Privacy Policy — DistilleryHub

Last updated: · Contact: [email protected]

DistilleryHub is a professional networking app for distillery, ethanol, laboratory and plant professionals. This page explains what data we collect, why, and who we share it with.

1. Data we collect

Account: name, email, mobile number, MPIN (stored only as a server-side hash, never in plain text), headline, company, location, bio, profile photo.
Content: posts, comments, likes, status updates, articles, job listings, marketplace listings/RFQs/bids, group posts, files, photos, videos.
Messages & calls: chat messages; call metadata (who, when). We do not record or store call audio/video — calls are peer-to-peer and may route through a TURN relay server.
Device identifiers: push-notification token (Firebase Cloud Messaging). Camera/microphone access is only requested when you start a call or capture media.
Safety data: your block list, and reports you file against other content/users.

2. How we use it

To run the app (feed, chat, calls, groups, jobs, marketplace, notifications), for moderation and abuse prevention, and for account security (e.g. MPIN lockout after repeated failed attempts). We do not sell your data and do not use it for third-party advertising.

3. Who can see it

Your profile (name, headline, company, photo) is visible to all signed-in members. Direct messages are visible only to the participants. Admins only view reported content for moderation purposes.

4. Third-party processors

Service	Purpose
Google Firebase (Auth, Firestore, Cloud Messaging)	Login, database, push notifications
Cloudinary	Storage and delivery of photos, videos and files
Google Cloud Vision (SafeSearch)	Automatic content-safety check on uploaded images
Resend	Account-deletion confirmation emails
Supabase	Encrypted-at-rest daily backups (profiles, posts, chat messages included) — kept for 7 days
TURN relay provider	Network relay for voice/video calls when a direct connection isn't possible
Cloudflare	Hosting and API infrastructure

5. Retention and account deletion

You can request account deletion from inside the app (Settings → Delete account) or, without installing the app, from this page. Once deletion completes, your profile, MPIN data, posts, comments, messages, uploads, and follow/connection records are removed. Data remaining in daily backups expires within 7 days. Some data may be retained for a limited period where required for legal or security reasons (e.g. fraud investigation).

6. Security

Data in transit is encrypted (HTTPS). Access is restricted by Firebase security rules and server-side authorization checks. No system is 100% secure.

7. Age requirement

DistilleryHub is not directed at, and may not be used by, anyone under 18 years old.

8. Your rights

To request access, correction, or deletion of your data, email [email protected] or use the in-app/deletion-page flow above.

9. Changes to this policy

If this policy changes, the "Last updated" date above will be updated accordingly.