This page explains what Whisky Journal stores and how you stay in control of your data.
Your email address and sign-in identity, the whiskies and tastings you add, and the app preferences you choose. We collect nothing else.
We only store a simple confirmation that you stated you are of legal drinking age. We never collect or store your date of birth.
Only to run the app: to show your collection, your reviews and the drams friends share with you. We do not sell or share your personal information.
You can download all of your data or delete your account at any time from Settings. Deletion is immediate and permanent.
Your data is kept while your account is active and removed when you delete your account.
For any privacy request, contact the app owner through the support address listed in the app store listing.
Whisky Journal is operated by Boštjan Grmič, an individual seller based in Slovenia, European Union, trading as “Whisky Journal”. Boštjan Grmič is the data controller for the personal data described in this notice and decides why and how it is processed. You can contact us at support@whiskyjournal.app.
Account data (email address, login credentials managed by our authentication provider, display name) to create and secure your account. Content you create (tastings, ratings, tasting notes, collection entries, photos, wishlists and price alerts) to provide the journal itself. Preferences (language, rating scale, notification and privacy settings, age-verification confirmation). Technical data (IP address, device and browser information, error logs and basic usage events) for security, fraud prevention and improving the product. Support messages you send us. Card details are never seen or stored by us — they are handled entirely by Stripe, our payment processor.
We rely on: performance of a contract for creating your account, providing the journal and delivering a subscription you have purchased; our legitimate interests for security, fraud prevention, service improvement and essential service emails; your consent for optional notifications and any non-essential cookies or analytics, which you can withdraw at any time in Settings; and legal obligation for accounting, tax and responding to lawful requests.
Stripe processes payments on our behalf. When you subscribe, Stripe receives the personal data needed to complete the sale, manage your subscription, calculate tax, prevent fraud and issue receipts; Stripe acts as an independent controller for that data under its own privacy policy (https://stripe.com/privacy). We also use service providers acting as processors on our behalf: our cloud hosting, database, authentication and file storage provider, and our transactional email provider. We may share data with professional advisers (legal, accounting) and with authorities where required by law. We do not sell your personal data.
Some of our providers may process data outside the EEA. Where that happens, transfers are protected by an adequacy decision or by Standard Contractual Clauses together with appropriate technical safeguards.
We keep your account and journal data for as long as your account exists. If you delete your account, your personal data and content are deleted or anonymised without undue delay, except records we must keep for legal, tax or fraud-prevention reasons (payment and invoice records are retained by us and by Stripe for the statutory period).
You have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. You can export your data and delete your account directly from Settings. You also have the right to lodge a complaint with your supervisory authority (in Slovenia, the Information Commissioner). We respond to requests within one month.
We use encryption in transit, access controls and least-privilege backend policies to protect your data. We use only essential cookies and local storage needed to keep you signed in and remember your language, age confirmation and display preferences; Stripe sets its own cookies during checkout. We do not use advertising cookies.