Privacy Policy

Terms and Conditions

Frequently Asked Questions

Introduction
Crafted is an AI-powered cocktail recipe app built by Wonderflow ("we," "us," "our"), a marketing and technology company based in Denver, Colorado. This policy explains what data we collect, why we collect it, and what control you have over it.We wrote this to be straightforward. If something is unclear, email us at taylor@wonderflow.io.
What We Collect
Account Information
‍When you create an account, we collect your email address and password. Your password is securely hashed and stored by Supabase, our backend provider. We never see or store your password in plain text
‍
‍Your Bar and Preferences
‍You can add ingredients you have on hand, save favorite cocktails, and set flavor preferences and profiles. This data is stored in your account so the app works the way you expect it to across sessions and devices.
‍
‍Pour Tracker
‍Crafted includes an optional drink-tracking feature. If you choose to use it, the app stores your consumption entries. This data stays in your account and is never shared with anyone.
‍
‍Subscription Information
‍If you subscribe to Crafted Pro ($2.99/month or $19.99/year), your payment is processed entirely by Apple through the App Store. We use RevenueCat to manage subscription status, which means we know whether you have an active subscription, but we do not see or store your payment details, credit card number, or billing address.

‍Device Permissions
‍Crafted may request access to your device's camera (for barcode scanning) and location (for finding nearby bars or liquor stores). These permissions are optional, requested only when you use the relevant feature, and can be revoked at any time in your device settings. We do not store your location data on our servers.
How We Use Your Data
We use the information described above to:
- Create and maintain your account
- Generate personalized cocktail suggestions based on your ingredients and preferences
- Save your favorites, ingredient inventory, and flavor profiles
- Track your subscription status so you can access Pro features
- Improve the app over time
We do not sell your data. We do not use your data for advertising. We do not share your personal information with data brokers or marketing platforms.
AI-Generated Suggestions
When you ask Crafted for cocktail suggestions, your ingredient list and preferences are sent to Anthropic's Claude AI through a secure server-side function (a Supabase Edge Function). This means:
- Your data is sent to Anthropic's API to generate a response. Anthropic does not use API inputs to train their models.
- The request includes only what is needed to generate a useful suggestion: your available ingredients, flavor preferences, and any filters you have set. It does not include your email, name, or other personal identifiers.
- We do not store the AI-generated responses beyond displaying them in the app.
You can review Anthropic's data practices at anthropic.com/privacy.
‍
Third-Party Services
Crafted relies on a small number of third-party services to function:
- Supabase — Authentication, database, and server-side functions. Your account data and app data are stored in Supabase's cloud infrastructure (PostgreSQL). Supabase Privacy Policy
- Anthropic (Claude AI) — Powers the cocktail suggestion engine. Receives ingredient and preference data per request. Anthropic Privacy Policy
- RevenueCat — Manages subscription status and entitlements. Receives an anonymous app user ID and subscription state from Apple. RevenueCat Privacy Policy
- Apple App Store — Handles all payment processing for subscriptions. We have no access to your payment method. Apple Privacy Policy
We do not use any third-party analytics, advertising, or tracking SDKs.
Data Storage and Security
Your data is stored in Supabase's cloud PostgreSQL database. Supabase uses encryption in transit (TLS) and at rest. Access to the database is restricted to authenticated requests through Supabase's Row Level Security policies.
‍
We take reasonable measures to protect your information, but no system is 100% secure. If we ever become aware of a breach affecting your data, we will notify you promptly.
Security of Data
Your data is stored in Supabase's cloud PostgreSQL database. Supabase uses encryption in transit (TLS) and at rest. Access to the database is restricted to authenticated requests through Supabase's Row Level Security policies.
‍
We take reasonable measures to protect your information, but no system is 100% secure. If we ever become aware of a breach affecting your data, we will notify you promptly.
Data Retention
We keep your data for as long as your account is active. If you delete your account, we will remove your personal data from our systems within 30 days. Some anonymized, aggregated data (like total user counts) may be retained for internal analytics.
Your Rights
You can:
- Delete your account and data — You can delete your account directly in the app under Account Settings. You can also email us at taylor@wonderflow.io and we will delete your account and all associated data within 30 days.
- Request a copy of your data — Email us and we will provide an export of the data we hold about you.
- Correct your information — You can update your email and preferences directly in the app.
- Revoke permissions — Camera and location access can be turned off in your device settings at any time.
If you are a resident of California, the EU/EEA, or another jurisdiction with specific data privacy laws, you may have additional rights. Contact us and we will work with you.
Children's Privacy
Crafted is not intended for anyone under 13 years of age. We do not knowingly collect personal information from children under 13. Additionally, because the app involves alcoholic beverage content, it is designed for users of legal drinking age in their jurisdiction. If we learn that we have collected data from a child under 13, we will delete it promptly.
Changes to This Policy
If we make meaningful changes to this policy, we will update the "Last Updated" date at the top and notify you through the app or by email. We will not reduce your rights under this policy without giving you notice and a chance to review the changes.
Contact Information
Questions, concerns, or data requests? Reach out.
Wonderflow
Denver, CO
taylor@wonderflow.io
wonderflow.io
‍