Last updated: October 15, 2026 · Effective: October 15, 2026
The privacy of your data — and it is your data, not ours! — is a big deal to us. People at Spiritz look at an account’s data only when there is a reason to: to help you with a problem, to fix a bug, to review something that has been reported, or to keep Spiritz safe. Our hosting provider records the IP address of every request to our servers, and we keep those logs for a limited period so we can investigate abuse and unauthorized access.
When you use Spiritz, we ask for a name, a username, a photo, access to your location and permission to send you notifications. That’s just so we can personalize your experience within the app and so we can send you notifications or other information relevant to Spiritz. We’ll never sell your personal info to third parties, and we won’t use your name or photo in marketing or promotional materials without your permission, either.
When you write Spiritz LLC (the makers of Spiritz) with a question or to ask for help, we’ll keep that correspondence, and the email address, for future reference. When you browse our marketing pages, we’ll track that for statistical purposes (like conversion rates and to test new designs). We also store any information you volunteer, like surveys, for as long as it makes sense.
The only times we’ll ever share your info:
· To investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Use, or as otherwise required by law.
· If Spiritz LLC is acquired by or merged with another company — we don’t plan on that, but if it happens — we’ll notify you well before any info about you is transferred and becomes subject to a different privacy policy.
Things you give us. Your email address, and the display name, username and profile photo you choose. Everything you post: check-ins, ratings and tasting notes, the photos you upload, menus you scan, the lists you save, and the groups you create or join. Anything you send us in an email or a survey. If we ask you to confirm your age, the date of birth you give us — see “Age” below.
Where you are. With your permission, your device’s location while you are using the app, so we can show you bars and drinks near you and help you check in to the right place. Spiritz only ever asks for location “while using the app” and never asks to track you in the background. Two features can look up your location without the app on screen, and only if you set them up: the “Nearby” widget on iPhone, if you add it to your home screen, and the Spiritz Siri shortcut that finds cocktail bars near you, when you run it. Each looks up where you are at that moment to show you bars nearby. You can turn location off in your device settings at any time; search and the rest of the app keep working, but results will not be local to you. A check-in also records the venue you chose, which is a record of where you were. With Offline mode on (it is by default; you can change it in Settings → Offline mode), the app downloads the bars nearest you from time to time, including in the background; it uses the last location it had while you were using the app and does not look up where you are in the background.
Your device. A device identifier, your push notification token (if you allow notifications), device model and operating system, app version, language, time zone and country, and your IP address. When you check in, the kind and quality of your network connection at that moment — whether you were offline, on Wi-Fi or on mobile data, how quickly the app could reach us, whether Low Data Mode was on and, on Android, signal strength — which we combine across check-ins to understand which venues have poor reception, so the app can keep those ready to use offline.
How you use Spiritz. Which screens and venues you open, what you search for, what you tap, save or scroll past, when you open the app, and crash and diagnostic reports when something goes wrong.
What we work out from all of that. A profile of your taste and habits, and the recommendations and rankings built on it. See “How we use AI” below.
Where you came from. When you reach our website through an ad or a link someone shared, the campaign details that came with it: the campaign, source and medium named in the link, the ad network’s click identifier (from Google, Meta, TikTok or Microsoft), and which shared link, group invite or Thirst Trap result brought you. These are kept in our own cookies (see “Cookies and similar technologies”) and added to the App Store and Google Play links on the page, so that Apple and Google can tell us which campaign led to an install. In the apps, the link that opened Spiritz is used to take you to what was shared with you — a check-in, a group invite — and to credit the person who shared it.
The Spiritz app does not ask for your phone number, your contacts, your payment details, or any government identifier (Spiritz for Business is different — see “Spiritz for Business” below). The apps contain no advertising SDKs and do not collect your device’s advertising identifier. Our website loads advertising measurement tags only if you accept them — see “Cookies and similar technologies.”
We do not sell your personal information. We do use service providers who process data on our behalf, under contract, only for the purposes we give them:
· Google — cloud hosting and storage, Firebase Analytics, Crashlytics, push notifications (FCM), Sign in with Google, Maps and Places, the Gemini models behind most of our AI features, Cloud Vision, which checks every uploaded photo for explicit or violent content, the fonts on our website (Google Fonts) and, on our website and only if you accept them, Google Tag Manager, Google Analytics and Google Ads measurement.
· Apple — Sign in with Apple and push notifications, for people who use those, and Apple Maps for the maps in the iPhone app.
· Meta — Meta’s Muse Spark model, which writes our venue descriptions and chooses venue cover photos, and, on our website and only if you accept it, the Meta Pixel, which measures our ads on Facebook and Instagram.
· OpenAI — reads the text of a venue’s menu web page when someone using Spiritz for Business asks us to import a menu from a link. It receives no information about you.
· TikTok — on our website and only if you accept it, the TikTok Pixel, which measures our ads on TikTok.
· Algolia — the search index behind search in the app.
· Mixpanel and Statsig — product analytics and feature experiments. Mixpanel receives your email address, display name and username along with what you do in the app.
· Mailgun — the emails we send you, such as magic-link sign-in codes.
· Slack — our team’s messaging tool. When something is reported, an alert naming the reported account and describing the reported content goes to our moderation channel.
· Webflow — this page and our Terms of Use load scripts from Webflow’s content network, which sees your IP address, as any web request does.
· Twilio and Stripe — for Spiritz for Business only; see “Spiritz for Business” below.
Beyond those, we share your information only in the narrow cases listed above under “The only times we’ll ever share your info,” and, of course, the content you post is shown to other people as described in “What you post, and who can see it.”
The advertising tags on our website are different from the providers above in one respect: Google, Meta and TikTok may combine what they learn about your visit with what they already know about you to measure and improve ads, which some US state laws treat as “sharing” personal information for cross-context behavioural advertising. We load them only after you accept our cookie banner, never when your browser sends a Global Privacy Control signal, and you can withdraw your consent at any time under “Cookie settings” in the footer of our pages.
· Your account and what you have posted — for as long as your account is open. Delete your account and we delete it, including the photos you uploaded, apart from what is described below.
· What you added to a venue — drinks you added to a venue’s menu and changes you suggested to a venue’s details are part of that venue’s listing, so they stay when you delete your account, no longer linked to you.
· Backups — deleted data can persist in encrypted backups for up to 90 days before it ages out.
· Aggregates — counts, averages and rankings that your activity contributed to are not reversible back to you and are not deleted with your account.
· Analytics and diagnostics — up to 24 months, including after you delete your account. Email privacy@spiritz.app if you want yours deleted sooner.
· Where you came from — on our website, the attribution cookies expire after 30 days (the latest campaign) and 90 days (the first).
· A date of birth, if we have asked you for one — for as long as your account is open, plus a record that a device failed the age check, which we keep so the check cannot simply be retried.
· Content removed for a rules violation, and reports and moderation records — for as long as the account they concern is open, so we can investigate repeat behaviour and answer complaints. They are deleted with that account.
· Records we are legally required to keep — for as long as the law requires.
Our website uses a small number of its own cookies:
· Essential and preference cookies — your answer to our cookie banner
(sz_consent, 6 months); a note that your browser is outside the regions where we ask first
(sz_region, 6 months); the location you picked for nearby results (spiritz_location, 1 year)
and your time zone, so opening hours are shown in yours (spiritz_tz, 1 year); the places you
picked and the searches you ran recently, kept in your browser’s local storage; and a search session
identifier, with the filters you chose during it, that ends when you close your browser
(spiritz_search_session, and the tab’s session storage).
· Report cookies, only if you report something — a random identifier for your browser
(sz_device, 1 year), which lets us recognise repeat reports and limit how many one browser can
send, and a list of what you reported (sz_reported, 1 year), so it stays hidden for you. Neither
names you. With a report we also keep a keyed hash of your IP address — never the address itself — to limit
reports from one network and to spot one person sending many; it is kept with the report.
· Attribution cookies — the campaign or shared link that brought you, as described in
“Where you came from”: the first (sz_ft, 90 days) and the most recent (sz_lt, 30
days). They hold the campaign details only — never your name, email address or account.
· Advertising measurement tags — Google Tag Manager, Google Analytics, the Meta Pixel and the TikTok Pixel, when we use them. These set their own cookies and send information about your visit to those companies, as described in “Who we share it with.”
In the European Economic Area, the United Kingdom and Switzerland, nothing beyond the essential and preference storage listed above is stored on your device until you choose “Accept” on our cookie banner — not the attribution cookies and not the advertising tags. “Decline” stores your choice and nothing more. We work out whether to ask from your browser’s time zone, and we ask whenever we cannot tell. Everywhere else, the attribution cookies are set when you arrive through a campaign or shared link, and the advertising tags still wait for you to accept them. Wherever you are, you can change your answer under “Cookie settings” in the footer of our pages; declining also deletes the attribution cookies. You can also clear or block cookies in your browser, and the site will keep working.
Every page also loads its fonts from Google Fonts, and this page and our Terms of Use load scripts from Webflow’s content network. Those requests set no cookies, but they carry your IP address to Google and Webflow.
The apps use the equivalent device storage and the identifiers described above.
Spiritz is a social app. Some of what you give us stays private to you, and some of it is published to other people by design. Your profile — username, display name and photo — is visible to other users. So are your check-ins and the ratings, tasting notes and photos attached to them, the menus you scan, the lists you build and the groups you join. This content is shown to other users, to the venues you check in at, and, where a page or a link is public, to people who are not signed in to Spiritz at all. A link that shares content can be forwarded on by whoever receives it.
A check-in records where you were and roughly when. Marking a check-in private hides it from other people: it will not appear on your profile, in anyone else’s feed, in a notification sent to another user, or in the AI-written summary of a venue. It does still count toward the ratings, counts and other statistics we show for that drink or venue, and we still use it to personalize your own experience. Aggregate figures like those — counts, averages, rankings — are drawn from everyone’s activity and are shown to other users and to venues.
Please keep this in mind before you post. Anything another person can see, they can screenshot, copy or re-share, and we cannot get it back for you. You can delete a check-in (with the photos on it), or your whole account, at any time and we will stop displaying what you delete — though copies may sit in our backups for a limited period, and an individual post cannot be separated back out of aggregate statistics.
Spiritz uses artificial intelligence throughout the app: to read menus, to describe drinks and venues, to understand what you type into search, to work out what you are likely to enjoy, and to rank what you see. Here is what that means for your data.
What we send to AI models. Depending on the feature, this can include photos of menus you scan; the text you type into search; your check-ins, ratings and tasting notes, and the photos attached to them; a summary of how you use the app (venues you open, searches you run, things you save or skip); and information about venues from public sources. Notes you have written, and photos on your check-ins, may be part of what we give a model when it writes a description of a venue, and those descriptions are shown to everyone. Check-ins you have marked private are left out of that.
What we do not send. We do not include your name, username, email address or phone number in what we send to the models. A note is sent as you wrote it, though, so leave other people’s names and contact details out of your notes. The models that write about venues and about your taste are instructed never to write out a person’s name or contact details, and we remove any email address, phone number or link from what they write before it is shown.
Who processes it. We use third-party AI providers — currently Google (Gemini, and Cloud Vision for checking photos), Meta (Muse Spark) and OpenAI (only for venue menu pages, as described above) — who process this data as our service providers, under business terms that do not permit them to use your content to train their own general-purpose models. We do not sell your information to anyone, and AI providers are no exception.
Profiling and personalization. We use AI to build a profile of your taste and habits from your activity in the app, and we use that profile to decide what to show you: which venues, drinks, collections and notifications. This is automated and it shapes your experience of the app. It produces no decision with a legal or similarly significant effect on you — we do not use it to price anything, to deny you a service, or for anything of that kind. The profile is used to personalize your experience; it is not shown to other users and it is not sold.
If it gets something wrong, or you would rather opt out. AI output can be inaccurate. If something the app has generated about you, or about a venue you own, is wrong, tell us at support@spiritz.app. If you would like us to stop using your activity to build a taste profile, or you want the profile we hold about you deleted, email privacy@spiritz.app and we will take care of it — your recommendations will get less useful, and the rest of the app will keep working normally.
Spiritz is an app about alcohol, and it is for adults of legal drinking age only — 21 in the United States, the local legal drinking age elsewhere, and never below 18. You confirm that you meet it when you sign in, and we may also ask you for your date of birth to check it; where we do, we keep that date as described in “How long we keep it” above and use it for nothing else. The app is not directed at children, and we do not knowingly collect personal information from anyone below the legal drinking age where they live. If you believe a child, or anyone under the applicable age, has given us personal information, email us at privacy@spiritz.app and we will delete the account and the information we hold about them.
Spiritz for Business is our dashboard for the people who run venues. It collects more than the app does, because it has to:
· Your name, email address and phone number, which you give us when you set up a business account.
· Your venue’s phone number, which we verify by sending it a code by text message or phone call through Twilio.
· Payment details, which you enter into Stripe’s payment form. Stripe processes the payment and we never see your full card number; we keep a record of your plan and payments.
· What you tell us about your venue — its details, menus, photos and promotions — which appears on the venue’s page in Spiritz. If you ask us to import a menu from a link, OpenAI reads that menu page.
· A sign-in cookie (spiritz-business) that keeps you signed in for up to 14 days, and, while you
type an address, Google Places autocomplete. If you sign in with Google, Google’s sign-in script runs on the
page, and the payment pages load Stripe’s, which sets Stripe’s own cookies.
You may have heard about the General Data Protection Regulation (“GDPR”) in Europe. GDPR gives people under its protection certain rights with respect to their personal information collected by us on our Site or in our App. Accordingly, Spiritz LLC recognizes and will comply with GDPR and those rights, except as limited by applicable law. The rights under GDPR include:
· Right of Access. This includes your right to access the personal information we gather about you, and your right to obtain information about the sharing, storage, security and processing of that information.
· Right to Correction. This is your right to request correction of your personal information.
· Right to Erasure. This is your right to request, subject to certain limitations under applicable law, that your personal information be erased from our possession (also known as the “Right to be forgotten”).
· Right to Complain. You have the right to make a complaint regarding our handling of your personal information with the appropriate supervisory authority.
· Right to Restrict Processing. This is your right to request restriction of how and why your personal information is used or processed.
· Right to Object. This is your right, in certain situations, to object to how or why your personal information is processed.
· Right to Portability. This is your right to receive the personal information we have about you and the right to transmit it to another party.
· Right to not be subject to Automated Decision-Making. This is your right to object and prevent any decision that could have a legal, or similarly significant, effect on you from being made solely based on automated processes.This right is limited, however, if the decision is necessary for performance of any contract between you and us, is allowed by applicable European law, or is based on your explicit consent.
If you have any questions about exercising these rights and/or would like to exercise some or all of these rights, please email us at privacy@spiritz.app.
If you live in California, Colorado, Connecticut, Virginia, Utah, Texas or another state with a comprehensive privacy law, you have rights over your personal information much like the ones listed above: the right to know what we have collected about you and why, the right to a copy of it, the right to correct it, the right to have it deleted, and the right not to be discriminated against for exercising any of them.
We do not sell your personal information. We have not sold it, or shared it for cross-context behavioural advertising, in the preceding twelve months. The only way we would share it like that is through the advertising tags on our website, which load only if you accept them and never under a Global Privacy Control signal (see “Who we share it with”). We do not knowingly collect or sell the personal information of minors — Spiritz is for adults of legal drinking age only. We do not use or disclose sensitive personal information for any purpose other than running the service, so there is nothing for you to limit.
The categories we collect, why we collect them, who we disclose them to and how long we keep them are set out in “What we collect,” “Who we share it with” and “How long we keep it” above, and that also serves as our notice at collection.
To exercise any of these rights, email privacy@spiritz.app. We will verify your request against the email address on your account and respond within 45 days, and we will tell you if we need longer. You may use an authorised agent, in which case we will ask for proof that you gave them permission. If we decline your request you may appeal by replying to our answer with the word “appeal,” and we will review it and respond within 45 days.
Spiritz LLC hands data to law enforcement only when the law requires it — a court order, warrant or subpoena we are legally bound to answer — or, as described under “The only times we’ll ever share your info,” when we believe it is needed to protect someone from serious harm. We refuse requests that are not legally binding. And unless we’re legally prevented from it, we’ll always inform you when such requests are made.
All data is encrypted via SSL/TLS when transmitted from our servers to your browser or app. The database backups are also encrypted.
Spiritz (the Site and the App) is operated in the United States. If you are located in the European Union or elsewhere outside of the United States, please be aware that any information you provide to us will be transferred to the United States. By using our Site and/or App, participating in any activity and/or providing us with your information, you consent to this transfer.
We may update this policy from time to time. The date at the top of this page is when the current version took effect, and every version we have published stays readable at spiritz.app/legal. When we make a change that matters — what we collect, why we use it, who we share it with, or how you exercise your rights — we will tell you by email and with a notice in the app before it takes effect, and summarise what changed. Smaller changes, like clarifications, are announced in the app the next time you open it. We will never use information we have already collected in a materially different way from what this policy said when we collected it without first asking for your consent. We review this policy at least once a year.
You can edit your profile, delete individual check-ins (with the photos on them), and delete your whole account from inside the app at any time. You can also ask us to do any of it for you at support@spiritz.app.
Questions about this privacy policy? Please get in touch by email at privacy@spiritz.app and we’ll be happy to answer them!