Privacy Policy — Whisky Collection

Last updated: 2026-08-06

This Privacy Policy explains how Pretty Data (CVR 35994289), the data controller, collects and processes personal data when you use the Whisky Collection iOS application (the “App”) and the related pages on prettydata.dk. If you have any questions, contact us at prettydata@outlook.dk.

Information we collect

Information you provide

• Account information: your email address and display name. Your password is handled and stored in hashed form by our authentication provider (Firebase Auth); we never see it in plain text.
• Your cabinet: the bottles you add, including up to three photos per bottle, purchase price, status (sealed / opened / not delivered), maturation age, cask certificate details (cask number, fill date, expected bottling year and yield), personal tasting tags and ratings.
• Bottle photos: images you capture or upload to identify or catalogue bottles.
• Social content: friend requests and accepted friendships, forum threads and posts, comments, and event registrations.
• Guest sign-up (festivals): if you join a festival as a guest, we collect your full name, a nickname, a validated email address and an age confirmation.
• Festival organizer details: if you set up a festival, we collect the festival name, year and date and your contact details (email, website and phone number).

Information collected automatically

• Your device’s IP address, device and operating-system information, and app usage/diagnostic data used to operate and secure the service.

Device permissions

• Camera and photo library: required for the label scanner and for adding photos to your cabinet. Used only when you actively choose to.
• Location: the App may request location permission for regional features (e.g. local currency for price estimates). We do not collect or store precise location data.

How we use AI

When you scan or upload a bottle photo, the image and related text are transmitted through a secure server-side proxy to OpenAI (GPT-4o family) to identify the whisky and generate structured details such as tasting notes, ABV, region, food pairings and a price estimate. OpenAI processes this data on our behalf as a processor. This processing may take place on servers located outside the EU/EEA (e.g. the United States).

How we use your information

• To provide and maintain the App’s features (cabinet, scanner, friends, forum, news).
• To identify bottles and generate whisky information via AI, as described above.
• To enable cabinet sharing with friends you have accepted.
• To send you important service notices and, where permitted, relevant information.
• To protect the service against fraud and abuse and to keep it secure.
• To improve the App using aggregated, de-identified usage data.
• To comply with legal obligations.

Third-party services

We rely on the following processors and services:

• Google Firebase (Authentication, Cloud Firestore, Cloud Storage, App Check) — stores your account and content and secures access. Provided by Google.
• OpenAI — processes bottle photos and text for identification, as described above.
• Public whisky/news sources — the App pulls publicly available news via RSS and, only if you choose to connect it, an optional Bluesky integration.

Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Legal basis for processing (GDPR)

We process your personal data on the basis of: performance of our contract with you (providing the App and its features); your consent (e.g. camera/photo access and optional integrations); our legitimate interests (security, fraud prevention and service improvement); and compliance with legal obligations.

Sharing of information

• Friends: when you accept a friend, they receive read-only access to your cabinet.
• Forum: content you post in the forum is visible to other members.
• We do not sell your personal data.
• We may disclose information where required by law, to protect rights or safety, or to trusted processors acting on our behalf under confidentiality obligations.

Data retention

We retain your data for as long as your account is active and for a reasonable period afterwards. If a club or festival does not renew its licence, access is first suspended while the data is kept, so the organization can return and pick up where it left off. However, personal data is not kept longer than necessary: if a club has not renewed or paid for 12 months, the club and all its associated data are deleted. You can also have your data deleted at any time (see below).

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, contact prettydata@outlook.dk. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

Account deletion

The App provides an in-app option for you to delete your own account at any time, which removes your account and associated data in accordance with App Store requirements. A club or festival administrator can also remove a member’s account. You can additionally request deletion by emailing prettydata@outlook.dk, and we carry it out in accordance with the GDPR.

Payment

Access to the App is purchased by organizations — whisky clubs and whisky festivals — that buy a licence and then invite their members or attendees. Individual members and attendees are not charged in the App; they receive access by invitation. Payments made by organizations are handled on our website or by invoice, as described in our Terms of Sale; where card payment is used, it is processed by our payment provider and we do not store full card details.

Clubs and festivals

If you join through a whisky club or festival, the organization that invited you acts as the administrator of your group or event. That administrator manages access and may see certain activity within their group or event — for example your ratings and comments on the whiskies presented at a tasting or festival. Please direct questions about a specific club or festival to that organization.

Children

The App is not directed to children. We do not knowingly collect personal data from children under 13, and you must be at least 16 years old to consent to the processing of your personal data (or have a parent/guardian consent on your behalf where the law allows). If you believe a child has provided us with personal data, contact prettydata@outlook.dk.

Security

We use physical, electronic and procedural safeguards to protect your data, including Firebase App Check (which rejects requests from anything that is not the genuine App), server-side security rules, and encryption in transit.

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the App after changes indicates acceptance.

Your consent

By using the App, you consent to the processing of your information as described in this Privacy Policy.

Contact

For any privacy-related questions or requests, contact prettydata@outlook.dk.