Last Updated: July 25, 2026
This Privacy Policy describes how at² GmbH ("we", "us") handles your information when you use the Whiskr app, the Whiskr community features, and the Whiskr Premium subscription. Whiskr is designed local-first: you can use the core app entirely without an account, and every server-side feature below is optional.
Controller: at² GmbH — info@at2-software.com
Without an account, your whiskey collection, photos and tasting notes are stored only in the app's local database on your device. Nothing is sent to our servers, and we collect no personal information, no device identifiers, no analytics, no crash reports and no location data.
If you create an account (email/password or Sign in with Apple / Google), we process:
Your personal tasting notes are private. They are never shown to other members — not in activity feeds, not on your profile — even if you make your profile public.
Legal basis: performance of the contract with you (Art. 6(1)(b) GDPR).
The community layer is off until you explicitly enable it and choose a username. If you do, we additionally process:
If your profile is public, other members can see your username, avatar, tier, points, badges, taste profile, shared collection and tasting history (without notes). A public profile also has a minimal web preview page (username, avatar, tier, points) reachable via its share link; private profiles show no personal data on that page. Photos you contribute to the shared catalog become part of the community catalog; you confirm you hold the rights when submitting.
Legal basis: performance of contract for the features you activate (Art. 6(1)(b) GDPR); moderation and abuse prevention rest on our legitimate interest in a safe community (Art. 6(1)(f) GDPR).
If you allow notifications, we store your device's Apple push token to send you community notifications (e.g. an approved contribution or a tier promotion). You can revoke this at any time in iOS Settings; the token is deleted with your account.
Payments are processed entirely by Apple; we never receive your payment details, billing address or Apple ID. To recognise supporters, Apple's servers send us signed subscription events containing transaction identifiers, the subscription's status and dates, and an anonymous account token that links the subscription to your Whiskr account. We use this solely to record verified supporter months and award the related badges and supporter points.
Server-side data is stored on infrastructure operated by us, protected by encryption in transit (TLS), hashed credentials, and access restricted to what the service requires. Local data on your device is protected by iOS's built-in security.
We keep your data for as long as your account exists. You can delete your account directly in the app (Settings → Account): this permanently removes your account data, synced collection and tastings, photos, push token and sessions. Contributions that were already accepted into the shared community catalog (e.g. approved bottles or catalog photos) remain part of the catalog but are no longer linked to your identity.
Under the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection. In the app you can directly:
For anything else, contact info@at2-software.com. You also have the right to lodge a complaint with a data-protection supervisory authority.
Whiskr is about whisky and is intended for users of legal drinking age. We do not knowingly collect data from children.
We may update this policy as Whiskr evolves. Material changes are announced in the app, and the "Last Updated" date above always reflects the current version.
at² GmbH — info@at2-software.com