Legal
Privacy Policy
Effective 1 August 2026 · Updated 16 July 2026
Controller
Corementis FZE LLC, AMC – Boulevard-A Building, BLA-BR3-411, Ajman Media City, Ajman, United Arab Emirates, is the data controller. Privacy contact: amir.mortezaie@corementis.se. No EU representative is appointed yet; one will be named here if/when required.
What we collect
Anonymous identity — an ID we create on first visit (via Supabase anonymous auth) so your pins/creations persist; no name or email required. Your creations & pins — cocktails you make (ingredients, name, generated image, hashtags) and drinks you pin; published cocktails are public. Usage events — actions like view/create/mix/pin/share with a coarse region, to power the public Trends stats and improve the app. Camera frames (only if you use fridge-scan) — a photo you capture is sent to our ingredient-detection provider to identify ingredients, then discarded. Analytics — only if you consent. Email — only if you later register.
Why (legal bases, GDPR)
To provide the Service and your account (contract); to run the public feed/Trends and keep the app secure and improve it (legitimate interests); analytics/advertising cookies (consent); to meet legal obligations.
Sharing / processors
We use trusted providers who process data for us: Supabase (database, auth, image storage; data region EU-West / Frankfurt), Vercel (hosting), OpenAI (image generation), Roboflow (fridge-scan detection), Google (Analytics/Tag Manager, consent-gated), Cloudflare Turnstile (bot protection; runs in invisible mode — see Cloudflare’s Turnstile Privacy Addendum at https://www.cloudflare.com/turnstile-privacy-policy/), Pexels (seed imagery). We do not sell your personal data.
International transfers
Providers may process data outside your country (including the EU/US/UAE). Where required we rely on appropriate safeguards (e.g. Standard Contractual Clauses).
Retention
Anonymous identity, creations, pins and events are kept while your identity is active and as needed for the public feed/stats. Ask us to delete your account and creations at amir.mortezaie@corementis.se; note published cocktails may persist in aggregate/anonymised stats.
Your rights
EEA/UK and others: access, rectification, erasure, restriction, portability, objection, and withdrawing consent at any time (cookie banner → "Cookie settings"). You can complain to your local data-protection authority. Requests: amir.mortezaie@corementis.se.
Children
Not directed to children under 18 (the Service includes alcoholic-cocktail content). We do not knowingly collect their data; contact us to remove it.
Security
We use reasonable technical and organisational measures (row-level security, secret management). No system is 100% secure.
Changes
We will post updates here with a new date.