Privacy Policy
Effective date: July 28, 2026
Drupefruit LLC ("Drupefruit," "we," "us," or "our"), a California limited liability company, operates SaintlyHound™ and the Tassel™ AI assistant (the "Service") at saintlyhound.com and app.saintlyhound.com. SaintlyHound is a brand of Drupefruit LLC. This Privacy Policy describes how we collect, use, and protect your information when you use the Service.
1. Information We Collect
Account information
When you create an account, we collect your email address and authentication data through our provider, Supabase Auth. Sign-in uses a one-time email code (and optional magic link) — we do not require or store a password.
Your collection & activity
We store the content you add — your cellar and bar inventory, tasting notes, ratings, saved cocktails and batches, taste preferences, and similar items — so we can provide and personalize the Service.
Photos (scanning)
When you scan a label, shelf, or menu, the image is sent to our AI provider (OpenAI) for analysis. We may briefly process images to produce results; we do not publish your photos or use them to train general-purpose AI models.
Approximate location
We may detect your approximate city from your network connection (via Cloudflare) to show relevant local pricing and, if you enable them, nearby price-drop alerts. We do not collect precise GPS location. You can view or edit your city in Account settings.
Price sightings (Price Scout)
If you confirm or submit a beverage price, we store that sighting (including the item, price, store, and your city) to power community pricing. These submissions may be shown to other users in individual or aggregated form.
Payment information
Paid subscriptions and one-time purchases are processed by Stripe. We do not collect or store your full card number — Stripe handles card data directly. We retain a record of your plan, subscription status, and billing history.
Notifications
If you turn on notifications, we store a browser/device push subscription token and your notification preferences so we can send the alerts you chose (such as weekly picks or price drops). You can turn these off at any time in Account settings or your device settings.
Usage & device data
We collect standard usage and technical data — features used, scans and queries, browser and device type, and performance metrics — to operate, secure, and improve the Service.
2. How We Use Your Information
- Service delivery: to run your account, analyze scans, generate recommendations, manage your cellar and bar, power crowd pricing, and process your subscription.
- Communication: to send account and transactional messages — sign-in codes, receipts, renewal reminders, and important account or security notices — and, if you opt in, the notifications you selected.
- Security: to detect and prevent fraud and abuse, validate access, and enforce our Terms.
- Improvement: to analyze aggregate usage and improve features. We do not use your uploaded photos to train general-purpose AI models.
3. What We Do NOT Do
We do not sell, rent, or trade your personal information for advertising or any other purpose.
We do not send unsolicited marketing blasts — only the transactional and opt-in messages described above.
We do not use the photos you upload to train general-purpose AI models.
4. Information Sharing
We share information only in these limited circumstances:
- Service providers (subprocessors): we use third parties to operate the Service, each processing data on our behalf under their own privacy terms:
- Supabase — authentication and database storage
- Cloudflare — hosting, content delivery, and approximate-city detection
- OpenAI — AI analysis of scans and recommendations
- Stripe — payment processing and subscription management
- Resend — transactional and notification email
- Affiliate networks — we do not currently participate in any, but if we do in the future they may measure clicks on shopping links; see our Affiliate Disclosure
- Community pricing: price sightings you submit may be visible to other users, individually or in aggregate.
- Legal requirements: we may disclose information when required by law or legal process, or to protect our rights, our users, or safety.
- Business transfers: if Drupefruit is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction, subject to this Policy.
5. Affiliate Links & Shopping
The Service may include links to third-party retailers. If a shopping link includes affiliate tracking, the retailer and affiliate network may collect information about the click and any purchase. We do not currently earn affiliate commissions, but if we participate in the future we may earn a commission on qualifying purchases at no extra cost to you. See our Affiliate Disclosure.
6. Data Security
- Encrypted transmission (TLS/HTTPS)
- Row-level security on database tables
- One-time-code authentication (no stored passwords)
- Server-side handling of payments and secrets
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Data Retention
- Account & collection data: retained while your account is active and for up to 30 days after you delete it, then permanently deleted.
- Scanned images: processed to produce results and not retained as a permanent gallery; you control photos you choose to attach to items.
- Payment records: retained as required by financial and tax regulations (typically up to 7 years).
8. Your Rights & Choices
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate information in your account settings
- Delete your account and associated data
- Export your data in a portable format
- Opt out of the sale or sharing of personal information — we do not sell or share it, so there is nothing to opt out of
California residents have these rights under the California Consumer Privacy Act (CCPA/CPRA) and will not be discriminated against for exercising them. To exercise a right, contact privacy@saintlyhound.com. We verify requests against your account before acting on them.
9. Children's Privacy
The Service is intended for adults of legal drinking age (21+ in the United States) and is not directed to children. We do not knowingly collect personal information from anyone under 13; if we learn that we have, we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify account holders of material changes by email or in the app. The "Effective date" above indicates the latest revision.
11. Contact
Drupefruit LLC
Operator of SaintlyHound™ and Tassel™
2108 N St #14738, Sacramento, CA 95816
Privacy: privacy@saintlyhound.com
Support: support@saintlyhound.com
Website: saintlyhound.com