify our servers of changes. Payment card details are handled by Apple and are never sent to RevenueCat or to us. RevenueCat's privacy policy governs their handling of this data: revenuecat.com/privacy

We do not sell, rent, or trade your personal information to any other third parties.

4. Data Storage & Security

Your data is stored in a secure database hosted on Amazon Web Services (AWS) infrastructure in the United States. We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

Account sessions are maintained via secure, HttpOnly cookies with a 30-day expiration. OTP codes expire within 10 minutes of issuance.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within a reasonable time, except where we are required to retain it for legal or legitimate business purposes.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain processing of your data
• Receive a copy of your data in a portable format

To exercise any of these rights, contact us at hello@bottlist.com. We will respond within a reasonable timeframe.

7. Account Deletion

You may initiate account deletion at any time from within the App via the Settings screen. Upon deletion, your personal data will be permanently removed from our systems within 30 days.

Some data may be retained for a longer period if required by law, for fraud prevention, or to resolve disputes.

8. Children's Privacy

bottlist is not intended for use by anyone under the legal drinking age in their jurisdiction. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via SMS. The "Last updated" date at the top of this page reflects when the policy was last revised.

10. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: hello@bottlist.com