Privacy Policy

“The Doyen” (also “we,” “us,” “our”) refers to the operator of the Service. You can reach us at support+thedoyen@creadio.com.

The Service is available only to persons who are at least 21 years of age and legally reside in the United States.

We collect the information you give us when you use the Service:

• Account information: display name, email address, password (stored hashed), and date of birth.
• Profile information: handle, avatar, bio, location (city, state), preferred cigar strength, spirit preferences, ethnicity, gender, favorite makers, first cigar, years smoking, and other optional demographic and taste fields you fill in.
• Tasting journal: the cigar and beverage entries you log, notes, photos, occasion, mood, rating, and whether the entry is public.
• Photos: band photographs you capture for cigar identification and any images you attach to journal entries.
• Payment information: when you upgrade to a paid tier, our payment processor (Stripe) collects your card data directly. We store only a customer identifier and the details we need to render your subscription status (tier, interval, next renewal). We never store your card number, CVV, or bank account credentials.
• Communications: messages you send us for support, feedback, or account requests.

• Device and log data: IP address, device type, operating system, browser type, timezone, referring URL, pages visited, and interaction events (for reliability and abuse prevention).
• Cookies and similar technologies:a session cookie for authentication, and small persistent cookies for preferences such as age gate acknowledgment and the “keep me signed in” setting. We do not use third-party advertising cookies.
• Push notification tokens: if you opt in to push notifications on iOS or Android, the operating system issues a device token that we store to send you notifications.

• To operate, maintain, and improve the Service.
• To create and manage your account, verify age, and personalize your experience.
• To process membership subscriptions, renewals, cancellations, refunds where required by law, and other billing operations through Stripe.
• To send you transactional email (sign-in codes, receipts, handle approvals, subscription updates) and push notifications you have opted into.
• To identify cigars from your band photos (see § 6 below on the vision AI feature).
• To match you with pairing recommendations and to power the community, directory, and journal features.
• To detect, prevent, and address fraud, abuse, and violations of our Terms of Service.
• To comply with legal obligations, respond to lawful requests from authorities, and enforce our agreements.
• To communicate with you about product changes, community updates, and other topics you have consented to.

We do not sell your personal information. We share information in these limited situations:

• Service providers.We share necessary information with vendors who help us operate the Service (see § 6).
• Publicly with your consent. Journal entries you mark public, and directory-visible profile fields, are visible to other members and, for paid members, to visitors of your public profile at thedoyen.club/your-handle.
• Legal and safety. We may disclose information to comply with a subpoena, court order, or legal obligation, to enforce our Terms, or to protect the rights, property, or safety of members, the public, or The Doyen.
• Business transfers. If The Doyen is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

The Doyen is built on top of several third-party services. Each has its own privacy practices:

• Supabase (data hosting, authentication, storage) — privacy policy.
• Stripe (payment processing) — privacy policy. Stripe collects and processes your card data directly.
• Firebase / Google (push notifications) — privacy policy.
• Resend (transactional email) — privacy policy.
• Anthropic (vision-based cigar identification via Claude AI) — privacy policy. When you use the photo identification feature, we send your band photo to Anthropic for analysis. Under Anthropic’s zero-retention policy for API traffic, they do not use your photo to train their models and delete inputs after processing.
• Apple and Google Play (mobile app distribution and, in some cases, in-app purchase for future features). Both may collect device and download data as described in their respective privacy policies.

We keep account information for as long as your account is active. When you delete your account, we delete your journal entries, photos, follows, comments, and profile fields promptly. Some information may be retained for a limited period in backups or where required by law (for example, financial records related to your subscription).

Photos submitted to the cigar identification feature are stored in a private bucket accessible only to you and platform administrators; they are automatically purged after 30 days.

You have the right to:

• Access. View the information we hold about you from your account.
• Correct. Update your profile fields, email address, and demographic data from your account settings.
• Delete. Delete your account and associated data at /account or by writing to us. Some financial records may be retained as required by law.
• Portability. Request an export of your journal entries and profile data.
• Opt out of communications. Unsubscribe from marketing emails from the footer of any such email. You cannot opt out of transactional emails (account, billing, security) while your account is active.
• Push notifications. Toggle notifications on or off from your device settings and from /account.
• Directory visibility. Opt out of the member directory from your account settings.

To exercise any of these rights, write to support+thedoyen@creadio.com. We respond within 30 days.

The Service is not directed to and may not be used by anyone under 21 years of age. We do not knowingly collect information from anyone under 21. If we learn that a minor has provided us information, we will delete the account and information as soon as reasonably practicable. If you believe a minor has an account on the Service, contact us immediately at support+thedoyen@creadio.com.

Residents of California have specific rights under the California Consumer Privacy Act, as amended, including the rights to know, delete, correct, and opt out of the sale or sharing of their personal information. We do not sell your personal information. To exercise any right, write to support+thedoyen@creadio.com. We do not discriminate against members for exercising these rights.

Categories of personal information we may collect are those listed in § 2 and § 3 above. Business purposes for which we use each category are listed in § 4.

The Service is intended for use in the United States only. If you access the Service from outside the United States, you do so at your own risk. Your information will be processed and stored in the United States, which may have data-protection laws that differ from those of your country of residence.

We use commercially reasonable technical, administrative, and physical safeguards to protect your information, including encryption in transit, hashed passwords, row-level security in our database, and access controls for staff. No method of transmission or storage is 100% secure. You are responsible for keeping your password confidential and for notifying us of any suspected unauthorized use of your account.

Some browsers offer a “Do Not Track” signal. There is no consistent industry standard for responding to that signal, and we do not currently respond to it. We do not sell your personal information and do not use third-party advertising cookies.

We may update this Policy from time to time. If we make material changes, we will notify you by email or in the Service and update the effective date above. Your continued use after changes take effect constitutes acceptance.

Privacy questions or requests? Write to us at support+thedoyen@creadio.com.