BottlePrice Privacy Policy

Effective: October 11, 2026 · Last updated: October 11, 2026

Who we are

BottlePrice ("we," "us") is operated by Orange House Labs LLC. BottlePrice is a mobile app for comparing liquor prices at nearby stores. Questions about this policy or your data: privacy@bottleprice.app.

Age requirement

BottlePrice requires users to be 21 or older. We collect a date of birth at sign-up solely to verify age. We do not knowingly collect data from anyone under 21; if we learn we have, we delete it. This app is not directed to children, and COPPA does not apply.

Information we collect

You provide

• Account info — your email address, and your name if your sign-in provider shares it, via Sign in with Apple, Google Sign-In, or email. With Sign in with Apple you may use Apple’s private email relay; if you hide your email, we store a non-routable placeholder instead of a real address.
• Date of birth — to confirm you are 21+; stored on your account for age verification.
• Content you submit — price check-ins, price reports and the reason/note when you flag a price, feedback messages, price watches (wishlist), and stores or bottles you add, along with the store and product they relate to.
• Photos you choose to submit — if you use shelf-photo price capture, the photos of store shelves or price tags that you take or pick in the app, linked to your account and the store you selected, plus the text we read from them (product names, sizes, prices) and any corrections you make while reviewing. Only the photos you choose to submit are uploaded; we do not access the rest of your photo library. Before upload, the app downsizes and re-encodes each photo on your device, which removes embedded metadata such as the GPS location tag. Please avoid including people in your photos. On iOS, the app may also run a photo-quality check on your device using Apple’s Vision framework; the photo itself is not sent anywhere for this check, and only numeric quality measures (such as sharpness) reach our analytics.
• Notification and email preferences — whether watch alerts are turned on, whether you receive watch alert emails, and whether you opt in to marketing email. When you set or change your marketing email choice, we also record the date, your IP address, and your browser/app user-agent as a consent record required for compliance.

Collected automatically

• Location — with your permission, your device location while you are using the app (foreground only), to find nearby stores and prices and to center the map. Your coordinates are sent to our servers to run the "what’s nearby" search and are used for that request only — we do not store your location on your account. To draw the map, your device also shares location and connection data with your platform’s map provider (see "How information is shared"). You can decline or revoke location access anytime in device Settings; location-dependent features won’t work without it.
• Usage & product analytics — interactions such as screen views, taps, and in-app search terms, via PostHog (hosted in the United States), to understand and improve the app. Before events leave your device we strip sensitive fields (email, date of birth, exact coordinates, passwords, and auth tokens). Your location is only ever sent to analytics as a coarse distance bucket (e.g. "1–5 mi"), never as exact coordinates. You can turn analytics off anytime in the app’s settings.
• Diagnostics — crash reports, error and performance data, and masked session replays, via Sentry (hosted in the United States), to keep the app stable. Replays are sampled for a portion of sessions and for sessions where an error occurs; on-screen text and images are masked so their content is not captured. Diagnostic events may include device, app, and connection information (such as your IP address).
• Identifiers — an account identifier (also used as your analytics identifier). We do not store advertising identifiers.
• Device push tokens — if you turn on push notifications, we store the push token (an Expo push token) for each device you enable and associate it with your account, so we can send your watch alerts to it. We delete a device’s token when the app unregisters it (for example, when you sign out on that device), when the push service reports the device is no longer registered, and when you delete your account.
• Alert records — for each watch alert, what it said (bottle, price, and store), when it was sent, whether you opened the push notification (as reported by the app), and whether you clicked a link in the alert email. We keep these records until you delete your account.
• Security metadata — we use your IP address transiently to rate-limit sign-in and abuse; this is not retained beyond short-lived security counters.

We do not collect payment information.

Email and notifications we send

Transactional email — sign-in codes and account or security notices — is essential to the service and is sent regardless of marketing preferences. Marketing or promotional email is sent only if you opt in, and you can withdraw consent at any time.

Watch alerts — when a bottle you watch reaches your target price or becomes available, we tell you by push notification or email. Alert emails are sent through Resend. Every alert email has a one-click unsubscribe link, and you can turn alert emails back on in your profile; this choice is separate from your marketing email choice. Push notifications carry the alert content (bottle name and size, price, and store) through Expo’s push service and then Apple Push Notification service (APNs) or Google Firebase Cloud Messaging (FCM) to your device. You can turn watch alerts off entirely with the notifications setting in the app.

How we use information

To provide and operate the app (accounts, sign-in, nearby search); to verify age; to display and improve prices and content; to read the prices and products in photos you submit so they can become price reports after you review them; to measure and improve the accuracy of that reading (using the text we extracted and your corrections, not your photos); to analyze usage and improve features; to diagnose crashes and maintain security and stability; to send the watch alerts you set up, by push notification or email, and to measure whether they are opened or clicked; to send transactional and (with consent) marketing email; and to comply with legal obligations.

How information is shared

We do not sell your personal information and do not use it for cross-app advertising tracking. We share limited data with service providers that process it on our behalf:

• Apple / Google — authentication (Sign in with Apple / Google Sign-In), and delivery of push notifications to your device (Apple Push Notification service / Firebase Cloud Messaging).
• Expo — push notification delivery. Your device’s push token and the alert content (bottle name and size, price, and store) are sent to Expo’s push service, which passes them to Apple or Google for delivery.
• Resend — email delivery for watch alerts. Your email address and the alert content are sent to Resend to deliver the email.
• Apple Maps (on iOS) and Google Maps (on Android) — to render the map. When you view the map, your approximate location and connection information are processed by the map provider under their own privacy policies. (Our web preview uses MapLibre with open map tiles.)
• AI service provider — artificial-intelligence service. Each photo you submit for price capture is sent to a third-party AI service provider so a vision model can read the prices and product names on it. We send the photo and a fixed set of reading instructions — not your name, email, or account identifier. This service provider processes the photo on our behalf under its terms for API customers (United States).
• PostHog — product analytics (United States).
• Sentry — crash and error diagnostics, including masked session replay (United States).
• Hetzner — cloud hosting.
• Slack — internal operational alerts to our team; these include only limited information (for example, a partially masked email address when a new user signs up or submits content).

We may disclose information if required by law or to protect our rights, users, or the public.

Data security & retention

We use industry-standard safeguards including encryption in transit (HTTPS/TLS). On iOS and Android, authentication tokens are stored in the device’s secure keystore (Apple Keychain / Android Keystore), which encrypts them at rest. If you use our web preview, tokens are stored in the browser’s localStorage, which is not encrypted at rest; the web preview is intended for a limited audience. Where we retain an Apple sign-in token (used to disconnect your Apple account when you delete your account), it is encrypted at rest and never exposed to clients. No method is 100% secure.

Photos. The photos you submit are stored on our servers only temporarily, while they are read and while you review the results. We delete them when you submit or discard the batch, if reading the batch fails before it is ready for review, or automatically when the batch expires (24 hours after upload by default), whichever comes first. The text we extracted and your review answers (not the photos) are kept with your account to maintain price history and measure accuracy, and are deleted when you delete your account.

We retain personal data while your account is active and as needed for legal and operational purposes, then delete or de-identify it. When you delete your account, price contributions may be retained in de-identified form (no longer linked to you) so that price history stays accurate.

Your rights & choices

• Account deletion — you can delete your account and associated personal data from within the app under Settings → Delete Account, or by emailing privacy@bottleprice.app. Deletion removes your account, invalidates your sign-in sessions, disconnects Sign in with Apple where applicable, and deletes your sign-in codes, watches, confirmations, flags, and feedback, your registered push devices and alert records, and any photos and photo-capture review data we still hold; price contributions are de-identified as described above.
• Analytics — turn product analytics off anytime in the app’s settings.
• Location — manage or revoke permission anytime in device Settings.
• Marketing email — opt out anytime in the app or via the unsubscribe link.
• Watch alerts — turn all alert notifications off with the notifications setting in the app. Unsubscribe from alert emails with the one-click link in any alert email, and turn them back on in your profile.
• GDPR (EEA/UK): rights to access, rectify, erase, restrict, port, and object; you may withdraw consent and lodge a complaint with a supervisory authority. Legal bases: consent (location, analytics, marketing email), contract (providing the service), and legitimate interests (security, improvement).
• CCPA/CPRA (California): rights to know, delete, correct, and opt out of “sale”/“sharing.” We do not sell or share personal information as defined by the CCPA. You will not be discriminated against for exercising these rights.

Submit requests to privacy@bottleprice.app; we’ll respond within legally required timeframes.

International transfers

Your information may be processed in the United States, whose data-protection laws differ from those in your country. If you use the app from the EEA or UK, the personal data you provide is transferred to and processed in the United States by us and by our processors — Apple and Google (sign-in), our AI service provider (photo reading), Expo (push notifications), Resend (alert email), PostHog (analytics), Sentry (diagnostics), Hetzner (hosting), and Slack (internal alerts).

The United States is not the subject of a European Commission adequacy decision, so we rely on the European Commission’s Standard Contractual Clauses — and, for UK personal data, the UK International Data Transfer Addendum — as the safeguard for these transfers, together with the EU–US Data Privacy Framework where a given recipient is certified under it. To request a copy of the safeguards that apply to a specific recipient, email privacy@bottleprice.app.

Changes

We may update this policy; we’ll revise the “Last updated” date and, for material changes, provide in-app or email notice.

Contact

Orange House Labs LLC — privacy@bottleprice.app