BottlePrice Privacy Policy

Effective: August 6, 2026 · Last updated: August 6, 2026

Who we are

BottlePrice ("we," "us") is operated by Orange House Labs LLC. BottlePrice is a mobile app for comparing liquor prices at nearby stores. Questions about this policy or your data: privacy@bottleprice.app.

Age requirement

BottlePrice requires users to be 21 or older. We collect a date of birth at sign-up solely to verify age. We do not knowingly collect data from anyone under 21; if we learn we have, we delete it. This app is not directed to children, and COPPA does not apply.

Information we collect

You provide

• Account info — your email address, and your name if your sign-in provider shares it, via Sign in with Apple, Google Sign-In, or email. With Sign in with Apple you may use Apple’s private email relay; if you hide your email, we store a non-routable placeholder instead of a real address.
• Date of birth — to confirm you are 21+; stored on your account for age verification.
• Content you submit — price check-ins, price reports and the reason/note when you flag a price, feedback messages, price watches (wishlist), and stores or bottles you add, along with the store and product they relate to.
• Email preferences — whether you opt in to marketing email. When you set or change this choice, we also record the date, your IP address, and your browser/app user-agent as a consent record required for compliance.

Collected automatically

• Location — with your permission, your device location while you are using the app (foreground only), to find nearby stores and prices and to center the map. Your coordinates are sent to our servers to run the "what’s nearby" search and are used for that request only — we do not store your location on your account. To draw the map, your device also shares location and connection data with your platform’s map provider (see "How information is shared"). You can decline or revoke location access anytime in device Settings; location-dependent features won’t work without it.
• Usage & product analytics — interactions such as screen views, taps, and in-app search terms, via PostHog (hosted in the United States), to understand and improve the app. Before events leave your device we strip sensitive fields (email, date of birth, exact coordinates, passwords, and auth tokens). Your location is only ever sent to analytics as a coarse distance bucket (e.g. "1–5 mi"), never as exact coordinates. You can turn analytics off anytime in the app’s settings.
• Diagnostics — crash reports, error and performance data, and masked session replays, via Sentry (hosted in the United States), to keep the app stable. Replays are sampled for a portion of sessions and for sessions where an error occurs; on-screen text and images are masked so their content is not captured. Diagnostic events may include device, app, and connection information (such as your IP address).
• Identifiers — an account identifier (also used as your analytics identifier). We do not store device push tokens or advertising identifiers.
• Security metadata — we use your IP address transiently to rate-limit sign-in and abuse; this is not retained beyond short-lived security counters.

We do not collect payment information.

Email we send

Transactional email — sign-in codes, price alerts you asked for, and account or security notices — is essential to the service and is sent regardless of marketing preferences. Marketing or promotional email is sent only if you opt in, and you can withdraw consent at any time.

How we use information

To provide and operate the app (accounts, sign-in, nearby search); to verify age; to display and improve prices and content; to analyze usage and improve features; to diagnose crashes and maintain security and stability; to send transactional and (with consent) marketing email; and to comply with legal obligations.

How information is shared

We do not sell your personal information and do not use it for cross-app advertising tracking. We share limited data with service providers that process it on our behalf:

• Apple / Google — authentication (Sign in with Apple / Google Sign-In).
• Apple Maps (on iOS) and Google Maps (on Android) — to render the map. When you view the map, your approximate location and connection information are processed by the map provider under their own privacy policies. (Our web preview uses MapLibre with open map tiles.)
• PostHog — product analytics (United States).
• Sentry — crash and error diagnostics, including masked session replay (United States).
• Hetzner — cloud hosting.
• Slack — internal operational alerts to our team; these include only limited information (for example, a partially masked email address when a new user signs up or submits content).

We may disclose information if required by law or to protect our rights, users, or the public.

Data security & retention

We use industry-standard safeguards including encryption in transit (HTTPS/TLS). On iOS and Android, authentication tokens are stored in the device’s secure keystore (Apple Keychain / Android Keystore), which encrypts them at rest. If you use our web preview, tokens are stored in the browser’s localStorage, which is not encrypted at rest; the web preview is intended for a limited audience. Where we retain an Apple sign-in token (used to disconnect your Apple account when you delete your account), it is encrypted at rest and never exposed to clients. No method is 100% secure.

We retain personal data while your account is active and as needed for legal and operational purposes, then delete or de-identify it. When you delete your account, price contributions may be retained in de-identified form (no longer linked to you) so that price history stays accurate.

Your rights & choices

• Account deletion — you can delete your account and associated personal data from within the app under Settings → Delete Account, or by emailing privacy@bottleprice.app. Deletion removes your account, invalidates your sign-in sessions, disconnects Sign in with Apple where applicable, and deletes your sign-in codes, watches, confirmations, flags, and feedback; price contributions are de-identified as described above.
• Analytics — turn product analytics off anytime in the app’s settings.
• Location — manage or revoke permission anytime in device Settings.
• Marketing email — opt out anytime in the app or via the unsubscribe link.
• GDPR (EEA/UK): rights to access, rectify, erase, restrict, port, and object; you may withdraw consent and lodge a complaint with a supervisory authority. Legal bases: consent (location, analytics, marketing email), contract (providing the service), and legitimate interests (security, improvement).
• CCPA/CPRA (California): rights to know, delete, correct, and opt out of “sale”/“sharing.” We do not sell or share personal information as defined by the CCPA. You will not be discriminated against for exercising these rights.

Submit requests to privacy@bottleprice.app; we’ll respond within legally required timeframes.

International transfers

Your information may be processed in the United States, whose data-protection laws differ from those in your country. If you use the app from the EEA or UK, the personal data you provide is transferred to and processed in the United States by us and by our processors — Apple and Google (sign-in), PostHog (analytics), Sentry (diagnostics), Hetzner (hosting), and Slack (internal alerts).

The United States is not the subject of a European Commission adequacy decision, so we rely on the European Commission’s Standard Contractual Clauses — and, for UK personal data, the UK International Data Transfer Addendum — as the safeguard for these transfers, together with the EU–US Data Privacy Framework where a given recipient is certified under it. To request a copy of the safeguards that apply to a specific recipient, email privacy@bottleprice.app.

Changes

We may update this policy; we’ll revise the “Last updated” date and, for material changes, provide in-app or email notice.

Contact

Orange House Labs LLC — privacy@bottleprice.app