Beer With Me — Privacy Policy
Version 2026-11-12 · Applies from 2026-11-12
In short: We use your data to run Beer With Me, keep it safe and take payment. We never sell it, never show your e-mail to other users, and you can download or delete everything in Settings. Usage statistics are collected only if you say yes. This policy also covers people who contact us without an account.
1. Who is responsible
Pavel Dejkoski, Säterigatan 7A, 418 76 Göteborg, Sweden, is the controller of the personal data processed in the Beer With Me app and on beerwithme.tech ("we"). Contact for privacy questions and requests: [email protected].
2. What we process, why, and on what legal basis
| Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Email address, password (stored hashed), account ID | Create and secure your account, sign-in, confirmation and service emails | Contract (6.1.b) |
| Username, age, bio, interests, profile and gallery photos | Show your profile to other users (bio, age, interests and gallery only after another user unlocks your profile) | Contract (6.1.b) |
| Your stated age | Make sure all users are 20 or older; age filters on events | Contract (6.1.b) and legitimate interest in a safe service (6.1.f) |
| Events you create or join (bar, time, description, audience filters) | Run the core service; other logged-in users see events and who joined | Contract (6.1.b) |
| Chat messages in events | Let participants talk | Contract (6.1.b) |
| Credits, credit history, purchases (store transaction ID, product, price, time, which credits of each purchase you have used; for older purchases your withdrawal-right waiver) | Credit balance, purchases, receipts by email, refunds, accounting | Contract (6.1.b); legal obligation for accounting records (6.1.c, bokföringslagen) |
| Withdrawals from purchases (your name, the email for the confirmation, time received, refund) | Handle your withdrawal, confirm it and refund you | Legal obligation (6.1.c, distansavtalslagen 2 ch. 10 a, 14 §§; bokföringslagen) |
| How many credits of an App Store purchase you used — only if you tick the box in the withdrawal form | Tell Apple, so Apple can refund the unused credits | Consent (6.1.a); you can withdraw it at any time by contacting us |
| Beer price votes | Show approximate bar prices | Legitimate interest (6.1.f) |
| Profile unlocks, blocks, reports, moderation decisions | Safety, moderation, our obligations under the EU Digital Services Act | Legitimate interest (6.1.f); legal obligation (6.1.c) |
| Messages you send through the website forms without an account (deletion request or report of illegal content, with the email address and text you provide) | Handle your request, reply to you and meet our duties under the Digital Services Act | Legitimate interest (6.1.f); legal obligation for reports (6.1.c) |
| Your device location | Sort bars by distance — used only on your device, never sent to us | — (not collected) |
| Technical data (IP address, device/app version, logs) | Security, abuse prevention, troubleshooting | Legitimate interest (6.1.f) |
| Usage statistics: which screens you open and which features you use (app opened, map opened, event joined or created, profile unlocked, purchase started/completed/withdrawn with the product, message sent, search used), with platform, app version and language, stored under a random ID made on your phone — only if you turn on Usage statistics | See which parts of the app work and what to improve, and whether people come back | Consent (6.1.a); turn it off at any time in Settings → Usage statistics |
| Your answer to the Usage statistics question (yes/no, date, version of the text) | Proof of your choice | Legal obligation (6.1.c, GDPR art. 7(1)) |
| Totals counted from data we already hold to run the service: how many sign up, create or join events, unlock profiles, send messages, vote on prices, buy credits, and come back in later weeks | Understand whether the service works and improve it; only totals per day or week are kept, never lists of people | Legitimate interest (6.1.f) |
| Terms/Privacy acceptance (version and time), data-export, withdrawal and deletion log | Proof of agreement and of how we handled your requests | Legal obligation / legitimate interest |
We do not sell your data, do not use it for advertising and do not track you across other apps or websites.
Usage statistics are off until you choose. The app asks once, and saying no changes nothing in the app. They never include your location, which bars or events you look at, other users, the text of messages or searches, or amounts. They are stored under a random ID, not under your account, only we use them, and they are stored in the EU (Supabase, Stockholm).
Automated decisions: the content filter is automated. It does not have legal or similarly significant effects on you, and you can always contact us to have a person review a decision.
3. Who can see your data
- Other users: username, profile photo and member-since date; bio, age, interests and gallery only after they unlock your profile; events you create/join; your messages in events you take part in. Blocked users cannot see you.
- Service providers (processors) under data processing agreements: Supabase (database, authentication, file storage and server functions; data stored in the EU — Stockholm) and our email provider Brevo (Sendinblue SAS, France) for account emails, receipts, withdrawal confirmations, moderation decisions and replies to reports, and Zoho Mail (Zoho Corporation B.V., the Netherlands; data stored in the EU) for our mailboxes, so e-mails you send us are stored there.
- Website: beerwithme.tech is hosted by Cloudflare Pages (Cloudflare, Inc., USA) as our processor, which receives your IP address when you visit the site. The site sets no cookies and loads nothing from other sites.
- Website forms without an account: if you use the deletion or report form on our website, we receive the email address and the text you enter. We use it only for that request.
- Map: when you open the map, map tiles are loaded from OpenFreeMap (Hyperknot Software Kft., Hungary) and the map software (MapLibre) from the content delivery network unpkg. Both receive your IP address, and OpenFreeMap the map area you view. They receive no account data and not your location; the map page cannot send data anywhere else. OpenFreeMap uses no cookies and keeps no IP addresses in its access logs.
- Apple and Google process payments and store refunds for credits as independent controllers under their own privacy policies. If you agree in the withdrawal form, we tell Apple how many credits of that purchase you used (nothing else).
- Authorities, when required by law (e.g. the police in case of threats to life or safety).
4. What is stored on your phone
Your sign-in session is kept in the phone's secure storage, together with two small marks that the safety tips and the location question have been shown. The app stores nothing else about you — photos and text are fetched from the server when you use the app. Your location is used only on the phone to sort bars by distance and is never sent to us. If you turn on Usage statistics, the app also keeps a random ID for them and the counts not yet sent; turning the setting off or deleting your account removes both (signing out keeps the ID, so coming back is not counted as a new phone). Signing out removes the session. The two marks contain no personal data and stay until you delete the app (on iPhone the system can keep them in the Keychain even after that).
5. Transfers outside the EU/EEA
Our data is stored in the EU. Some providers are US companies that may access data from outside the EU; such transfers are protected by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
6. How long we keep data
- Events and their chat: deleted 7 days after the event starts (later only if the content is reported and still being reviewed). Messages you delete are removed after 30 days.
- Handled reports and DSA notices, with a copy of the reported content: 12 months; moderation decisions: 24 months. They are kept, without your account, if you delete it.
- Purchase records: until the end of the seventh year after the year of purchase (accounting law). Store payment data is removed after 90 days, store reference codes after 13 months, and your identity when you delete your account.
- Withdrawals: kept with the purchase record; your name and email in them are removed when you delete your account, or once the refund is settled if it is still open then.
- Logs of data requests, including deletion requests from the website: 24 months. E-mails we send you: 90 days. Server logs (IP address): kept by Supabase for at most 7 days.
- E-mails you send us: kept until your matter is handled, then at most 24 months.
- Sign-ups whose email address is never confirmed: deleted after 30 days.
- Inactive accounts: if you have not signed in for 24 months we e-mail you, and delete the account 30 days later unless you sign in.
- Usage statistics: the counts under your random ID are deleted after 90 days, or at once when you turn the setting off. After that only totals without any ID are kept (for example "120 app opens on 3 May"). Your yes/no answer is kept until you delete your account.
- Activity totals (per day or week, no personal data): kept.
- Everything else: until you delete your account.
- A one-off copy of the database made on 6 November 2026, during a security upgrade, is deleted on 6 December 2026.
7. Your rights
You can: access your data and get a copy (Settings → Download my data), correct it (edit your profile), delete your account and data (Settings → Delete account, or without the app via https://ojaqcblnvmywpnirizte.supabase.co/functions/v1/account-deletion-request), restrict or object to processing based on legitimate interest, withdraw your consent to Usage statistics at any time (Settings → Usage statistics, as easily as you gave it, without affecting what was done before), and receive your data in a portable format. We answer within one month. You can complain to the Swedish Authority for Privacy Protection (IMY, imy.se).
8. Age
Beer With Me is only for people aged 20 or older. We delete accounts we find belong to younger persons.
9. Security
Data is encrypted in transit, access is limited by strict database rules, and other users never see your email address. If a breach affects you, we will tell you and IMY as the law requires.
10. Changes
We will notify you in the app before material changes take effect and ask you to accept the new version.