Privacy Policy
The short version.
- We collect what you give us to run drainc: your account details, the drinks you log, and anything you choose to add, such as photos, notes, and locations.
- Your drinks are visible only to you, your friends, and people in the games and public events you log them into. Public events are always opt-in.
- We don't sell your personal information, we don't share it for targeted advertising, and we don't use your drink logs for ads.
- You can delete your account and data at any time, in the app or here.
1. Who we are
Punchline Industries, based in the State of Iowa ("Punchline Industries," "we," "us"), makes drainc, a social app for adults 21+ to log drinks, play games with friends, and share with them. This policy covers the drainc apps for iOS, Android, and the web, and our websites at punchlineindustries.com (together, the "Services"). We are the business responsible for your personal information (sometimes called the "controller"). Our Terms of Service also apply.
2. Information we collect
2.1 Information you give us
| Category | What it includes |
|---|---|
| Account | Email address, password, username, and date of birth. Your password is handled by our authentication provider (Amazon Cognito) and is stored only in hashed form. We never see or store it in readable form. |
| Agreements | Whether you agreed to our Terms, our Privacy Policy, and to drink responsibly, and when. |
| Profile | Profile photo, bio, and home state, if you add them. Your home state is used only for regional leaderboards in public events. |
| Drink logs | For each drink you log: type, brand, name, size, alcohol by volume (ABV), a calculated standard-drink estimate, how you're feeling, optional notes, optional barcode, and the time you logged it. If you use "Log water," we also record when you logged a glass of water and its size. |
| Photos | Photos you attach to a drink or use as your profile photo. We don't read or analyze photos beyond storing and displaying them. |
| Location (optional) | Only if you turn on "Add my location" for a drink: your device's precise location at that moment and a nearby place name, which you can edit. We never collect your location in the background or when you haven't turned it on for that drink. |
| Social activity | Friends and friend requests, games and public events you create or join (including game names, descriptions, dates, goals, and join codes), game invitations you send and receive, friends you tag in a drink, reactions and comments you post, people you block, and your settings for automatically joining weekend leaderboards and for pace reminders. We also keep a record of this activity to show you in your in-app Activity inbox. |
| Reports | When you report a drink, comment, profile, or game: what you reported, the reason you chose, any details you add, and when. We also record how we resolved it. |
| Barcode contributions | When you log a drink with a barcode, the product details (brand, name, size, ABV, type) are saved to a shared barcode database so the next scan can fill them in. These entries are not linked to your account. |
| Support and requests | What you send us through our support or data-request forms or by email, such as your name, email address, username, and message. |
2.2 Information collected automatically
- Device and connection information: IP address, device type, operating system, app or browser version, and the date and time of requests. This comes to our servers when you use the Services and is recorded in security and error logs.
- Sign-in storage: the drainc apps store sign-in tokens on your device (in the web app, in your browser's local storage) so you stay signed in. We don't use cookies for advertising or cross-site tracking, and we don't currently use third-party analytics or advertising SDKs.
- Real-time connection: while a game or comment thread is open, the app keeps a connection so it can refresh when something changes. We record which game or thread you're watching for up to 6 hours.
2.3 Device permissions
- Camera: to scan barcodes and take drink photos. Barcodes are read on your device; only the barcode number is sent to us. Photos are uploaded only if you attach them.
- Photo library: to choose a drink or profile photo you pick.
- Location: only when you turn on "Add my location" for a drink, as described above.
You can change these permissions at any time in your device settings. The Services work without them.
3. How we use information
- To provide the Services: create and secure your account, log and display your drinks, calculate standard-drink estimates, show your current session's totals and pace reminders, run games and leaderboards, show friends' activity, deliver comments and updates, and fill in drink details from barcodes.
- To verify age and consent: confirm you are 21 or older and record your agreements.
- For safety and security: prevent fraud, abuse, and unauthorized access; enforce our Terms; investigate and act on reports; honor blocks; and protect our users and the public.
- To support you: respond to your questions and requests and send you service messages, such as password resets, security alerts, and notices about changes to our terms. We don't send marketing emails.
- To maintain and improve the Services: fix bugs and understand how features perform, using the information described above.
- To meet legal obligations: comply with law, respond to lawful requests, and establish or defend legal claims.
We do not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or use it to make decisions that have legal or similarly significant effects on you. If we ever introduce advertising, we will not use your drink logs or other sensitive information to target it, and we will update this policy and ask for any consent the law requires first.
4. Who can see your information
| Information | Who can see it |
|---|---|
| Username, profile photo, bio | Any signed-in drainc user, so people can find and add you |
| Drinks, including photos, notes, and locations attached to them | You, your accepted friends, and members of any game or public event you logged the drink into |
| Profile statistics (drink counts and totals) | Calculated only from the drinks the viewer is allowed to see |
| Games (name, dates, members, leaderboard) | The game's members. Anyone with the join code can see the game's name, host, description, and player count before joining. |
| Public events, such as the weekend leaderboard | Any signed-in user can see an event's name, dates, description, and player and drink counts. Only people who join can see its leaderboard. When you join a public event, everyone else in it can see your username, profile photo, home state, and the drinks you log while it's running. You choose whether to join, and you can leave at any time. Leaving removes your drinks from it. |
| Home state | Other members of the public events you join, for regional leaderboards. It isn't shown on your profile or in private games. |
| Comments and reactions | Anyone who can see the drink or game they're on |
| Friends tagged in a drink | Anyone who can see the drink. Only your accepted friends can be tagged, and they're told when you tag them. |
| Game invitations | You and the friend you invited |
| Your Activity inbox | Only you |
| Water logs, session totals, and pace reminders | Only you. They aren't shown on your profile or to friends or game members. |
| People you block | Only you. The person you block isn't notified. |
| Reports you file | Only you and our moderators. The person you report is not told who reported them. |
| Email address, date of birth, agreements | Only you and us |
If you block someone, or someone blocks you, neither of you can see the other's drinks, comments, or profile, and you can't friend, invite, or tag each other. Blocking doesn't hide content you've both already shared with others.
Photos are stored at unlisted web addresses. They can't be found by searching or browsing, but anyone who has a photo's direct link can view it. Anything others can see, they may also screenshot or share, which we can't control.
5. How we share information
We share personal information only as follows:
- Service providers that process it on our behalf, under contracts that limit their use of it to providing services to us:
- Amazon Web Services: hosting, database, file storage, sign-in (Amazon Cognito), and account email delivery.
- Expo: hosting of the drainc web app and app update delivery.
- Cloudflare: hosting of this website, email routing, and security for our forms.
- Services your device contacts directly to show maps and places:
- When you view the map, your device loads map tiles and map software from OpenFreeMap and a public content-delivery network (unpkg), which receive your IP address and the map area you're viewing.
- When you add your location to a drink, your device's built-in geocoding service (Apple or Google, depending on your device) turns the coordinates into a place name, under that company's privacy policy.
- App stores: Apple and Google, which distribute our apps and process information under their own policies when you download or use them.
- Other users: as described in Section 4, based on your friends and games.
- Legal and safety reasons: when we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of Punchline Industries, our users, or the public, including to prevent imminent harm.
- Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this policy's protections. We will notify you before your information becomes subject to a different privacy policy.
- With your consent or at your direction.
6. How long we keep information
- Account and content: for as long as your account exists. You can delete individual drinks, comments, and games you host at any time.
- After you delete your account: we delete your profile, drinks, photos, comments, friendships, and game memberships from our active systems within 30 days. Games you host are handed over to another player, or deleted if no one else is in them. Encrypted database backups expire within 35 days after that.
- Security and error logs: up to 30 days.
- Support and data requests: up to 24 months after we resolve them, so we can show we handled them properly.
- Water logs: until you delete your account.
- Reports: kept after your account is deleted, without your name attached, for up to 24 months after they're resolved, so we can handle repeat abuse and show how reports were handled.
- Barcode database entries: kept indefinitely. They aren't linked to any account.
- Legal holds: we may keep specific information longer if the law requires it or to resolve disputes, enforce our Terms, or prevent fraud or abuse.
7. Your choices and controls
- Edit your username, bio, and profile photo in the app (Profile > Edit).
- Delete any drink or comment you posted, or any game you host.
- Location is off for each drink unless you turn it on, and you can block location access in your device settings.
- Friends: remove a friend at any time to stop sharing your drinks with them.
- Blocking: block anyone from their profile, and unblock them in Settings > Blocked people.
- Pace reminders: turn them on or off in Settings > Pace reminders.
- Public events: joining is always your choice. Turn "Auto-join weekend leaderboards" on or off in Settings, leave any event from its page, and clear your home state in Profile > Edit.
- Delete your account in the app (Settings > Delete account) or through our account deletion page.
8. Your privacy rights
Depending on where you live, you may have the right to:
- know about and access the personal information we have about you, and get a portable copy of it;
- correct inaccurate information;
- delete your information;
- withdraw consent where we rely on it, without affecting processing that already happened;
- opt out of the sale of personal information, targeted advertising, and profiling (we don't do any of these); and
- appeal our decision on your request.
We honor these requests for all users, wherever they live. To make a request, use our data request form or email contact@punchlineindustries.com.
- Verification: to protect your account, we verify requests by confirming them with the email address on the account.
- Authorized agents: you may use an authorized agent. We'll ask for proof of their authority and may need to verify your identity directly.
- Response time: we respond within 30 days, and in any case within the time the law requires (for example, 45 days, extendable once where permitted).
- No discrimination: we will not discriminate against you for exercising your rights.
- Appeals: if we deny your request, you can appeal by replying to our decision or emailing us with the subject "Privacy Appeal". If you're still not satisfied, you can contact your state attorney general.
California residents: in the past 12 months we have collected the categories of information described in Section 2 (identifiers, customer records, internet and device activity, precise geolocation when you enable it, photos, and information that may reveal health-related habits) from you and your device, for the purposes in Section 3, and disclosed them only to the recipients in Section 5. We do not sell or share personal information, and we use sensitive personal information only as needed to provide the Services you request.
9. Consumer health data
Some state laws, including Washington's My Health My Data Act and Nevada's consumer health data law, protect "consumer health data." Information about your alcohol consumption, such as your drink logs and standard-drink estimates, and information inferred from it, may be consumer health data under those laws. This section is our consumer health data privacy policy and applies in addition to the rest of this policy.
- What we collect: the drink-log and water-log information described in Section 2.1, and statistics we calculate from it (such as totals, weekly counts, and your current session's pace).
- Sources: you, when you log drinks, and our own calculations from those logs.
- Why we collect and use it: only to provide the features you ask for, meaning your drink history, standard-drink estimates, session totals and pace reminders, games, leaderboards, and sharing with the friends and game members you choose.
- Who we share it with: the users described in Section 4, based on your choices, and the service providers in Section 5 that host it for us. We do not sell consumer health data, and we do not use it for advertising.
- Consent: we collect it only with your consent, which you give when you choose to log a drink after agreeing to this policy. You can withdraw consent by deleting drinks or your account.
- Your rights: you can confirm whether we collect your consumer health data, access it, see a list of the third parties and affiliates we've shared it with, delete it, and withdraw consent, using the methods in Section 8. We won't discriminate against you for exercising these rights.
10. Security
- Encryption: information is encrypted in transit (HTTPS/TLS), and our database is encrypted at rest.
- Access controls: our servers run in private networks, and every request is checked against the visibility rules in Section 4.
- Limits: no method of transmission or storage is completely secure, so we can't guarantee absolute security.
- Breaches: if we learn of a breach affecting your personal information, we will notify you and the authorities as the law requires.
- Your part: use a strong, unique password and keep it private.
- Reporting vulnerabilities: see reporting security issues.
11. Age requirement
The Services are only for people 21 and older and are not directed to children. We do not knowingly collect personal information from anyone under 21. If we learn that we have, we will delete the account and its information. If you believe someone under 21 is using drainc, please let us know.
12. Where we process data
We are based in the United States, and we store and process information in the United States (Amazon Web Services' US East region). If you use the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those where you live.
13. Changes to this policy
We may update this policy from time to time. We will post the updated version here with its effective date. If we make a material change, we will notify you in advance through the Services or by email, and where the law requires, we will ask for your consent.
14. Contact us
Punchline Industries
Privacy questions and requests: contact@punchlineindustries.com
Data requests: punchlineindustries.com/delete-account