This Privacy Policy describes what information We collect when You use the Service, why We collect it, who We share it with, and the rights You have over it.
We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
Definitions
The words of which the initial letter is capitalized have the meanings below, in singular or in plural.
* Account means a unique account created for You to access our Service or parts of our Service.
* Application refers to Soda Vault, the software program provided by the Company.
* App Installation Identifier means a random identifier generated on Your Device the first time You open the Application. It is not an advertising identifier and it is not provided by Apple or Google.
* Company (referred to as either "the Company", "We", "Us" or "Our") refers to Soda Vault, based in British Columbia, Canada.
* Device means any device that can access the Service, such as a computer, a cellphone or a tablet.
* Personal Data is any information that relates to an identified or identifiable individual.
* Service refers to the Application and our website.
* Service Provider means a company We use to operate part of the Service on Our behalf.
* Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
* You means the individual accessing or using the Service.
Information We Collect
Information You Provide
* Account information: Your email address, username and user ID, and either a password stored only as a one-way hash, or an Apple or Google account identifier if You choose to sign in that way. We never receive Your Apple or Google password.
* Profile information: Your display name, biography, an optional link, a location You type in (a city or region, not GPS or precise geolocation), and whether Your profile is public or private.
* Your bar: the ingredients and bottles You add to Your bar, and when You added each one, so that We can show You which recipes You are able to make.
* Content You create: custom drink entries, collections, ratings, and tried drink logs, including flavor profiles, comments, make-again preferences and any photos You attach.
* Social activity: the accounts You follow and that follow You, pending follow requests, accounts You block, drinks and collections You heart, collections You collaborate on, and points You send to other users.
* Points and purchases: points earned and redeemed, rewards unlocked, and the transaction record returned by the app store for an in-app purchase.
* Support and safety: bug reports You submit and reports You make about content or another account, including anything You write in them.
* Notifications: a push notification token issued by Your Device's operating system, so that a notification reaches the right device.
* Product updates: if You ask to be kept up to date about a product that has not been released, the name, email address and any notes You provide.
Information Collected Automatically
When You use the Service We receive standard technical information, including Your IP address, device and operating system type, browser type, the pages You visit, and the date and time of Your visit.
Product Analytics
We measure how the Application is used with our own first-party analytics. We record an App Installation Identifier generated randomly on Your Device, a daily record that a device opened the Application, and a small set of events describing which screens and actions people move through, each carrying only brief context such as which sign-in provider was used. These events never carry text You typed. If You create an account, Your App Installation Identifier may be associated with it, so that We can understand how people move from installing the Application to signing up.
We do not use Apple's Identifier for Advertisers (IDFA) or Google's Advertising ID, We do not send this data to another company, and We do not use it to build advertising profiles or to follow You across other companies' apps or websites.
Brand Partner Analytics
When You interact with brand partner content within the Application, such as seeing or tapping a brand, viewing a brand page or collection, following a brand's link, or adding an ingredient linked to a brand partner to Your bar, We record the brand or item involved, the type of interaction, and a one-way pseudonymous identifier used solely to estimate how many distinct people an interaction reached.
These events carry no email address, username or user ID, and cannot be used to identify You or to reconstruct anything about Your Account. Brand partners receive aggregate statistics only, and never event-level data. This collection is automatic and cannot be turned off separately from using the Application.
We also produce aggregate reports about ingredient categories, such as gin or blanco tequila, for brand partners and for companies We are speaking to about a partnership. Any figure in those reports that draws on user bars is included only where enough bars are represented that no individual could be identified from it, and the section is left out entirely rather than published on a small base. These reports never name a user and never contain any individual's bar, profile or activity.
Device Permissions
* Camera and photo library: requested only when You add a photo to a drink or a tried drink log. We access only the images You choose to provide.
* Bluetooth: used to set up and communicate directly with compatible Soda Vault hardware over a local connection.
* Location on Android: the Android operating system requires the fine location permission in order to scan for nearby Bluetooth devices, so the Application declares it. We do not collect, store or transmit Your device's location. The only location information We hold is the text You choose to enter on Your profile.
Cookies
Our website uses only cookies that are strictly necessary for it to work: a session cookie and a cross-site request forgery token. We do not use advertising cookies, and there are no third-party advertising or analytics trackers on our website. The Application does not use cookies to track You; it stores its own settings and the App Installation Identifier locally on Your Device.
Age Restrictions
Our Service is intended for users who are at least 17 years of age, subject to regional variations: users in France and Brazil must be 18 or older, and other regions may set their own requirements.
We do not knowingly collect Personal Data from anyone below the applicable age threshold. If You are a parent or guardian and believe Your child has provided Us with Personal Data, please contact Us and We will take steps to remove it.
How We Use Your Information
* To provide and maintain the Service, and to manage Your Account.
* To store and display the content You create, and to show You which recipes Your bar can make.
* To process in-app purchases through the applicable app store, manage Your points balance, and provide access to rewards.
* To keep the Service safe: to review reports about content or accounts, act on violations of our terms, and honour blocks between users.
* To understand and improve the Service, as described under Product Analytics above.
* To contact You about the Service, including account and security messages, push notifications, and updates about a product You have asked to hear about. You can opt out of non-essential messages.
* To respond to Your requests.
* To produce aggregate reporting for brand partners, as described above.
* To evaluate or conduct a merger, financing, acquisition or sale of some or all of Our assets, in which Personal Data held about our users may be among the assets transferred.
What We Do Not Do
* We do not sell Your personal information, and We do not share it with data brokers or advertising networks.
* We do not include advertising, attribution or third-party analytics software in the Application.
* We do not follow You across other companies' apps or websites, and We do not use Apple's IDFA or Google's Advertising ID.
* We do not collect precise or background location.
* We do not send Your photos, email address, username, user ID or any other information that identifies You to an artificial intelligence provider.
These describe how the Service works today. If any of them changes, We will update this policy and our App Store and Google Play disclosures before the change reaches You.
Public and Private Content
Public content can be viewed by other users, may be featured in the Application, may be saved or referenced by others, and is subject to our content moderation. It covers Your username, Your profile details if Your profile is public, and any drink or collection You choose to make public.
Private content is visible only to You, and covers the contents of Your bar, private drinks and collections, and Your tried drink logs. You can edit or delete it at any time, and can make a private drink or collection public at Your choice.
Follow relationships and pending follow requests are visible to the accounts involved. An account You block is not told that You have blocked it.
Who We Share It With
We rely on a small number of Service Providers to operate the Service. Each receives only what it needs, and none may use it for their own purposes:
* Apple and Google: account sign-in, if You choose to use it, and in-app purchases. Purchases are processed by the app store and We never receive Your payment card details.
* Our push notification provider: Your push notification token and the contents of a notification, in order to deliver it.
* Our transactional email provider: Your email address and the contents of the emails We send You.
* Our artificial intelligence provider, used to fill in recipe details such as difficulty, preparation time, tags and equipment: only the recipe itself, meaning its name, ingredients, glass, garnish and instructions. It receives nothing that identifies You.
* Our payment provider for brand partner billing: brand partner billing details only, and no information about Application users.
* Our hosting provider, which stores the database and uploaded images on Our behalf.
We may also share Your information: with brand partners, in aggregate form only, as described above; with other users, where You have chosen to make content public; in connection with a merger, financing or sale of Our business; where required by law or a valid request from a public authority; where necessary to investigate wrongdoing, enforce our terms, or protect the rights, property or safety of Our users, the public or Us; and with Your consent.
How Long We Keep It
We retain Personal Data only for as long as We need it for the purposes described in this policy, or for as long as We are legally required to.
Your Account information and the content You create are kept while Your Account exists, and are removed when You delete it. Brand partner and product analytics events are kept only for as long as they are needed to produce the reporting described above; the aggregate statistics derived from them contain no information that identifies anyone and may be kept indefinitely. Records of the emails and push notifications We have sent are kept as a delivery record.
Where It Is Processed
Your information may be processed and stored on computers located outside Your state, province or country, where data protection laws may differ from those in Your jurisdiction. Your submission of that information represents Your agreement to that transfer. We take steps reasonably necessary to ensure Your data is treated securely and in accordance with this policy.
Your Rights
We are based in British Columbia, Canada, and handle personal information in accordance with Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act.
You have the right to ask what personal information We hold about You, to have it corrected if it is wrong, and to withdraw Your consent to Our use of it, subject to legal and contractual restrictions and reasonable notice. To make a request, contact Us using the details at the end of this policy. If You are not satisfied with Our response, You may contact the Office of the Privacy Commissioner of Canada.
You can also control several things directly in the Application: whether Your profile is public or private, whether each drink and collection is public or private, whether You receive push notifications, and the contents of Your bar and Your tried drink logs.
Deleting Your Account
You can delete Your Account from within the Application, in the account settings section, or by contacting Us. Deleting Your Account removes Your profile, drinks, collections, tried drink logs, bar, hearts, follows and uploaded photos.
Some records survive deletion: records of purchases made through an app store, records of the emails and notifications We have sent, and product analytics events, which are kept with no link to Your Account. Brand partner analytics events contain nothing that identifies You in the first place. We may also need to retain information where We have a legal obligation to do so.
Brand Partner Accounts
If You register for a brand partner account on our website, We collect Your name, work email address, job title, and a password stored as a one-way hash, and use them to operate that account and to contact You about the partnership. Billing details are handled by our payment provider. This section applies to the partner area of our website only, and not to the Application.
Security
We take reasonable measures to protect Your Personal Data, but no method of transmission over the Internet or of electronic storage is completely secure, and We cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Last updated" date above, and where a change is material We will tell You by email or a notice in the Service before it takes effect. Changes are effective when posted.