Privacy Policy

This Privacy Policy explains how the Alcophone mobile application (“App”), operated by SafeMetrics4U (“we”, “us”, “our”), collects, uses, and protects your information.

Alcophone is built with a local-first architecture. Your personal and health-related data — including all alcohol consumption records — stays on your device. We do not operate user accounts, cloud sync, or any first-party server that stores your personal information.

1. Data Controller

The data controller for the personal data processed through the App is Máté Vitkovits, who operates the App under the name SafeMetrics4U.
Contact: safemetrics4u@protonmail.com

2. Data We Collect

2.1 Data stored locally on your device

The following data is stored exclusively on your device and is never transmitted to us or any third party:

• Personal profile: weight, height, age, gender, and country/region selection (for legal BAC limit display).
• Drink history: beverage name, volume, alcohol content, timestamp, category, and icon.
• App data: favorite drinks, BAC session data, achievement progress, goal settings, calorie data, notification preferences, and other app settings.

Age verification stores your birth month and year (never the day) on your device. They are used only to keep age-dependent legal limits correct as you get older — for example the Canadian rule that applies a zero blood-alcohol limit to drivers under 22. They are never transmitted and are deleted with the rest of your data when you clear the app.

2.2 Usage analytics (transmitted to Google)

If analytics is enabled, the App sends the following usage data to Google via Firebase Analytics:

• App interactions (e.g., which features you use, buttons you tap, and how you navigate through the App).
• Screen views (which screens you open within the App).
• Four user properties: premium status, whether the free trial has been used, days since install, and whether you have used the rideshare button.

This data never includes the drinks you log, your BAC estimates or your body details (we do record which drink categories you browse). It is linked to a random app-instance identifier that Firebase generates on your device — not to your name, email, phone number or advertising ID. Because it uses an identifier, it is pseudonymous rather than anonymous.

If you allow analytics, we may show you one of two versions of a screen and measure which one works better. This uses the same app-instance identifier as analytics and nothing else.

Firebase Analytics may also process your IP address to derive an approximate, country-level location.

2.3 Crash reports (transmitted to Google)

The App uses Firebase Crashlytics to collect crash reports. These include:

• Stack traces and error information.
• Device model, OS version, and app version.
• General device state at the time of the crash.

Crash reports are linked to a random Crashlytics installation identifier. They do not contain your name, drink history or health information — numbers are removed from error messages before a report is sent — and are used solely to identify and fix stability issues.

2.4 Server-side trial validation (transmitted to Google Cloud)

To allow one free trial per user, the App stores a minimal trial record on Google Cloud (Firebase Firestore):

• Random identifier: generated by Firebase Anonymous Authentication. It is not linked to your name, email, phone number or Google account details.
• Trial dates: when the trial started and when it ends, and whether it has been used.
• Platform (Android) and when the record was created.

To sign in with this identifier, Google briefly processes your IP address and device user agent.

This record is part of how the App works, not telemetry, so it is not affected by the analytics switch. “Erase All Data” does not delete it: otherwise erasing would grant a new trial. See Section 6 for retention.

2.4a App integrity check (Google Play Integrity)

When the App starts on Android, Firebase App Check asks Google Play Integrity to confirm that requests to our trial record come from the genuine App on a genuine device. Google processes device-integrity information for this check under its own privacy policy. No personal or health data is involved.

2.5 Advertising data (collected by Google)

Free-tier users see advertisements served by Google AdMob. When ads are served, Google may collect:

• The device advertising identifier (Android advertising ID).
• IP address (from which Google may derive an approximate location).

In the EEA, the UK and Switzerland, Google’s consent form asks for your choice before ads use this data, and you can change it later in Settings > Privacy & Legal > Privacy Choices (shown once ads have been requested). In US states whose privacy laws give you the right to opt out of the sale or sharing of personal information, the same row opens Google’s form, where you can choose “Don’t sell or share my data”. Elsewhere, ads may be personalised using your advertising ID; you can turn this off in your device settings (Android: Settings > Google > Ads, or delete the advertising ID).

This data is collected and processed by Google under its own privacy policy. Premium users do not see ads and no advertising data is collected for them.

2.6 Data we do NOT collect

Alcophone does not collect, store, or transmit:

• Your name, email address, phone number, or physical address.
• Precise location (GPS). Google may derive an approximate location from your IP address (see 2.2 and 2.5).
• Contacts, photos, or files from your device.
• Payment or financial information (purchases are handled entirely by Google Play / Apple App Store).
• Your drink log, BAC estimates or body details (these stay on your device only).

3. Legal Basis for Processing (UK GDPR / EU GDPR)

If you are located in the United Kingdom or European Economic Area, we process your data under the following legal bases:

Regarding health data (Article 9): Alcohol consumption data could be classified as health data under Article 9 of UK GDPR. However, this data is stored exclusively on your device and is never transmitted to us or any third party. We do not process this data — you do, locally on your device. No Article 9 legal basis is required for data that the controller never receives.

You may withdraw consent for analytics, crash reporting, or advertising at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4. How We Use Your Data

• Local data: Used solely within the App on your device to calculate BAC estimates, display your drink history, track achievements, and provide app functionality. We never access this data.
• Analytics: Used to understand app interactions, screen views and feature usage to improve the App; we work from aggregate reports.
• Crash reports: Used to identify and fix bugs and stability issues.
• Trial validation: Used to enforce the one-trial-per-user policy.
• Advertising: Used by Google to serve ads to free-tier users — personalised only where permitted (see 2.5).

5. Third-Party Services & International Data Transfers

The App integrates with the following Google services:

• Firebase Analytics — Pseudonymous usage events and screen views. User control: toggle in Settings (off until you allow it in Ireland and Canada).
• Firebase Crashlytics — Crash reports and device diagnostics. User control: toggle in Settings (off until you allow it in Ireland and Canada).
• Firebase Anonymous Auth — Generates the random identifier of the trial record. No name or contact details are involved.
• Firebase Firestore — Stores the trial record on Google Cloud.
• Firebase App Check (Google Play Integrity) — Confirms that requests to the trial record come from the genuine App.
• Firebase Remote Config — Fetches configuration (e.g., promotional pricing). The request carries a Firebase installation identifier; no personal or health data. It runs regardless of the analytics switch.
• Google AdMob — Serves advertisements to free-tier users. Subject to Google’s ad consent flow and Google’s Privacy Policy.
• Google Play Billing — Processes in-app purchases. Transactions are handled entirely by Google Play.

We do not sell or rent your data. We share it only with the Google services listed above, as described in this section.

6. Data Retention & Deletion

Local data

All local data is retained on your device until you delete it. There is no automatic expiration. You can delete all locally stored data at any time:

• In-app: Settings > Privacy & Legal > Erase All Data (two-step confirmation).
• Uninstall: Removing the App from your device also deletes all local data.

For more details, see our Data Deletion page.

Server-side trial record

The trial record is kept for as long as it is needed to allow one free trial per user; it has no automatic expiry. It contains only a random identifier, the trial dates and the platform — no name, email or other contact details. “Erase All Data” does not delete it.

Because we hold nothing that links the record to your name or contact details, we cannot locate it from an email or other contact request (UK GDPR / GDPR Art. 11 and equivalent provisions). It is used solely to enforce one-trial-per-user eligibility, and cannot be linked to you once the App is uninstalled.

Analytics & crash data

• Firebase Analytics: linked only to a random app-instance identifier; user-level data is kept for at most 14 months, then deleted automatically.
• Firebase Crashlytics: crash data is kept for 90 days.
• You can stop future collection at any time with the switches in Settings.
• “Erase All Data” resets the analytics identifier, so future analytics data is not connected to your earlier activity; your analytics and crash-reporting choices are kept. Because this data carries no name or contact details, we cannot match it to you on request.

Advertising data

Advertising data retention is governed by Google’s privacy policy. You can reset your advertising identifier through your device settings.

7. Data Storage & Security

• All personal and health data is stored on your device only, using standard local storage.
• Security-sensitive data (trial state, purchase verification) is stored in your device’s secure storage (Android Keystore).
• Critical app state is protected with cryptographic integrity checks (HMAC) to prevent tampering.
• Server-side data (the trial record) is stored on Google Cloud (Firebase Firestore) and protected by Firebase security rules that restrict access to the App’s own signed-in session.
• No cloud backup of app data is performed by us. Android’s cloud backup does not include your drink log or profile; a direct phone-to-phone transfer that you start copies all App data to the new phone.

8. Your Rights by Jurisdiction

8.1 United Kingdom (UK GDPR, Data Protection Act 2018, PECR)

UK users have the following rights under UK GDPR:

• Right of access (Art. 15): Request a copy of your personal data.
• Right to rectification (Art. 16): Request correction of inaccurate data.
• Right to erasure (Art. 17): Request deletion of your data (see Section 6).
• Right to restrict processing (Art. 18): Request limitation of processing.
• Right to data portability (Art. 20): Receive your data in a structured format.
• Right to object (Art. 21): Object to processing based on legitimate interest.
• Right to withdraw consent: Withdraw consent at any time via Settings toggles.

To exercise your rights or make a complaint, contact us via the details in Section 1. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

8.2 Ireland (EU GDPR, Data Protection Acts 1988–2018, ePrivacy Regulations 2011)

Users in Ireland have the following rights under the EU General Data Protection Regulation:

• Right of access (Art. 15): Request a copy of your personal data.
• Right to rectification (Art. 16): Request correction of inaccurate data.
• Right to erasure (Art. 17): Request deletion of your data (see Section 6 and our Data Deletion page).
• Right to restrict processing (Art. 18) and right to data portability (Art. 20).
• Right to object (Art. 21): Object to processing based on legitimate interest.
• Right to withdraw consent: At any time, in Settings > Privacy & Legal, without affecting processing that took place before.

Consent before any tracking

Under Regulation 5(3) of the ePrivacy Regulations (S.I. No. 336 of 2011), information may only be stored on or read from your device with your prior consent unless it is strictly necessary for the service you asked for. In Ireland, analytics and crash reporting are therefore off until you allow them: during setup the App asks whether you allow analytics and crash reporting, and nothing is collected for either until you agree. You can allow or refuse each one separately at any time in Settings > Privacy & Legal. Advertising consent is requested separately through Google’s consent prompt (see Section 2.5).

To exercise your rights or make a complaint, contact us via the details in Section 1. Under Article 77 GDPR you also have the right to lodge a complaint with a supervisory authority — in particular in the country where you live. You can contact either:

• Data Protection Commission (DPC), Ireland’s supervisory authority: dataprotection.ie
• National Authority for Data Protection and Freedom of Information (NAIH), the supervisory authority of Hungary, where we are established (lead supervisory authority under Article 56 GDPR): naih.hu

8.3 Australia (Privacy Act 1988, Australian Privacy Principles)

Australian users have rights under the Australian Privacy Principles (APPs):

• APP 12: Right to access your personal information.
• APP 13: Right to request correction of your personal information.
• Right to make a complaint about privacy handling.

Alcophone does not disclose personal information to overseas recipients, except the pseudonymous analytics, crash, trial and advertising data processed by Google in the United States (see Section 5).

To make a privacy complaint, contact us first via the details in Section 1. If unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992

8.4 Canada (PIPEDA)

Canadian users have the following rights under the Personal Information Protection and Electronic Documents Act:

• Right to access your personal information.
• Right to challenge the accuracy of your information.
• Right to withdraw consent for collection, use, or disclosure.
• Right to know why your information is collected and how it is used.

Alcohol consumption data is recognized as sensitive information under PIPEDA. This data is stored exclusively on your device and is never collected by us.

In Canada, analytics and crash reporting are off until you allow them: during setup the App asks whether you allow each one, and nothing is collected for either until you agree. You can allow or refuse each one separately at any time in Settings > Privacy & Legal.

To exercise your rights or make a complaint, contact us via the details in Section 1. You may also file a complaint with the Office of the Privacy Commissioner of Canada (OPC):

• Website: priv.gc.ca
• Phone: 1-800-282-1376

Québec

If you live in Québec, the Act respecting the protection of personal information in the private sector also applies. The information described in Sections 2.2 to 2.5 (analytics events, crash reports, the trial record, integrity checks and advertising data) may be communicated outside Québec: Google LLC processes it in the United States (see Section 5). Your drink history and profile never leave your device.

Analytics and crash reporting stay off until you switch them on, as described above. To ask about your information or to withdraw your consent, contact us via the details in Section 1. You may also file a complaint with the Commission d’accès à l’information du Québec (CAI): cai.gouv.qc.ca

8.5 India (Digital Personal Data Protection Act 2023)

Indian users will have rights under the DPDP Act once its substantive provisions come into force (expected 2027):

• Right to access information about processing.
• Right to correction and erasure of personal data.
• Right to grievance redressal.
• Right to nominate.

Until the DPDP Act is fully enforced, we voluntarily provide:

• Transparency about data practices (this policy).
• Clear information on how server-side data is retained and deleted (see Section 6).
• Local data deletion (Settings > Privacy & Legal > Erase All Data).

Once the Data Protection Board of India (DPB) is operational, complaints may be directed there.

8.6 United States

US users have the following controls:

• Opt out of analytics: Settings > Privacy & Legal > Analytics toggle.
• Opt out of crash reporting: Settings > Privacy & Legal > Crash Reporting toggle.
• Manage ad consent: Settings > Privacy & Legal > Privacy Choices (shown where your state’s privacy law requires it), when prompted by the consent dialog, or through your device’s ad settings.
• Delete all local data: Settings > Privacy & Legal > Erase All Data.
• Server-side data: Our only server-side data (pseudonymous analytics, crash reports, the trial record and the Firebase installation identifier) is not linked to your name or contact details. You can stop analytics and crash collection with the switches above (see Section 6 for retention).
• Manage notifications: Each notification category can be toggled individually in Settings.

California residents: We do not sell personal information. Where ads are personalised, Google’s use of your advertising ID may count as “sharing” for cross-context behavioral advertising under the CCPA/CPRA. You can opt out in Settings > Privacy & Legal > Privacy Choices (choose “Don’t sell or share my data”), or by turning off ads personalization or deleting your advertising ID in your device settings (Android: Settings > Google > Ads).

8.7 All users

Regardless of your jurisdiction, you can always:

• Opt out of analytics and crash reporting via Settings toggles.
• Manage advertising consent via the consent dialog or device settings.
• Delete all local data via Settings > Privacy & Legal > Erase All Data.
• Stop server-side analytics and crash collection with the switches in Settings; the remaining server-side data is not linked to your name or contact details (see Section 6 for retention).
• Manage notification preferences in Settings.

9. Age Requirements

Alcophone is intended for users of legal drinking age in their jurisdiction. The App verifies age during onboarding using the minimum legal drinking age for the selected country:

• United States: 21 years
• Canada: 18 or 19 years (varies by province)
• Australia: 18 years
• United Kingdom: 18 years
• Ireland: 18 years
• India: 21 years (varies by state; some states prohibit alcohol)

The App blocks access for users below the legal drinking age in their selected country. We do not knowingly collect data from anyone below the applicable minimum age. No COPPA-regulated data is collected.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. For material changes that affect your rights, we will tell you about them in the App.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, you can reach us:

• Email: safemetrics4u@protonmail.com

We aim to respond to all data rights requests within 30 days (or within the timeframe required by your local law).

12. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of Hungary. Any dispute arising from or related to this Privacy Policy or the data practices described herein shall be subject to the exclusive jurisdiction of the courts of Hungary, to the extent permitted by applicable law.

Nothing in this section limits any statutory rights you may have under the laws of your country of residence, including but not limited to:

• UK GDPR and the Data Protection Act 2018 (United Kingdom)
• The EU General Data Protection Regulation and the Data Protection Acts 1988–2018 (Ireland)
• The Privacy Act 1988 (Australia)
• PIPEDA (Canada)
• The Act respecting the protection of personal information in the private sector (Québec)
• The Digital Personal Data Protection Act 2023 (India)
• CCPA/CPRA (California, United States)