Legal
Last updated: July 1, 2026
Sakaba is a home-bar app for iPhone and iPad — a recipe library, a guided-mixing mode, and a personal tasting journal. This policy explains what data Sakaba touches, why, and how it's handled. We wrote it to describe what the app actually does, not a generic template — if a section doesn't apply to Sakaba, we removed it rather than leave it in for the sake of looking complete.
1. Who We Are
Sakaba is built and operated by an independent developer ("we," "us," "our"). For any privacy question, request, or concern, contact sakabaapp@proton.me.
2. The Short Version
Sakaba has no account system — there's no sign-up, no password, no profile on any server of ours. Everything you create (your bar, your tasting notes, your photos) is stored on your device and, if you have iCloud enabled, synced through your own private iCloud account using Apple's CloudKit — the same private-database mechanism Apple's own apps use. We do not have a server that stores your data, and we cannot see it. There is no analytics SDK, no advertising SDK, and no crash-reporting SDK in the app. The only outside service involved in your purchase is Apple (via StoreKit) and RevenueCat, which is described in Section 5.
3. Data We Collect and Why
a) Content you create. Recipes you add, tasting notes (rating, text, date, and an optional photo), your bar inventory, and your settings (units, theme, language, accent color) are stored locally on your device using Apple's Core Data framework. If iCloud sync is on, this same data syncs across your devices through your private iCloud account (Apple's CloudKit). We never receive a copy of it — it stays inside Apple's infrastructure, under your Apple ID.
b) Camera. If you choose to attach a photo to a tasting note, Sakaba asks for camera access at that moment. This is optional — you can use the app fully without ever granting it. Photos you take are stored the same way as the rest of your content (Core Data + your private iCloud).
c) Purchase information. In-app purchases (Sakaba Plus monthly, annual, or lifetime) are processed entirely by Apple through StoreKit. We do not see or store your payment details — Apple handles billing directly. To track which subscriptions are active for our own reporting, we use RevenueCat in "Observer Mode": RevenueCat is notified of purchase events (product purchased, renewed, or expired) directly by Apple's App Store, but it does not process the purchase itself and never receives your payment information.
d) Widget data. If you add the Sakaba widget to your Home Screen, a small snapshot (the current "cocktail of the day" name, summary, and a downscaled photo) is written to a private App Group container shared only between the app and the widget, both on your device. This never leaves your device and is never transmitted anywhere.
e) What we do not collect. Sakaba does not collect your name, email, location, contacts, or browsing history. We do not use cookies, advertising identifiers, or any tracking or fingerprinting technology. There is no analytics service measuring how you use the app.
4. How Your Data Is Stored
Your content lives in two places: locally on your device (Core Data) and, if you enable iCloud sync, in your own private CloudKit database, hosted by Apple. A private CloudKit database is accessible only to the iCloud account that owns it — not to us, not to other Sakaba users, and not to Apple for any purpose beyond operating the service. We do not operate any server that stores app content.
5. Third Parties We Work With
We work with two outside parties, both limited to what's necessary to run the app:
• Apple — provides the App Store, StoreKit (purchases), and CloudKit (your private iCloud sync). Apple's own privacy practices are described at apple.com/legal/privacy.
• RevenueCat — receives purchase-event data (which product, when, subscription status) in Observer Mode, so we can see aggregate subscription metrics. RevenueCat does not receive your name, email, or payment details. See RevenueCat's privacy policy at revenuecat.com/privacy.
We do not sell your data, and we have no data-sharing arrangement with any advertiser, data broker, or analytics company.
6. Data Retention
Your content is retained for as long as you keep it in the app. Deleting a recipe, tasting note, or the app itself removes that data from your device; if iCloud sync was on, it's also removed from your private CloudKit database once the deletion syncs. Apple's CloudKit briefly retains a change history (used to keep multiple devices in sync) that Sakaba automatically prunes after seven days. We don't retain any copy of your content ourselves, since we never receive one.
7. Your Rights and How to Exercise Them
Because Sakaba has no account and no server-side copy of your data, most rights are already in your hands directly: you can view, edit, or delete any recipe or tasting note inside the app at any time, and you can remove all synced data by turning off iCloud sync for Sakaba (Settings → your name → iCloud → Manage Storage) or by deleting the app. If you're in the EU, UK, Switzerland, California, or another jurisdiction with data-subject rights (access, correction, deletion, portability, or objection), and you have a question we haven't answered above, contact us at sakabaapp@proton.me and we'll help directly — though for content stored in your own private iCloud, Apple's iCloud tools are typically the fastest path.
8. International Data Transfers
Because storage and sync run through Apple's CloudKit, any transfer of your data outside your region is handled under Apple's own infrastructure and transfer safeguards (including Standard Contractual Clauses for EU/UK/Swiss users), not a mechanism we operate ourselves. See Apple's privacy governance page for details.
9. Children's Privacy
Sakaba is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. Sakaba is a cocktail-recipe app referencing alcoholic beverages and is intended for adults; if you believe a child has used the app in a way that raises a privacy concern, contact us and we'll address it.
10. California and Other U.S. State Privacy Rights
Sakaba does not sell or share personal information, and we don't meet the revenue or data-volume thresholds that trigger most U.S. state privacy laws (including the CCPA/CPRA) — we're a solo-developer app with no server-side data collection. If you're a California, or other U.S. state, resident and want to exercise a rights request anyway, contact us at sakabaapp@proton.me.
11. European Users (GDPR)
If you're in the EEA, UK, or Switzerland: for the limited purpose described in this policy, the developer of Sakaba (contactable at sakabaapp@proton.me) is the data controller. The legal basis for processing is performance of the contract you enter into by using the app's sync feature (Article 6(1)(b) GDPR) — we don't rely on advertising-style consent because we don't do anything that would need it. You have the rights described in Section 7. We're a solo developer without an EU establishment or a formally appointed EU representative; if this is a blocker for your use of the app, please reach out and we'll work with you directly.
12. Security
Your content is protected by the security built into iOS, Core Data, and Apple's CloudKit (encryption in transit and at rest, tied to your Apple ID). No method of storage or transmission is perfectly secure, but because we never hold a copy of your data ourselves, there's no separate "Sakaba server" that could be breached.
13. Changes to This Policy
If we change this policy in a way that matters — for example, if we ever add an analytics or AI feature that changes what data leaves your device — we'll update the "Last updated" date above and, for material changes, add an in-app notice.
14. Contact Us
Questions, requests, or concerns about this policy: sakabaapp@proton.me.