Privacy Policy

The Service is restricted to people 21 years of age or older. We do not knowingly collect data from anyone under 21. If you believe a minor has created an account, contact us at support@creadio.com and we will delete it.

You give us:

• Your email address and password (or sign-in provider token).
• Your display name and, optionally, a public handle, bio, and avatar photo.
• Your date of birth, used once to verify you are 21+ (we store an age-verified flag, not the date itself, after verification).
• Tasting journal entries you create, including titles, notes, ratings, photos, and the cigars and beverages you reference.
• Who you follow and who follows you.
• Messages you send or receive through the Service.
• Payment details, if you become a paid member. These are handled directly by Stripe; we never see or store full card numbers.

We also collect automatically:

• Standard device, app, and browser information needed to deliver the Service securely (IP address, OS, app version).
• Basic crash and error diagnostics.
• Push notification tokens, if you opt in to push.

We do not run third-party advertising trackers. We do not sell your personal data.

• To run the pairing engine, your tasting journal, the catalog, and the social features.
• To verify you are 21+, as required by law and our platform policies.
• To process payments and renewals for paid memberships (via Stripe).
• To send transactional emails for sign-in, security alerts, receipts, and important policy changes.
• To send optional updates if you opt in (new curator posts, member meetups).
• To detect, prevent, and respond to fraud, abuse, and policy violations.

We only share data with the service providers we need to operate, under contracts that require them to protect it:

• Supabase, our backend, database, authentication, and storage.
• Stripe, for payments on paid memberships.
• Apple and Google, to deliver push notifications, host the apps, and process anything you buy on the App Store or Play Store.
• Email and crash-reporting providers we engage from time to time.

We may disclose data when required by law, a valid legal request, or to protect the safety of our members or the public.

By default, your tasting journal is private. Only entries you mark “Share with the community” are shown to others, and only when your profile is public. Free members are not given a public @handle. Public profile pages on the web are reserved for paid members.

Anything you post in public, including your display name, handle, avatar, bio, public journal entries, and follows, is visible to other members and, where you have a public handle, to anyone on the internet.

You can:

• Edit your profile, bio, and avatar at any time from the app.
• Make your journal private or public.
• Block another member or report content you believe violates our rules.
• Unsubscribe from optional emails using the link in any message.
• Turn push notifications off in your device settings.
• Request a copy or deletion of your data by writing to support@creadio.com. Residents of California, Colorado, Virginia, and other states with similar laws may exercise the rights granted under those laws by contacting us at the same address. Residents of the European Economic Area, the United Kingdom, and Switzerland may exercise the rights granted under the GDPR or UK GDPR the same way.
• Delete your account at any time. In the app: My Account → Delete account. On the web: visit thedoyen.club/delete-account. Deletion permanently removes your profile, journal, photos, follows, and messages, and cannot be undone.

We keep data for as long as your account is active. When you delete your account, we remove your personal data within 30 days, except where we are required to retain it (for example, transaction records for tax purposes) or where keeping a limited copy is necessary to enforce our rules or protect our members from abuse.

We use industry-standard practices to protect your data, including encryption in transit and at rest, strict access controls, and row-level security on every database table. No method is perfectly secure. Please use a strong password and let us know immediately if you believe your account has been accessed without permission.

The Doyen is operated from the United States. By using the Service you understand your data will be processed in the United States.

We will update this Policy from time to time. We will post the new version here and update the effective date. For material changes, we will notify you by email or an in-app notice before they take effect.

Questions, requests, or concerns? Email support@creadio.com.