Privacy Policy
Last updated: 20 September 2026
Who we are
My Shaker Flow is a personal cocktail library and recipe app operated by My Flow Limited, registered in England and Wales (company no. 17289976) ("we", "us"). My Flow Limited is the data controller for the personal data described below. You can reach us at hello@myshakerflow.app.
What we collect
- Account data — your email address and a hashed password, or the identifier supplied by Sign in with Apple.
- Content you create — the bottles, mixers and ingredients in your bar, photos you upload, notes, shopping lists, favourites and ratings.
- Purchase data — subscription and order status, the last four digits and country of the card, and billing country. Full card details are never seen or stored by us; they are handled by our payment providers.
- Technical data — browser or device type, approximate region, IP address and timestamps, used to operate and secure the service.
How we use it
- To run your account and sync your bar between devices.
- To identify scanned bottles using an AI vision model.
- To suggest cocktails you can make from what you own.
- To take payment, manage your subscription and issue refunds.
- To respond to support requests.
Our legal bases are performance of our contract with you (running the Service and your purchases), our legitimate interests (keeping the Service secure and improving it) and legal obligation (tax and accounting records).
AI processing
Bottle photos you submit to "Scan" are sent to a third-party AI vision provider (Google Gemini, via the Lovable AI Gateway) solely for identification. They are not used to train models and are not retained by the provider beyond the request.
Where it's stored
Data is stored on Lovable Cloud (powered by Supabase) in EU-region servers. We use industry-standard encryption in transit and at rest.
Who we share it with
We do not sell your data. We share it only with the providers needed to run the Service:
- Paddle.com Market Ltd — our Merchant of Record and payment processor for purchases made on the website. Paddle receives your email address, billing and payment details in order to take payment, charge tax and handle refunds, and acts as an independent data controller for that information.
- Apple — processes purchases made inside the iOS app, and provides Sign in with Apple.
- Lovable Cloud / Supabase — hosting, database and authentication.
- Google (Gemini via the Lovable AI Gateway) — AI bottle identification and recipe/image generation.
If you create a shareable "bar link", only the ingredients you choose to share are visible — your email and account are not.
International transfers
Some of these providers process data outside the UK and EEA. Where that happens, transfers are covered by UK/EU standard contractual clauses or an equivalent safeguard.
Your rights (UK / EU GDPR)
- Access — request a copy of your data.
- Rectification — correct inaccurate data.
- Erasure — delete your account and all associated data from the in-app Account page, or by emailing us.
- Portability — request an export.
- Object — to processing for direct marketing (we don't do this).
- Complain — to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
Retention
We keep your data for as long as your account is active. When you delete your account, all personal data is removed immediately, except billing records we are required to keep for tax purposes (normally six years).
Children
The Service is not intended for anyone under the legal drinking age in their country, and we do not knowingly collect data from children.
Cookies & local storage
We use browser local storage to keep you signed in, and our payment provider sets cookies needed to complete checkout. We do not use advertising or tracking cookies.
Contact
For any privacy question or data request, email hello@myshakerflow.app.