Privacy Policy

This Privacy Policy explains how JourneyM8 Ltd (“JourneyM8”, “we”, “us”, or “our”), a company registered in England and Wales, collects, uses, shares, and protects your personal information when you use the JourneyM8 mobile applications, the website at journeym8.com, and related services (together, the “Service”).

We are the “data controller” of your personal information for the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018).

1. Who the Service is for

JourneyM8 is a whisky companion and education service intended only for adults who are of the legal drinking age in their country or region of residence (for example, 18 in the United Kingdom and much of Europe, and 21 in the United States). The Service is not directed to, and we do not knowingly collect personal information from, anyone under that age or from children. If you believe a minor has provided us with personal information, please contact us and we will delete it.

2. Information we collect

Depending on how you use the Service, we may collect the following categories of information:

• Account information — such as your name and email address, provided when you sign in (for example via Sign in with Apple or an email sign-in link). If you use Sign in with Apple and choose to hide your email, we receive only a private relay address.
• Collection and tasting data — the information you create in the app, such as your bottles, inventory, fill levels, purchases, tasting notes, flavour profiles, sessions, milestones, timeline (Journeyline), preferences, and similar content.
• Photos and uploads — images you choose to add, such as bottle or label photos.
• Usage and device information — basic information about how you use the Service and the device you use it on (such as app version, device type, and diagnostic or analytics data), used to operate, secure, and improve the Service.
• Payment information — when you become a Founding Member or make a purchase, payment is processed by our payment providers. Card payments on the website are handled by Stripe, and in-app purchases are handled by Apple. We do not store your full card details; we receive only confirmation and limited transaction information.
• Communications — information you provide when you contact us (for example via our contact form or by email), including the content of your message.

3. How we use your information

• To provide, maintain, and operate the Service and your account.
• To save and sync your collection, tasting data, and preferences.
• To process memberships and purchases and provide related support.
• To respond to your enquiries and provide customer support.
• To secure the Service and prevent fraud or abuse.
• To understand and improve how the Service is used, and to develop new features.
• To send you service-related communications, and (where you have consented or where permitted) occasional updates about JourneyM8. You can opt out of non-essential messages at any time.
• To comply with our legal obligations.

4. Legal bases for processing

Under UK GDPR, we rely on the following legal bases:

• Performance of a contract — to provide the Service and your account.
• Legitimate interests — to secure, operate, analyse, and improve the Service, where these interests are not overridden by your rights.
• Consent — where required, for example for certain marketing communications or optional analytics; you may withdraw consent at any time.
• Legal obligation — where we must process information to comply with the law.

5. How we share your information

We do not sell your personal information. We share it only with service providers who help us run the Service, and only as needed, including:

• Apple — sign-in and in-app purchases.
• Stripe — website payment processing.
• Cloudflare — website hosting, delivery, and security.
• Formspree — handling messages submitted through our contact form.
• Microsoft 365 — our business email.
• Hosting and infrastructure providers — for our servers and databases that store your account and collection data.

We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a business transfer (such as a merger or acquisition).

6. International transfers

Some of our service providers are located outside the UK. Where we transfer personal information internationally, we take steps to ensure it is protected by appropriate safeguards, such as standard contractual clauses or equivalent mechanisms recognised under UK law.

7. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service, and afterwards only as long as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. You can ask us to delete your account and associated data at any time (see “Your rights”).

8. Your rights

Subject to applicable law, you have the right to:

• access the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your information (the “right to be forgotten”);
• object to or restrict certain processing;
• request a copy of your information in a portable format;
• withdraw consent where we rely on it.

To exercise any of these rights — including deleting your account and data — please contact us through our contact page. We will respond within the time required by law. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

9. Security

We use reasonable technical and organisational measures designed to protect your personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Cookies and analytics

Our website uses a minimal set of cookies and similar technologies necessary to operate the site and, where applicable, to understand aggregate usage so we can improve it. You can control cookies through your browser settings.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your information, please reach out through our contact page. JourneyM8 Ltd is registered in England and Wales.