RevieweryPrivacy Policy
This policy explains what The Reviewery collects, why, who sees it, how long we keep it, and what you can do about it. Plain English, no tricks.
Who is responsible
The Reviewery is operated by Heap Brands, a sole proprietorship registered in British Columbia, Canada. Heap Brands is the organization accountable for your personal information under Canada's PIPEDA and British Columbia's PIPA. Privacy questions and requests go to [email protected] — that address reaches the person responsible for privacy. A mailing address is available on request.
What we hold, why, and for how long
| What | Why | Kept |
|---|---|---|
| Account — your Apple user identifier, and your name and email if you share them (with "Hide My Email" we only ever see the relay address) | To sign you in and reach you about your account | Until you delete your account |
| Apple sign-in token — a token Apple issues when you sign in | So we can tell Apple to disconnect The Reviewery from your Apple ID when you delete your account | Until you delete your account |
| Profile — display name, handle, home city, favourite styles, avatar | To show who wrote a review | Until you change or delete it |
| Reviews, photos, tap reports, saved places, "Been here" | The content you chose to publish | Until you delete them or your account |
| Pours — the beers you log, your scores, notes, flavour sliders, and your palate profile | Your private beer log; anonymous totals on beer pages; recommendations for you | Until you delete them or your account |
| Location — checked only while you use the app; sent to our server only to answer that request | To show breweries near you; once, right after you post a review, to mark it "Written at the venue" | Never stored. Only the yes/no result of the "written at the venue" check is kept, on the review |
| Searches — the words you type in search | To find breweries and beers, and places on Apple Maps | Never stored by us. A search can appear inside a crash report, which is kept 30 days |
| Usage signals — when you open a brewery page, tap directions, tap its website, or share it; tied to your account (a guest gets an anonymous account id) and a random session id | To show breweries anonymous counts of interest, and to stop abuse | 24 months |
| A hashed copy of your IP address on those usage signals | Only to cap how many signals one connection can send in a day (an anti-abuse limit). It is hashed; we can't turn it back into your address | 30 days |
| Brewery claims — name, email, role, the note you write, and whether you ticked the monthly-email box | To check you really run the brewery, and to contact you about the claim | While the claim is active and for 12 months after it ends or is declined |
| Moderation records — reports you make, reports about your content, and account restrictions | To keep the community safe and to handle appeals | 24 months after the matter is closed |
| Diagnostics — crash reports and error logs (via Sentry) | To fix problems. Never used to profile you | 30 days |
Where AI is used, and what it sees
We use an AI service from Anthropic for four narrow jobs. In every case a person makes the final decision about your content; the AI only flags or drafts.
- Photo screening. Every photo you add — to a brewery page, a review, a pour, or as your profile picture — is checked before anyone else sees it. For brewery and review photos the check also sees the brewery's name and type; pour and profile photos are checked on the image alone.
- Text checks. After you post, your review text is scanned for content that breaks our Community Guidelines. A flag sends it to a human; nothing is removed automatically. Separately, a short fixed word list refuses a post containing an explicit slur at the moment you post it — that check is a plain list, not AI.
- "What people say." Each brewery page's short summary is written by the AI from the reviews on that page, refreshed nightly, and is never edited by a business.
- Adding a place. When you add a brewery, its public name, city, website and the type you picked may be sent to the AI to confirm it is a brewery or brewpub.
Anthropic processes this data on our behalf under its commercial terms and does not use it to train its models.
Who can see what
- Other members and visitors see your reviews, approved photos, profile name, handle, avatar, and Passport activity. That is the point of a community, and it is true whether or not the viewer is signed in.
- Your pours are private. Only you and our moderators can see which beers you've logged. Everyone else sees anonymous totals for a brewery or a beer — how many people, the average — and only once at least five different people have rated it. We may use pour history behind the scenes ("people near you rated this highly") without ever revealing who.
- Breweries that have claimed their page can see anonymous averages of how people rate their own beers, and anonymous Beer · Staff · Vibe totals — never who said what, and never below the five-person floor.
- Your email address is never shown to other members or to breweries. If you claim a brewery, we use the email you gave us to talk to you about that claim.
Who processes data for us
| Provider | What | Where |
|---|---|---|
| Supabase | Database, file storage, sign-in, server functions | United States |
| Anthropic | The AI jobs listed above | United States |
| Sentry | Crash and error reports | European Union |
| Apple | Sign in with Apple, Apple Maps (the map and place search) | Apple's infrastructure |
| Cloudflare | This website and its share links | Global edge network |
Your data therefore leaves Canada. These providers are contractually limited to processing it for us; they may be subject to the laws of the countries where they operate. We do not sell your data, we do not use it for advertising, and we do not track you across other apps or websites.
Where The Reviewery is offered
Canada and the United States. If we expand elsewhere, this page changes first.
If you enter information about someone else
Adding a brewery uses that business's public information (name, address, phone, website). Photos must not show people as the subject without their OK (see the Community Guidelines). By submitting content that includes another person's information or likeness, you confirm you have their permission or another lawful basis to share it.
Your controls and rights
- Edit or delete your own reviews and pours at any time.
- Block any member (their content disappears for you) and report any content.
- Delete your account in Settings → Delete account. This deletes your profile, your reviews, your pours, your photos, your saved places and Passport, any brewery claim, and your usage signals, and tells Apple to disconnect the app from your Apple ID. Brewery scores are recalculated without your reviews. This can't be undone.
- Monthly brewery email. If you claim a brewery you can opt in to a monthly summary of how drinkers experience it. The box is unticked by default; every email has an unsubscribe link; you can also stop it by emailing us.
- Access, correction, withdrawal. Email [email protected] to get a copy of the personal information we hold about you, to correct it, or to withdraw a consent. We answer within 30 days. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.
If something goes wrong
If a breach of security puts your personal information at real risk of significant harm, we will notify you and the relevant privacy commissioner as the law requires, and tell you what happened and what we're doing.
Children
The Reviewery is for adults of legal drinking age where they live (19+ in most of Canada, 18+ in Alberta, Manitoba and Quebec, 21+ in the United States). We do not knowingly collect data from anyone younger; such accounts are removed.
Changes
When this policy changes materially we say so in the app before the change takes effect, and every change is listed with its date at revieweryapp.com/changes.