Privacy Policy

Last updated: August 2026

This app is built and run by an individual developer, not a company with a dedicated privacy team — so this policy is written to say plainly what actually happens to your data, not to hedge with boilerplate.

What We Collect

Account info — your email address, password (handled by our authentication provider, Supabase; we never see it in plain text), and an optional display name.
Your humidor — everything you enter about your cigars: brand, line, quantity, what you paid, MSRP, notes, ratings, location, and smoking session history (burn times, tasting notes).
Photos — any photo you attach to a cigar or a smoking session, stored with Cloudflare R2.
Purchase status — whether you're on a free or Pro plan, and any credit pack balance. Purchases themselves are handled entirely by Apple; we never see your card details, only whether a purchase succeeded, via our subscription platform, RevenueCat.
Push notification token — only if you turn on alerts, so Apple can deliver them to your device.
Basic usage analytics — aggregated, anonymized page and feature usage via Vercel Analytics. This doesn't identify you individually.

Photos and AI Identification

The "Identify from Photo" feature sends a downscaled copy of the photo you take to Anthropic (maker of the Claude AI model) to read the band and suggest what cigar it might be. This only happens when you actively use that feature — a photo is never sent anywhere without you taking that action. Anthropic processes the image to generate a response; we don't control how they otherwise handle API traffic, and their own policies govern retention on their end. Every suggestion is shown to you to confirm or reject before anything is saved — nothing is added to your humidor automatically.

Sharing With Friends

If you use Friends' Humidors to share your collection, the person you share with can see your humidor's contents and photos. This only happens when you explicitly grant a share — it's never public or searchable.

Who We Share Data With

We don't sell your data. The services below process data on our behalf, each for a specific purpose:

Supabase — account authentication and database storage.
Cloudflare R2 — photo storage.
Anthropic — photo identification and MSRP reference lookups, as described above.
Apple & RevenueCat — processing purchases and subscriptions.
Resend — sending account emails (password resets, notifications).
Vercel — hosting the app and anonymized usage analytics.

Data Retention and Deletion

Your data stays as long as your account exists. You can permanently delete your account and everything in it — humidor, photos, session history — at any time from the account menu in the app. This is irreversible.

Age

This app is about cigars and isn't intended for anyone under the legal age to purchase tobacco products in their region. The app asks you to confirm this before first use.

Your Choices

You can review and edit everything in your humidor directly in the app, turn push notifications on or off at any time, and delete your account whenever you want. If you have a question we haven't answered here, email us — see below.

Security

Data is encrypted in transit (HTTPS/TLS) between your device and our servers. Access to the underlying database and storage is restricted to what the app itself needs to function.

Changes to This Policy

If this policy changes in a way that matters, we'll update the date at the top of this page.

Contact

Questions about your data or this policy — support@tipsysteward.com.