Privacy Policy
Effective October 23, 2026. Publisher: Kenneth Schmidt (“I”, “me”). Contact: support@caskshelf.com
Short version: {{APP_NAME}} has no accounts, no ads and no tracking, and I do not run a server that receives your collection. Your data lives on your device and in your own iCloud. The only time anything leaves your device for a third party is when you choose to use a lookup, and you can leave that off.
What the app stores
Bottles, copies, pours, tastings and notes, ratings, prices and purchase details you enter, photos, flights, recipes, and settings. All of it is stored on your device. I cannot see it.
iCloud sync
If you are signed in to iCloud, the app syncs your collection between your own devices using Apple’s CloudKit private database and iCloud key-value storage. This data goes to your iCloud account, not to me. Apple’s handling of it is described in Apple’s Privacy Policy. The Demo Collection is never synced or backed up.
Lookups (optional)
The app can identify a bottle from a label photo, barcode or text, and can fill in missing details. Lookups are off until you agree to them and add your own API key from Anthropic in Settings.
- What is sent: the label photo, barcode number and/or bottle text for that lookup.
- What is never sent: your prices, store, location, notes, ratings, dates or the rest of your collection.
- Where it goes: directly from your device to Anthropic, using your own key and account. I do not receive it. Anthropic’s handling is described in its privacy policy and terms, and usage is billed to your own account.
- Your key is stored in the iOS Keychain on that device only. It is not synced and I never see it.
You can turn lookups off or remove your key at any time in Settings > Lookups.
Recipe links
If you paste a recipe link, the app fetches that web page, and optionally its picture, from the site you named, much as a browser would. That site can see the request. The app keeps no cookies from it.
Widgets and shortcuts
Widgets read a small summary file the app writes on your device (counts and, if you allow it, a bottle name). It contains no prices, store, location or notes. You can hide bottle names in Settings > Widgets. Because Lock Screen widgets are visible without unlocking, they start with names off when the app lock is on.
App lock
If you turn on the Face ID lock, the check is done by iOS. I never receive your biometric data.
Sharing and exports
Share cards, PDFs, backups and exports are created on your device and go only where you send them. Share cards show only what is on the card you create, so check a card before you send it.
What I collect
Nothing. I do not collect analytics, advertising identifiers, crash reports from inside the app, or contact details. If you email support, I will have your email address and message, and I use them only to reply. Apple may give me aggregated, anonymous crash and usage statistics through App Store Connect.
Deleting your data
Settings > Delete My Collection removes your collection from the device and, if iCloud sync is on, from your iCloud copy and your other signed-in devices. Backup files you exported or that the app saved to a folder you chose are not deleted; those are yours to remove. Deleting the app removes local data. You can remove your key and saved recipe images in Settings. You can also export your data first (JSON, CSV and PDF).
Children
{{APP_NAME}} is for adults of legal drinking age (21+ in the United States) and asks you to confirm this on first launch. It is not directed to children.
Changes
If this policy changes, I will update the date above and, for material changes, note it in the app’s release notes.