Privacy Policy

Shakerly is a home-bartending app, made by Fuimus Labs. Fuimus Labs is a trade name of Cabal Enterprises, LLC, which is responsible for your information as described in this policy ("we", "us", "our").

This policy applies to the Shakerly app on iOS and Android. If you have questions, email support@fuimuslabs.com.

This policy covers hosts, who use the Shakerly app with an account, and guests, who open a host's invite link or QR code and use the Shakerly bar page on the web (shakerly.web.app) without an account.

From hosts:

• Account: your name, email address, and password, which Firebase Authentication handles and we never see. If you sign in with Google or Apple, we receive your name, email address, and profile photo link from that account.
• Your bar: bar name, bar page design choices, ingredient inventory, recipes, notes, shopping list, and a log of the drinks you've made.
• Parties: your invite link and QR code, bar code, and bar password (stored only as a one-way hash after the party closes), plus the orders and ratings your guests send.
• Notifications: push-notification tokens for your devices.
• Subscription: plan, status, and trial and renewal dates, from RevenueCat, keyed to your account.

From guests:

• The name you type (it can be a nickname), the drinks you order, your spirit choices, any special instructions, and any rating or feedback you leave.
• A temporary access token kept in your browser. It expires after 4 hours and is cleared when you close the tab. We do not set cookies.

From everyone: our servers log each request with its IP address, browser or device type, and time.

We do not collect birthdays, location, contacts, photos, or advertising identifiers.

• The host sees every order, guest name, special instruction, rating, and piece of feedback at their bar. They get a notification such as "Sam ordered a Negroni".
• Other guests at the same party see guest names and the drinks ordered in the live order feed.
• The host's future guests may see past ratings and feedback, with the guest name, on that host's recipes.
• Invite links are private. Anyone with a host's link or QR code can open that bar while the party is open, so hosts should share them only with people they invite.

• To run Shakerly: your bar, recipes, parties, orders, ratings, and notifications.
• To manage subscriptions and free trials.
• To keep Shakerly secure and prevent abuse.
• To answer you when you contact us, and to find and fix problems.

We do not sell your information, we do not show ads, and we do not use your information for advertising.

Analytics. We may add Google Analytics for Firebase to learn, in aggregate, which features get used. It would never be used for advertising, and it would have advertising identifiers turned off. We will update this policy before turning it on.

No money changes hands. "Ordering" in Shakerly just sends a drink request to your host. Shakerly does not sell, buy, or deliver alcohol.

Besides the sharing between hosts and guests described above, we use service providers that process data for us, under contract:

• Google Cloud and Firebase (hosting, the guest bar page, database, sign-in, push notifications).
• RevenueCat (subscription status).
• Apple and Google (sign-in if you use it, push delivery, and purchases).
• Google Fonts (the app and bar page load fonts from Google, which receives your IP address).

Legal and safety reasons. We share information when the law requires it or when needed to protect someone's safety.

Business transfers. If Fuimus Labs is sold or merged, your information may transfer to the new owner, and this policy will still apply to it.

When you download the app or buy a subscription, Apple (App Store) or Google (Google Play) handles that transaction under its own privacy policy. We never receive your payment card details.

If you have chosen in your device settings to share diagnostics with app developers, Apple or Google may give us crash reports and aggregated usage statistics. They do not identify you, and we use them only to fix problems.

• Host data is kept while the host's account exists.
• Guest orders, names, and ratings stay in the host's bar history until the host deletes them or deletes their account.
• Deleting a host account deletes the account, the bar, and all of its parties, orders, and ratings within 30 days. See how to delete your account.
• Guests can ask us to delete their orders and ratings at any time. See Your choices and rights.
• Our servers keep request logs (which include IP addresses) for about 30 days. Copies of deleted data can remain in those logs for up to that long.

Shakerly is about alcoholic drinks. It is only for people of legal drinking age where they live (21 in the United States). We do not knowingly collect information from anyone under that age, and never from children under 13. If we learn that we have, we will delete it.

• All traffic between the app and our servers is encrypted in transit (HTTPS/TLS).
• Our data is stored on Google Cloud, which encrypts it at rest.
• Access to production systems is limited to the people who need it to run the service.
• Invite links contain long random tokens, bar passwords are stored as one-way hashes, and guest access expires after 4 hours.

No system is perfectly secure, but we work to protect your information and will notify you and the authorities if a breach affects you, as the law requires.

Hosts can edit their bar, recipes, and orders, and delete their account, from Settings in the app. Guests don't have accounts. To have your guest orders or ratings deleted, email us the host's bar name, the party date, and the name you used.

You can also ask us to:

• give you a copy of the personal information we hold about you,
• correct information that is wrong,
• delete your information, or
• stop a particular use of it.

Email support@fuimuslabs.com from the address on your account. We may need to confirm your identity first. We respond within 30 days, or sooner where the law requires. We will not treat you differently for exercising these rights.

We do not sell your personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects.

If you live in a state with a consumer privacy law (for example California, Colorado, Connecticut, Virginia, or Texas), you may have the rights described above: to know, access, correct, delete, and port your information. If we decline a request, you can appeal by replying to our decision with the word "Appeal". We will answer within the time your state's law allows.

Cabal Enterprises, LLC, trading as Fuimus Labs, is the controller of your personal data. We rely on these legal bases:

• Contract: to provide Shakerly to hosts and to pass guests' orders to their host.
• Legitimate interests: to show guests' names and orders to the host and the party, keep Shakerly secure, and fix problems.
• Consent: for notifications.
• Legal obligation: where the law requires us to keep or disclose information.

Your data is processed in the United States. Where the law requires, we rely on our providers' Standard Contractual Clauses or equivalent safeguards for this transfer.

In addition to the rights above, you may object to processing based on legitimate interests and withdraw consent at any time (this does not affect processing that already happened). You can also complain to your local data protection authority.

If we change how Shakerly handles your information, we will update this page and its effective date before the change takes effect. For material changes, we will also let you know in the app or by email.

Questions or requests about your privacy:

• Fuimus Labs (Cabal Enterprises, LLC)
• 116 Agnes Rd Ste 200, Knoxville, TN 37919
• Phone: (615) 549-8514
• Email: support@fuimuslabs.com