Who we are

Mixory is provided by FirthBridge Systems, LLC, c/o InCorp Services, Inc., 349 Kinderkamack Road, Westwood, NJ 07675-1652, USA (“Mixory”, “we”, “us”). We are the controller of the personal data described here. Contact: contact@mixory.app.

This policy covers the Mixory apps for iOS, Android and desktop, and the website mixory.app.

Using the app without an account

You can browse the recipe catalog, read recipes, and keep favorites, ratings and lists without creating an account. In this guest mode your recipes, bars, favorites and lists stay on your device and are not sent to us; the only thing we may receive is the pseudonymous usage statistics and crash reports described below. Taste recommendations are calculated on your device.

What we collect when you create an account

Account details. You can sign in with email or through Apple, Google, Microsoft, or Facebook. For an external provider, our sign-in service receives a provider account identifier and may receive your email address and name. Apple may give us a private relay address if you choose to hide your email. Some providers may not share an email address. If you sign in with email, we use the address you provide to manage your Mixory account.

Your Mixory content. With a Mixory Everywhere subscription we store and synchronize what you create in the app: your bars and the ingredients in them, favorites, ratings, the drinks you marked as made, your lists, shopping lists, and app preferences.

Subscription information. Purchases are handled by the Apple App Store, Google Play or, for the desktop apps, Stripe. We never see or store your card details. We receive the transaction and subscription identifiers, the plan, and its status and renewal or expiry dates, so that we can unlock the subscription on your account. For purchases through Stripe we also receive your email address and billing country for receipts and tax.

Technical data. Our servers record your IP address, the time of each request and a device identifier created by the app, to keep the service secure, prevent abuse and keep your devices in sync.

Usage statistics and crash reports

To understand how Mixory is used and to fix problems, the app sends us usage statistics (which screens and features are used and how often, the app version, device model, operating system version and language, and an approximate location (country, region and city) that Google derives from the IP address without storing it) and crash reports (what the app was doing when it failed, with the same technical details and a technical trace of the failure). This applies whether or not you have an account.

These reports are identified by a random installation identifier, not by your name, email or account. They do not include your recipes, bars, lists or anything you typed, and they are never used for advertising or shared with data brokers. The app asks for your consent before sending usage statistics, wherever you are; crash reports are sent to keep the app working (our legitimate interest). On iOS and Android they are collected with Google’s Firebase Analytics and Firebase Crashlytics, with advertising-identifier collection switched off. On Android, once you allow usage statistics, Firebase also records that an in-app purchase took place (the product and price, never your payment details). The desktop apps send the same usage statistics and a short summary of each crash (the error type and where in the app it happened) directly to Google Analytics, under the same conditions.

What the app does not do

• No advertising and no advertising identifiers.
• No tracking across other apps and websites, and no advertising or data-broker SDKs. The usage statistics and crash reports described above are the only measurement inside the app.
• We do not sell or rent your personal data, and we do not share it for anyone else’s marketing.
• We do not use your content to build advertising profiles. Recommendations run on your device.

This website

The website mixory.app uses Google Analytics to understand, in aggregate, how many people visit and which pages they read. Google Analytics sets cookies and collects information such as your approximate location (derived from your IP address), your browser and device type, and the pages you view. It is provided by Google, which processes this data on our behalf under its own terms. Wherever you visit from, Google Analytics is loaded, and its cookies are set, only after you accept them in the cookie banner. You can withdraw that choice at any time using the “Cookie settings” link at the bottom of any page. You can block these cookies in your browser or with Google’s opt-out add-on. Website analytics are not linked to your Mixory account or to anything you do in the app.

Why we use it

• To provide the service you asked for (performance of our contract with you): signing you in, synchronizing and backing up your content, and unlocking your subscription.
• To keep Mixory secure and reliable (our legitimate interests): preventing abuse, diagnosing faults, and protecting accounts.
• To understand how the app is used and to fix crashes (your consent for usage statistics; our legitimate interests for crash reports).
• To understand website traffic (your consent).
• To meet legal obligations, such as tax and accounting records for subscriptions.

Who processes data for us

We use a small number of service providers, only to run Mixory: hosting and infrastructure providers for our servers and databases (OVHcloud, in Montréal, Canada); Apple and Google for sign-in and for purchases made through their stores; Microsoft and Meta (Facebook) for sign-in; Stripe for purchases made in the desktop apps; Google for website analytics; and Google (Firebase Analytics and Firebase Crashlytics) for the app’s usage statistics and crash reports, which Google processes on our behalf on its own servers. Each handles data under its own privacy policy. We may disclose information if the law requires it or to protect the rights and safety of our users.

Where data is stored

Account and synchronized data is stored on servers in Montréal, Canada, operated by OVHcloud. Usage statistics and crash reports are stored by Google, generally in the United States. FirthBridge Systems, LLC is based in the United States, so your data may also be transferred to and processed in the United States, for example when we provide support or operate the service. If you use Mixory from another country, your data is therefore transferred to and processed in Canada and the United States, whose data protection laws may differ from those where you live. Where the law requires a safeguard for such transfers, we rely on the European Commission’s adequacy decision for Canada where it applies and otherwise on standard contractual clauses; you can ask us for a copy.

How long we keep it

We keep your account and synchronized content for as long as your account exists. When you delete your account we delete your personal data from our active systems within 90 days, and it is removed from backups within a further 90 days as those backups expire, except for records we must keep by law, such as subscription transaction records. Server logs, which include IP addresses, are kept for up to 2 years for security and fraud prevention. Usage statistics are kept in detail for 14 months after your last use; after that only aggregated totals remain, which are not linked to an installation. Crash reports are kept for 90 days.

Your choices and rights

• Delete. You can delete your account and its data from Settings in the app, or by writing to contact@mixory.app; see Delete your Mixory account for the steps. Deleting your account does not cancel a subscription; cancel it where you bought it (your Apple or Google account, or the desktop app’s billing page).
• Erase this device. “Erase my data” in Settings removes the data stored on that device.
• Device backups. Your phone’s own backup (iCloud or Google) may include Mixory’s local data; you control that in your device settings.
• Access, correction, objection, portability. Depending on where you live (for example in the EEA, the UK, or California), you have the right to access, correct, delete, restrict or object to the use of your data, to receive a copy, and to complain to your data protection authority. Write to us and we will respond within the time the law requires.

Security

Data is encrypted in transit. Your password for Apple, Google, Microsoft, or Facebook is never shared with us, and session keys are kept in your device’s secure storage. No system is perfectly secure; if you believe your account has been accessed without permission, contact us.

Age

Mixory is about alcoholic drinks and is intended only for adults of legal drinking age in their country. We do not knowingly collect personal data from anyone under that age. If you believe someone under age has given us data, contact us and we will delete it.

Changes to this policy

If we change what we collect or how we use it — for example, if we add a new provider or a new type of data — we will update this page and the date above before the change takes effect, and tell you in the app when the change is significant.