Privacy Policy

The data controller is Imázs Bt. (registered seat: 1224 Budapest, Narancsvirág utca 8., Hungary; company registration no.: 01-06-317638, tax number: 28503217-2-43; referred to as "TipsyWisee", "we", or "us"). For any privacy-related questions or requests, you can reach us at privacy@igyalokosan.hu or by phone at +36 20 200 3190, we aim to respond to every request within 30 days at the latest. For business, partnership, or marketing-related inquiries, you can reach us at info@igyalokosan.hu.

This policy explains what personal data we collect when you use the TipsyWisee mobile app (the "App") and its companion website, why we collect it, how long we keep it, and what rights you have over it, in line with the EU General Data Protection Regulation (GDPR) and applicable Hungarian data protection law.

We only collect the data needed to make the App's core features, shared evening sessions, the Cheer Squad, and the playful elements, work. Specifically, we process:

• Nickname: shown to your friends on your profile and in shared sessions, we neither ask for nor expect your real name.
• Email address: needed to create your account, sign you in, and send important notifications (e.g. password resets).
• Evening session data: the rounds you log, the shared budget/goal you set, and the target time you pick to head home. This data is what makes the App's core feature possible, following the night together, live, with your crew.
• Cheer Squad relationships (opt-in): if you choose to invite someone into your Cheer Squad, or accept such an invitation, we store this two-way, voluntary relationship, solely so the feature can work. Either side can end the relationship at any time from within the App.
• Badges and achievements: we store your progress on the App's playful elements (e.g. badges, challenges) so you can track your progress and share your experiences.
• Age verification (year of birth only): during sign-up we ask for your year of birth to confirm you are 18 or older. Important: we do not ask for or store your full date of birth, only the year, which is the minimum data needed to enforce the age requirement.
• Live location during a session (opt-in): if you separately consent, the active members of your session, and, if you choose, the loved ones you select, can see your current location for as long as the shared session lasts. Your loved ones can only see your location if they have downloaded the App and registered, the data is never shared with unregistered, external people. You can turn this off at any time from within the session, and the data is automatically and irreversibly deleted when the session ends, it is never logged or stored in your history.
• Redeeming Drink Wise partner offers: if you tap "Redeem" to use a discount at a partner venue, we store when and which offer you redeemed, solely to prevent the same offer from being redeemed more than once. The partner venue only sees the redemption via the confirmation shown on your phone screen; partners never get access to any of your personal data.
• Public tastings – partner newsletter consent: at some public tasting events, the organising partner wants to sign participants up for their own newsletter and runs a prize draw among reviewers/subscribers. On such events, the tasting screen asks you, at most once per event, whether you consent to us passing your account email address to that event's organising partner. Answering is entirely optional and never affects your ability to use the tasting.
• Tasting reviews – anonymous summary report: from the ratings you give during a tasting (taste, aroma, overall impression, whether you liked it), we build an anonymous, per-item statistical summary (averages, distributions) at the end of the tasting, and send it to the tasting's host (for a private tasting) or the organising partner (for a public tasting). The report contains no names, nicknames, or free-text notes, and cannot be used to trace any answer back to a specific person.
• Body data (optional, with explicit consent): if you enter your biological sex, year of birth, height, and weight on the "Personal Data" screen, we use it solely to estimate your alcohol clearance time and the related calorie share. This data, and the estimate calculated from it, is visible only to you; we never share it with anyone. You can delete it at any time on the "Personal Data" screen, which immediately removes the estimate too.
• Quantity and alcohol content of drinks you log: if you enter a drink's quantity and alcohol content when logging a round, the App uses it to show the pure alcohol content in grams and to build the evening summary. Like the round count and shared spending, this data is technically accessible to the other members of your session, but the App's interface never displays it to them individually, it only shows the group an aggregated round count and a breakdown by drink type.
• Water intake: if you log water during a session, only you can see this data, no one else, not even other session members, has access to it.
• Newsletter sign-up (website): if you enter your email address and subscribe to our newsletter on tipsywisee.hu (e.g. in the homepage footer, on the "Subscribe" page, or when booking a tasting), we use that email address to send you marketing emails (e.g. new tastings, offers). This subscription is independent of your App account, and you can unsubscribe at any time with one click via the link at the bottom of any email, or at tipsywisee.hu/leiratkozas.

Data needed for the App's core features (creating an account, sessions, Cheer Squad, badges) is processed to the extent necessary to perform our contract with you, i.e. the Terms of Service you accept (GDPR Art. 6(1)(b)).

For the Cheer Squad feature and certain social elements, we also rely on your consent (GDPR Art. 6(1)(a)), you can withdraw this at any time, with no need to give a reason, from the App settings, without affecting the lawfulness of processing carried out before the withdrawal.

Live location sharing during a session is also based on your consent (GDPR Art. 6(1)(a)), this is a separate, session-level consent, independent of your Cheer Squad consent, which you can withdraw at any time in the App.

Age verification is based on our legal obligations (GDPR Art. 6(1)(c)) and our legitimate interest in protecting minors and operating the service lawfully (GDPR Art. 6(1)(f)).

Redeeming offers from partner venues is processed to perform our contract with you under the Drink Wise partner program, i.e. the Terms of Service you accept (GDPR Art. 6(1)(b)).

The partner-newsletter consent at public tastings is based on your explicit, prior consent (GDPR Art. 6(1)(a)). This consent is specific to the event and the partner, and is entirely independent of using the tasting itself, you can take part whether you say yes, no, or don't answer, and we record your answer so the question isn't asked again for that same event.

Processing your body data and the estimate calculated from it (clearance time, calorie share) is based on your explicit consent (GDPR Art. 9(2)(a)), this consent covers both your body data and your logged alcohol consumption, is versioned, and can be withdrawn at any time, free of charge, on the "Personal Data" screen.

Newsletter sign-up is based on your explicit, prior consent (GDPR Art. 6(1)(a)), given when you subscribe, which you can withdraw at any time, free of charge and without giving a reason, by unsubscribing.

We keep your data for as long as your account exists and as needed to provide the service. If you delete your account, we permanently delete or irreversibly anonymize your personal data within a reasonable period, typically 30 days, except where we are legally required to retain certain records (e.g. for accounting or legal claims).

Inactive accounts (no sign-in for at least 24 months) are also deleted or anonymized after we send you advance notice by email.

Live location data shared during a session is never stored long-term: it is transmitted in real time, only to the session members entitled to see it and to the loved ones you select, and is permanently deleted as soon as the session ends.

If you delete your body data (or withdraw your consent), your sex, age, height, and weight, along with the fact of your consent, are deleted immediately and irreversibly, and the clearance estimate disappears along with them. The quantity and alcohol content already logged against your rounds is unaffected, that is your own consumption diary, and "Past nights" is built from it too. To remove that as well, you would need to delete your entire account.

We keep the email address you provide when subscribing to the newsletter until you unsubscribe, or at the latest until you withdraw your consent.

If you consent to us passing your email address to a tasting's organising partner, from that moment the partner becomes an independent controller for their own newsletter and prize draw: further storage, unsubscribing, and running the draw are governed by their own data handling and policies, which TipsyWisee has no visibility into. The fact and time of your consent remain in our own records alongside the session data, under the general retention rules above.

We do not sell your personal data, and we do not share it with third parties for marketing purposes. We use the following carefully selected processors to handle data on our behalf:

• Supabase (database, authentication, and realtime communication): Supabase provides the App's entire backend infrastructure (PostgreSQL database, user authentication, and realtime data sync). Supabase acts as a data processor, following our instructions, and applies appropriate technical and organizational measures to protect your data. Supabase stores our data on servers located in the European Union (EU region), so no data is transferred outside the European Economic Area.
• Resend (transactional emails and newsletter delivery): booking confirmation emails, and our newsletter, are sent via Resend (Resend, Inc., based in the United States). Resend acts as our data processor, and under its Data Processing Addendum (DPA) applies appropriate safeguards, including the European Commission's Standard Contractual Clauses, to lawfully cover the transfer of data outside the European Economic Area to the United States.

If you use the live location sharing feature, your current location is shared with the active members of your session and with the loved ones you select, only with people who have downloaded the App and registered. See sections 2 and 4 for details.

Because of session membership, the system technically grants the other members of your session access to your round-level alcohol content/quantity data too, just like the round count and shared spending, since this is an inherent part of the data structure needed for following the night together. The App's interface, however, never displays this to them individually: it only shows the group an aggregated round count and a breakdown by drink type. Your body data and water intake, by contrast, are accessible only to you, neither the system nor other session members can access them.

Partner venues in the Drink Wise program never get access to any of your personal data in order to redeem a discount, redemption works solely via the confirmation shown on your phone screen. The exception is when you explicitly consent to a public tasting's organising partner for their newsletter (see section 2): in that case, and only based on your consent, we pass your email address to that event's organising partner. Partners still get no access to any other personal data (e.g. nickname, session data, body data).

We share the anonymous, per-item statistics built from your tasting ratings (see section 2) with the tasting's host (private tasting) or the organising partner (public tasting). By the point it is shared, this data can no longer identify you, so it does not qualify as personal data, and no separate consent is required.

We only disclose data to public authorities where legally required (e.g. in response to an official request), and only to the extent necessary.

Our website (tipsywisee.hu) only uses strictly necessary cookies, for example, to remember your chosen language. These cookies do not track your browsing behavior and do not require separate consent under applicable law.

We currently do not use any third-party advertising or tracking analytics tools, either on the website or in the App. If this changes in the future, we will update this policy and, where required, ask for your consent in advance.

Under the GDPR you have the following rights regarding your personal data. To exercise any of them, write to us at privacy@igyalokosan.hu, or, where available, use the settings menu in the App:

• Access: you can ask us to confirm what personal data we hold about you and request a copy of it.
• Rectification: you can ask us to correct inaccurate or incomplete data, many fields (e.g. your nickname) can also be edited directly in the App.
• Erasure ("right to be forgotten"): you can ask us to delete your data when it's no longer needed or you withdraw your consent, you can also do this yourself by deleting your account in the App.
• Data portability: you can ask to receive the data we hold about you in a structured, machine-readable format, or, where technically feasible, have it transferred to another provider.
• Objection: you can object to certain processing based on legitimate interest, and ask us to restrict processing while we review your objection.
• Withdrawing consent: where processing is based on your consent (e.g. the Cheer Squad), you can withdraw it at any time, free of charge, without any negative consequences.

If you believe our data processing infringes your rights, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, address: 1055 Budapest, Falk Miksa utca 9–11., website: naih.hu), or turn to the competent court in your place of residence.

We protect your data with appropriate technical and organizational measures, including encrypted data transmission, access controls, and regular reviews, against unauthorized access, alteration, disclosure, or destruction.

We may update this policy from time to time as the App's features or the legal landscape change. We will notify you of material changes via the App or by email before they take effect. The current version of this policy is always available on this page.

If you have any questions about how we handle your data, feel free to write to us at privacy@igyalokosan.hu, we're happy to help.