Privacy

Your account. An email address and password (handled by Supabase Auth — we never see the password), a handle, and a display name.

Your diary. The drinks you log: the name, the day, and anything optional you add — a mood, a note, a photo, a place, who you were with. This is the heart of it, and it is private to you unless you deliberately share an entry.

Social, only if you use it. Friendships, circles, parties, cheers and comments. Splitting a tab stores the amounts and who owed what.

Points and tabs, only in a venue's room. Sparks and vibe are counts. A tab is a figure a bar recorded — you cannot enter your own spend, by design (the database gives the app no way to write it).

Not your date of birth. The age check computes your age, compares it to the legal drinking age where you are, and discards the date. Only a yes/no stays, on your device.

Your goals (a weekly limit, dry days), your extras toggles, your currency and country, and the age confirmation. A private intention shouldn't need a server.

Every loud feature is opt-in, defaults to off, and is independent of the others — turning one on never turns on another:

• ·Sharing an entry with friends, a circle, or a party.
• ·Appearing on a bar's wall screen. This is granted inside one room, for that night, and it expires when the bar's board closes — there is deliberately no permanent “always show me” setting.
• ·Showing your tab beside your name on that screen. Needs the switch above as well; either alone shows nothing.
• ·The leaderboard in Together — and only friends who also opted in ever appear on it.
• ·A public profile at /u/your-handle (counts only — never your notes, spend, or where you were).
• ·Helping train Ninkasi, our AI bartender, with your chats.
• ·Counting your diary in anonymous taste trends (which only ever report a drink once at least three different people logged it).

If you join a venue's room, its staff see your name in that room — they need it to hand you a perk or record your tab. They also see your standing toward their own reward.

Beyond that, a bar only ever gets counts: how many people came, how many were new, how many rewards are waiting. Never a list of who. And when too few people came for a count to be safe — fewer than five — we hide it rather than round it, because “one new guest” would be pointing at a person.

A bar never learns what you do anywhere else — not at another bar, and not in your diary. We will not build a list of customers who stopped coming, and we will not let a venue push offers at you.

We don't sell your data. We don't run advertising trackers. There is no field anywhere for a phone number or an address, so they cannot be shared even by accident. And there is no negative rating of anyone, ever — not of a guest, and not of a bartender: a bar can praise a customer but never mark one, and a customer can thank a bartender but never complain about one through us.

Your message goes to our server, which asks a model provider to answer. The model is a stateless text function — it has no access to any database. We only keep a conversation to improve Ninkasi if you left “Help train Ninkasi” on, and you can delete that at any time from You → settings.

Wherever you live, you can download everything we hold about you and delete your accountfrom You → Your data. Deletion is immediate and real: the account is destroyed, and the diary, photos, friendships and points go with it. We can't undo it, so take a copy first if you want one.

If you're in the EU/UK you also have rights of access, rectification, restriction, objection and portability under the GDPR; in India, the DPDP Act 2023 gives you access, correction and erasure. The two buttons above cover access, portability and erasure directly. For anything else, write to us.

Data is stored with Supabase (Postgres and file storage) and the app is served by Vercel. Row-Level Security means the database itself refuses to hand over rows you aren't allowed to see — the protection is in the data layer, not just in our code.

brewdiary is for people over the legal drinking age where they live — 21 in the United States and much of India, 20 in Japan, 19 in Korea and most of Canada, 18 across much of Europe. It is not for children, and we don't knowingly keep data from them.

Questions, or a request about your data: hello@bwdy.site.