Privacy Policy

Who we are

Proof & Palate (the “app”) is operated by ZeroPoint Holdings LLC, a Missouri limited liability company (“we”, “us”). This policy explains what we collect when you use the Proof & Palate website and app, how we use it, who we share it with, and the choices you have.

The app is for adults of legal drinking age (21 or older in the United States). It is not directed to anyone younger.

What we collect

Information you give us:

• Account details: the email address you sign in with (we send you a sign-in link; there is no password), and the display name, handle and bio you choose.
• Your age confirmation and the date you gave it, and your consent choices (for example, whether new pours are public and whether your tastings may be included in research insights).
• Welcome quiz answers, which seed your starting flavor profile.
• What you log: tastings (notes, scores, written comments, how you poured it), your shelf and wishlist (bottles, price paid, store, dates), flights you host or join, bottles you add to the catalog, and barcodes you link to bottles.
• Social activity: who you follow, cheers you give, and anything you choose to make public.
• Business accounts: organization name, type, city and state, members, and store or barrel picks you publish.
• Messages you send us through the app.

Label and shelf scans: when you scan, the photo is sent to an AI service provider (see below) to read the label. We do not store the photo. We keep the text that was read from the label (brand, proof, age and similar fields) and which bottle it matched, linked to your account, to improve matching and to apply scan limits.

Guest mode: if you use the app without an account, your pours and shelf are stored only in your browser on your device. They are not sent to us. When you sign in on that device, they are copied into your new account so you don’t lose them.

Information collected automatically: our hosting and database providers record standard technical information such as IP address, browser type and request times, for security, abuse prevention and keeping the service running. The app stores your sign-in session and a few preferences in your browser’s storage. We do not use advertising cookies, ad networks or third-party analytics trackers.

How we use it

• To run the app: save your journal and shelf, build your flavor profile, recommend bottles, predict matches, and run flights and community features.
• To read labels and barcodes you scan and match them to bottles.
• To improve the catalog and the accuracy of recommendations, for example by comparing predicted matches with the scores people actually give.
• To keep the service safe: preventing abuse, enforcing limits and these terms, and securing accounts.
• To respond to your messages and requests.
• To process subscriptions if you choose a paid plan.
• To comply with law.

We do not use your information to show you third-party advertising.

Research insights (only if you opt in)

If you turn on “Include my tastings in anonymized research,” we may combine your tastings with other people’s to produce aggregate, de-identified flavor insights, for example “tasters who score wheated bourbons highly most often note caramel and baked apple.” We may share these insights with distilleries, retailers and other partners.

These insights never include your name, email, handle, written comments or anything else that identifies you, and we only report groups large enough that no one can be singled out (at least ten tasters). We do not attempt to re-identify de-identified data and we require partners not to try.

It is off unless you turn it on, and you can turn it off at any time in Account. Turning it off stops your tastings from being included in future insights.

What other people can see

Your journal is private by default. If you make a pour public or turn on a public profile, the content you make public (such as your handle, bio and public pours) can be seen by other users and by anyone with the link. People in a flight you join can see the pours you log in that flight. Members of a business account can see that account’s information.

Who we share it with

We share personal information only as described here:

• Service providers that run the app for us under contracts that limit their use of the data: Supabase (database, sign-in and email delivery of sign-in links), Netlify (website hosting), OpenAI and Anthropic (reading label photos you scan), Google Fonts (typefaces, which receives your IP address when fonts load), and Stripe (payments, when paid plans are offered; we receive subscription status, never your full card number).
• Under their business terms, our AI providers use scan images to return a result and do not use them to train their models by default; they may retain them for a limited time for abuse monitoring.
• Other users, as described in “What other people can see.”
• Partners, only as aggregate de-identified insights, and only if you opted in.
• For legal reasons: when required by law or legal process, or to protect the rights, safety and property of our users, the public or us.
• In a business transfer: if we are involved in a merger, acquisition or sale of assets, your information may transfer, and this policy will continue to apply to it.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Links to stores and other sites

Bottle pages link to retailers and producers. When you follow a link, you are on their site and their privacy policy applies. Some links may be affiliate links, which means we may earn a commission if you buy; the retailer may learn that you came from us, but we do not send them your account information.

How long we keep it

We keep your information while your account is open. If you delete your account, we delete your profile, pours, shelf, flights you host, scans, follows, reactions and messages from our live systems right away, and they age out of backups within 30 days. Bottles you added to the shared catalog stay in the catalog without your name. Aggregate insights already produced are not affected, because they contain no personal information. Server logs kept by our providers are deleted on their regular schedules.

Your choices and rights

• See and export your data: use “Export my data” in Account.
• Correct it: edit any pour, shelf entry or profile detail in the app.
• Delete it: use “Delete my account” in Account. Guest data can be cleared the same way, on the device it lives on.
• Control sharing: make pours private, turn off your public profile, and turn research insights on or off.
• Ask us anything about your data: send a “Privacy request” message.

Depending on where you live (including California, Colorado, Connecticut, Virginia and other states with consumer privacy laws), you may have rights to know, access, correct, delete and port your personal information, to opt out of its sale, targeted advertising or profiling, and to appeal a decision we make about your request. We extend these rights to all users, wherever they live. We do not sell personal information or use it for targeted advertising, so there is nothing to opt out of there; we treat a Global Privacy Control signal as a request to opt out regardless. We will not discriminate against you for using any of these rights.

To protect your account, we act on requests sent from the signed-in account they concern. You can name an authorized agent by telling us in a message; we may ask you to confirm. If we decline a request, we will tell you why, and you can appeal by replying to the same conversation.

Security

Data is encrypted in transit, and our database enforces row-level rules so each account can only reach its own private data. No system is perfectly secure, so we cannot guarantee security, but we work to protect your information and will notify you as required by law if a breach affects it.

Age requirement

You must be at least 21 to use Proof & Palate. We do not knowingly collect information from anyone under 21. If we learn we have, we will delete it. If you believe someone underage is using the app, let us know through Messages.

Where data is processed

We are based in the United States and our providers process data in the United States. If you use the app from elsewhere, your information will be transferred to and processed in the United States.

Changes to this policy

We will post any changes here and update the date at the top. If a change is significant, we will let you know in the app before it takes effect.

Contact us

Send us a message in the app: open Messages and start a conversation. Choose “Privacy request” for anything about your data and “Legal notice” for legal matters. Messages need a free account so we have somewhere to reply; if you can’t create one, say so in any message channel you can reach and we will work with you.

ZeroPoint Holdings LLC, Missouri.