CocktaiLab by RecipeLab

Privacy Policy

How CocktaiLab collects, uses, protects, and deletes information.

Effective July 13, 2026

What CocktaiLab collects

CocktaiLab may collect account information such as your email address and display name; bar inventory; cocktail formulations and versions; taste profiles; feedback; saved memories; guest names and preferences you choose to save; bottle or bar photos you submit for scanning; and support communications.

When you use bottle or bar scanning, the selected image or text is processed to return possible inventory items for your review. Scan guesses are not saved as inventory until you confirm them. CocktaiLab does not retain the source scan image in its application database.

How information is used

We use information to authenticate your account, sync your data, match drinks to confirmed inventory and stated preferences, create and improve cocktail drafts, keep version history, support guest-aware planning, operate the service, prevent misuse, and respond to support requests.

Taste guesses and inferred preferences require your approval before becoming durable memory. Explicit safety, allergy, accessibility, sober, zero-proof, or religious constraints may be saved immediately when you expressly provide them.

AI and service providers

AI requests are sent through CocktaiLab's protected backend. The app does not contain an OpenAI key and does not call OpenAI directly. Relevant request context may be processed by OpenAI to generate scan guesses, cocktail drafts, adaptations, and feedback summaries. Submitted bottle or bar photos are transmitted for scan processing; CocktaiLab does not intentionally save the raw image in its database. Third-party processing and temporary retention are governed by the applicable provider terms. Supabase provides authentication, database, and backend infrastructure. Apple and Google process information when you choose their sign-in services.

We do not sell personal information. We do not use saved guest information as account-owner memory, and we do not use one user's personal preferences as defaults for other users.

Diagnostics

Apple may provide crash and performance diagnostics through TestFlight, App Store Connect, Xcode Organizer, and MetricKit. CocktaiLab may also receive limited authenticated diagnostic summaries such as app version, operating-system version, diagnostic category, and event counts. Diagnostic reporting is designed not to include cocktail requests, scan images, guest notes, prompts, passwords, authentication tokens, or proprietary model internals.

Retention and deletion

Information is retained while your account is active and as reasonably needed to operate and protect the service. You can delete your account and CocktaiLab data from Account > Delete Account And Data. The deletion workflow removes the authentication account and associated profiles, inventory, cocktails, versions, feedback, guests, preferences, memories, shares, and application audit records, subject to limited legal or security retention obligations.

Security and choices

Data is transmitted using encrypted connections. Authentication sessions are stored in Apple's Keychain on the device. Database row-level security and backend ownership checks restrict access to user-owned records. No system can guarantee absolute security.

You may review, edit, reject, or delete supported memories and preferences in the app. You may revoke bartender share links. You may also contact us about access, correction, deletion, or privacy questions.

Children and legal drinking age

CocktaiLab is not intended for children or for anyone below the legal drinking age in their jurisdiction. The app also supports alcohol-free formulations and does not encourage alcohol consumption.

Contact

Email privacy@kasotalabs.ai.