Teal Bar Privacy Policy

Effective July 23, 2026

Teal Bar is made by Tripletail Studios LLC, a Florida limited liability company (“Tripletail Studios,” “we,” or “us”). This policy explains what personal information we handle when you use the Teal Bar app and the tealbar.com website, and the choices you have. It is referenced in our Terms of Service, and you acknowledge both when you create an account. The App is offered only in the United States.

The short version: your bar data lives in your own iCloud account, not on our servers. We keep the minimum we need to run accounts and subscriptions. AI features stay off until you turn them on, and nothing you send them is used to train AI models. We do not sell personal information, we show no ads, and we do not track you.

1. Your account

There are two ways to create an account, and they involve different information.

Sign in with Apple. Apple sends us a unique account identifier and, on your first sign-in only, your name and either your email address or a private relay address if you choose to hide your email.

Email and password. You give us your email address and choose a password. Our authentication provider, Supabase, stores passwords in hashed form. We cannot read them.

These two methods create separate accounts unless you link them in Settings under Sign-In Methods. Whichever you use, our authentication provider holds identity records only: your email or relay address, account identifiers, sign-in timestamps, and related security data. It holds none of your bar content.

2. What we collect and where it lives

Bar content. Your bottles, recipes, drink log, favorites, and shopping lists are stored in your private iCloud (CloudKit) database under your Apple ID. That content syncs between your devices through Apple. It is not stored on our servers and we do not have access to it.

Profile. You can set an optional display name and avatar. They stay on your device.

Age check. Before you create an account you enter your date of birth. The check runs on your device and the date itself is never stored or sent to us. Your device keeps only the result, the region, the date of the check, and the version of the rule applied.

Purchases. Subscriptions are sold through Apple, which processes payment. We never see card numbers. We and RevenueCat, our subscription manager, receive transaction identifiers, product and entitlement status, renewal dates, and storefront so the App knows whether Pro is active.

Diagnostics. Crash reporting through Sentry is off by default. If you turn it on, reports include device model, OS and App versions, and the error trace. Account identifiers, email addresses, prompts, photos, and bar contents are designed to be stripped before anything is sent.

Support and consent records. If you email [email protected], we receive what you send. When you accept the Terms and this policy, your device records the version and date of acceptance.

We do not collect postal addresses, phone numbers, contacts, precise location, advertising identifiers, or browsing history. The App sets no cookies, and tealbar.com is a static site with no analytics or tracking. In the categories used by state privacy laws, we collect identifiers (email, account IDs) and commercial information (subscription status). We do not collect sensitive personal information as defined by those laws. We do not sell or share personal information for cross-context behavioral advertising. This section, together with the retention periods in section 6, serves as our notice at collection.

3. AI features

AI features are off until you enable them. The first time you use one, the App tells you the request will go to Anthropic, our AI provider, and asks your permission. You can withdraw permission at any time in Settings.

Each request carries only what the feature needs: your inventory and taste preferences for drink suggestions, a photo for a label or shelf scan, a bottle name for detail lookup, or a recipe for instructions. Requests are tagged with a random installation identifier used for rate limiting and never include your name, email, account identifier, or password.

Requests pass through our relay, which does not log or keep prompts, photos, or responses. Its rate-limit counters expire within about 24 hours. Under our commercial agreement with Anthropic, your inputs and outputs are not used to train Anthropic’s models, and we do not train models on your content either.

AI output can be wrong and is not a substitute for professional advice. Do not rely on it for allergen, health, safety, or legal decisions. You assume all risk of reliance on AI output. Our Terms of Service cover this in more detail.

4. How we use information

We use the information above to operate your account and the features you request, process AI requests you initiate, manage subscriptions, secure the service and enforce rate limits, prevent fraud and abuse, respond to support requests, verify you meet the age requirement, enforce our Terms and protect the App, our users, and our legal rights, carry out a merger, financing, reorganization, or sale of the business, and meet our legal obligations. We may email you about your account, security issues, or important changes to the service. We do not send third-party marketing, and we will not use your information for a materially new purpose without telling you first and obtaining consent where the law requires it.

We do not sell personal information, share it for targeted advertising, or exchange it for discounts or incentives.

We share information only with the service providers and other recipients reasonably necessary to run the App or complete a business transaction involving Tripletail Studios: Apple (sign-in, iCloud storage, and purchases), Supabase (account identity), Anthropic (AI requests you initiate), Cloudflare (network relay and rate limiting), Sentry (crash reports, only if you enable them), RevenueCat (subscription status), and our professional advisers or transaction counterparties who are bound by confidentiality and use restrictions appropriate to the information. Each service provider is bound by a data processing agreement or comparable contractual restriction that limits its use of your information to the service it performs for us.

We will disclose information if a subpoena, court order, or other valid legal process requires it, or when disclosure is reasonably necessary to comply with law, protect a person’s safety, investigate fraud, security incidents, or abuse, enforce our Terms, or establish, exercise, or defend legal claims, and we limit any disclosure to what is required or reasonably necessary. If Tripletail Studios is acquired, reorganized, financed, or sold, account information may transfer in connection with the transaction subject to this policy’s protections or substantially equivalent protections.

6. How long we keep information

Account records last for the life of your account and are deleted or de-identified within 30 days after you delete it, except where longer retention is reasonably necessary for legal, security, tax, accounting, fraud-prevention, or dispute-resolution purposes or the law requires it. Transaction records are kept up to seven years for tax, accounting, and fraud prevention. Crash reports are kept up to 90 days. Relay rate-limit counters expire within about 24 hours, and prompts, photos, and AI responses are never retained by our relay. Bar content in your iCloud account is yours; you can delete it in the App or through your iCloud settings.

7. Your rights and choices

You can delete your account in Settings. You can turn AI permission and crash reporting on or off at any time, and control camera and photo access in iOS Settings.

Depending on your state, you may have the right to access, correct, delete, or receive a copy of your personal information, and you will not be treated differently for exercising those rights except as allowed by law. This includes rights under the California Consumer Privacy Act and the privacy laws of Virginia, Colorado, Connecticut, Utah, and other states, where they apply to us. To make a request, email [email protected]. We may need to verify your identity or authority to act, including for an authorized agent, and we may deny or limit a request where the law permits. We respond within the time the law sets, generally 45 days. If we deny a request, reply with “Privacy Appeal” and we will answer within your state’s appeal deadline; you may also contact your state attorney general where the law provides that option.

Because we do not sell personal information or use it for targeted advertising, there is no sale or ad-tracking to opt out of. Browser Do Not Track and Global Privacy Control signals are therefore honored by default, as our practices already align with the preferences those signals express. The App does not show Apple’s App Tracking Transparency prompt because there is no cross-app tracking to ask about.

8. Eligibility: 21 or older

Teal Bar deals with alcohol and is for adults. You must be at least 21 years old to use it in the United States, the only place it is offered. Age is confirmed by the on-device date of birth check described in section 2. Because the App provides information about alcohol rather than selling or delivering alcohol itself, a self-declaration is the method we use, consistent with industry practice for apps of this type.

9. Children’s privacy

The App is not directed to children, and no one under 21 may use it, so we do not knowingly collect personal information from any minor, including children under 13 as defined by the Children’s Online Privacy Protection Act. If we learn that a child under 13, or any person under 21, has provided personal information, we will delete it. If you believe that has happened, email [email protected].

10. Security and breach notice

We use administrative, technical, and organizational measures designed to protect information from unauthorized access, use, or disclosure. These measures include encryption in transit, hashed passwords, pseudonymous AI requests, a relay that retains no content, access controls, and rate limiting, and we may add, remove, or change specific measures as technology and risks evolve. No internet service can promise perfect security, but nothing in this paragraph limits the security duties the law places on us. If a breach affects your personal information, we will investigate and notify you and the appropriate regulators as required by law.

11. Changes to this policy

We update this policy when the App, our providers, or the law change, and we revise the date at the top each time. We review it at least once a year. If a change materially affects how we handle personal information, we will give prominent notice in the App and ask you to accept the updated policy before you continue.

12. Contact

Tripletail Studios LLC
7901 4th St N, Suite 300
St. Petersburg, FL 33702
[email protected] · (727) 634-8323