Privacy Policy

StillNote ("we", "us", or "our") is operated by an individual developer. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use the StillNote app or website (collectively, the "Service").

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and manage your subscription
• Send you a copy of a tasting's results by email, if you provided your email when joining (see "Results Delivery & Email Preferences" below)
• Respond to your support requests
• Comply with legal obligations

We do not sell your personal information to third parties.

If you provide your email address when joining a tasting, we automatically send you a copy of that session's results once your host shares them. We do this on the basis of our legitimate interest in delivering information you actively generated by participating (GDPR Article 6(1)(f)) -- it is not a marketing communication, and we do not ask you to opt into it separately. You can object to receiving it at any time using the unsubscribe link included in every results email, or by visiting our unsubscribe page.

Two other things are always separate, opt-in choices, never bundled with results delivery: letting your host see your email so they can follow up with you, and receiving occasional product emails from StillNote. You can withdraw either of these at any time from the same unsubscribe link.

The Service uses the following third-party providers who may process your data:

• Supabase -- database and authentication hosting
• Vercel -- web application hosting
• Google -- optional sign-in ("Continue with Google"); Google acts as your identity provider if you choose this instead of email/password
• RevenueCat -- subscription and entitlement management
• Stripe -- payment processing for web purchases
• Resend -- transactional email delivery (results summaries, purchase confirmations), and, only for hosts and guests who opt into marketing emails, storing your consent status and basic account info (tier, join history) so we can send those emails
• Plausible -- privacy-friendly site analytics; cookieless, with no persistent identifiers

Each provider operates under its own privacy policy and data processing terms.

We retain your account data and tasting notes for as long as your account is active. We don’t currently offer self-service account deletion in the app. To request deletion, contact us as described in “Your Rights” below -- we will delete your data within 30 days of a verified request, except where retention is required by law.

The Service is intended for users who are 18 years of age or older, or the legal drinking age in their jurisdiction, whichever is greater. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us.

Depending on your location, you may have the right to access, correct, or delete your personal data. Submit a request via our contact form, or email us directly at support@stillnote.app. We will respond within 30 days.

We implement industry-standard security measures to protect your data, including encrypted connections (TLS) and row-level security on our database. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we do, we will update the effective date above. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact us.