Privacy Policy

Muddled

Effective Date: April 3, 2026  |  Last Updated: April 3, 2026

Muddled LLC ("we," "our," or "us") operates the Muddled cocktail companion application ("App"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our App and related services. By creating an account or using Muddled, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

• Email address (used to create and manage your account)
• User-generated content including cocktail recipes, spirit inventory, collections, and shopping lists you create within the App
• Feedback and support messages you submit through the in-app feedback form
• Menu images you upload for AI-powered scanning (processed immediately, not stored long-term)

1.2 Information Collected Automatically

• Account metadata: account creation date, subscription tier (free, premium, or founder)
• Usage analytics: features you interact with, pages you visit, buttons you tap, and in-app events such as recipe saves, spin wheel uses, menu scans, and paywall interactions
• Device and session information: browser type, operating system, and general usage patterns

1.3 Payment Information

We use Stripe, a third-party payment processor, to handle all subscription payments. We do not store your credit card numbers, bank account details, or other payment credentials. Stripe processes and stores this information directly. You can review Stripe's privacy practices at stripe.com/privacy.

2. How We Use Your Information

We use the information collected to:

• Create and maintain your account
• Provide and personalize the core features of the App (recipes, inventory management, spin wheel, AI menu scanning)
• Process subscription payments and manage your billing through Stripe
• Analyze usage patterns to improve the App's features, performance, and user experience
• Respond to feedback and support requests
• Send transactional emails (e.g., account confirmation, password reset) — we do not send marketing emails without your explicit consent
• Ensure the security and integrity of the App

3. Third-Party Services

We share data with the following third-party providers solely to operate the App:

Supabase — Database and authentication infrastructure. Your account data and user-generated content are stored on Supabase's servers. See supabase.com/privacy.

Google (Gemini AI) — Powers our AI menu scanner. Menu images are sent to Google's Gemini API for processing. Images are not retained by us after scanning is complete. See policies.google.com/privacy.

PostHog — Product analytics platform. Usage events are collected to help us understand how the App is used and improve it over time. See posthog.com/privacy.

Stripe — Payment processing for premium subscriptions. See stripe.com/privacy.

Vercel — Hosting and serverless functions for the App's backend. See vercel.com/legal/privacy-policy.

We do not sell your personal information to any third party, ever.

4. Data Retention

We retain your account data and user-generated content for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., transaction records required for accounting).

5. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your account and associated personal data
• Portability: Request your user-generated content (recipes, collections) in a portable format
• Opt-out of analytics: Contact us to opt out of PostHog usage tracking

To exercise any of these rights, please contact us at wiesner.steven@gmail.com. We will respond within 30 days.

6. Data Security

We take reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), access controls on our database, and secure third-party infrastructure. However, no system is completely secure, and we cannot guarantee absolute security.

7. Children's Privacy

Muddled is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected data from a child under 18 without parental consent, we will promptly delete it. If you believe a child has provided us their information, please contact us at wiesner.steven@gmail.com.

8. International Users

Muddled LLC is based in the United States. If you access the App from outside the United States, your data may be transferred to, stored, and processed in the United States. By using the App, you consent to this transfer.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your data based on legitimate interests (providing and improving the service) and, where required, your consent. You have additional rights under GDPR, including the right to lodge a complaint with your local supervisory authority.

9. Beta Program

If you are accessing Muddled as part of our beta program, you acknowledge that the App is in active development. Data collected during the beta period is subject to this Privacy Policy. We may reset or modify certain data as part of testing.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this document. For material changes, we will notify you by email or through an in-app notification. Continued use of the App after the effective date of a change constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Muddled LLC
Email: wiesner.steven@gmail.com
Website: https://muddled.vercel.app

© 2026 Muddled LLC. All rights reserved.