Privacy Policy

Last updated: 20 September 2026

This Privacy Policy explains how Shenzhen Xiongyou Technology Co., Ltd ("we", "us") collects, uses, stores and protects your information when you use the DIYDRINK mobile application and its companion bartending mat (together, the "Service").

The short version: we collect only what the app needs to work — your email, a hashed password, and the recipes you create. There are no advertising SDKs, no behavioural tracking, and we do not sell your data.

1. What we collect

1.1 Information you give us

What Why
Email address Identifies your account and lets you sign in. We do not send marketing email.
Password Stored only as a BCrypt one-way hash. We cannot recover or read your original password.
Nickname (optional) Displayed in the app only. You can leave it blank.
Recipe IDs you favourite Restores your favourites if you change device or reinstall.
Recipes you create Recipe name, description, garnish notes, ingredient list with volumes, and any cover photo you choose.

The items above are uploaded only when you create an account and use the sync features. You can browse recipes without signing in, in which case we receive nothing about you.

1.2 Bluetooth

The app requests Bluetooth permission to connect to the bartending mat, send instructions, and receive weight readings. This communication happens only between your phone and the mat; it is never uploaded to our servers. The mat has no location capability, and we do not use Bluetooth to infer your location (declared as neverForLocation on Android).

1.3 Photos

The app reads only the single photo you explicitly pick as a recipe cover. It never scans or uploads your photo library, and it does not access your camera.

1.4 What we do NOT collect

To be explicit about the boundary, we collect none of the following:

The app contains no third-party analytics, crash-reporting, advertising or push-notification SDKs.

2. How we use it

We do not use your information for automated decision-making, profiling or targeted advertising.

3. Where your data is stored

Account information and the cover images you upload are stored on our own servers (MySQL database). Your information is not transferred to third parties except as described in section 4 below.

4. Third-party services

We keep dependencies to a minimum. The only third parties involved are:

Third party Purpose Data involved
Alibaba Cloud OSS Hosts the sample photos for the app's built-in recipe library. A network request is made when you browse recipes and their images load (the provider sees your IP address). No account or recipe data is transmitted.
Apple / Google App distribution and update delivery. Handled by the App Store / Google Play under their own privacy policies. We do not provide your information to them.

We do not sell, rent or otherwise trade your personal information.

5. How long we keep it

We keep your information for as long as your account exists. Deleting your account in the app removes your account, favourites and custom recipes immediately; for email requests we complete the removal within 30 days.

When you delete a custom recipe, its record is removed from our servers. The cover image file previously uploaded for it may remain on the server, no longer linked to your account. Contact us at the address below if you want those removed as well.

6. Security

No system can be guaranteed perfectly secure, but we maintain our servers and patch known issues promptly.

7. Your rights

Wherever you are, you can exercise the following rights at any time:

If you are in the European Economic Area, the United Kingdom or California, you also have rights under the GDPR / UK GDPR / CCPA, including data portability and non-discrimination. We will not treat you differently for exercising them.

Our legal basis for processing is performance of our contract with you (providing the app's account and sync features) and your consent. You may withdraw consent at any time, though this means account-based features will stop working.

8. Children's privacy

The Service is not directed at children under 13, and we do not knowingly collect their information. The app concerns the preparation of alcoholic drinks and is not intended for minors. If you believe a child has provided us with information, contact us and we will delete it.

9. International transfers

Our servers are located outside mainland China, so your information may be transferred to and processed in a jurisdiction other than your own. We take reasonable steps to protect it in accordance with this policy.

10. Changes to this policy

If we change this policy we will update the "Last updated" date at the top of this page. For material changes we will notify you in the app. Continued use of the Service means you accept the updated policy.

11. Contact us

For any question about this policy or your data, contact us:

Shenzhen Xiongyou Technology Co., Ltd
深圳市兄友科技有限公司
Address: Room 8E, Unit 1, Times Center, No. 102 Zhongxin Road, Shangxing Community, Xinqiao Street, Bao'an District, Shenzhen, Guangdong, China
Email: INFO@DIYDRINK.COM