Privacy Policy

Shot of the Dark
Last Updated: May 2026

Introduction

Shot of the Dark ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Please read this Privacy Policy carefully. By using Shot of the Dark, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

When you use Shot of the Dark, you may provide us with:

  • Account Information: Email address and password when you create an account

  • Profile Information: Display name (optional)

  • Coffee Log Data: Coffee names, ratings, tasting notes, brew methods, roasters, origins, and other details you choose to log

  • Preferences: Notification settings, measurement units, and app preferences

Information Collected Automatically

We may automatically collect:

  • Device Information: Device type, operating system version, and unique device identifiers

  • Usage Data: Features used, time spent in app, and interaction patterns

  • Crash Reports: Technical information to help us improve app stability

How We Use Your Information

We use your information to:

  • Provide and maintain the Shot of the Dark service

  • Create and manage your account

  • Store and sync your coffee journal across devices

  • Generate personalized recommendations based on your taste preferences

  • Send notifications (if enabled) such as streak reminders

  • Process subscription payments

  • Improve our app and develop new features

  • Respond to your inquiries and provide customer support

  • Comply with legal obligations

Data Storage and Security

Where We Store Your Data

Your data is stored securely using Supabase, a trusted cloud database provider. Supabase employs industry-standard security measures including:

  • Encryption in transit (TLS/SSL)

  • Encryption at rest

  • Regular security audits

  • SOC 2 Type II compliance

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.

Third-Party Services

Shot of the Dark uses the following third-party services:

Supabase

RevenueCat

Apple (App Store)

  • Purpose: App distribution and in-app purchases

  • Data Shared: Payment information (handled by Apple)

  • Privacy Policy: https://www.apple.com/privacy

We do not sell your personal information to third parties.

Your Rights and Choices

Access and Export

You can access your coffee log data at any time within the app. Connoisseur subscribers can export their complete data as a CSV file.

Account Deletion

You can delete your account at any time by contacting us at hello@dulcixlabs.com. This will permanently delete all your data from our servers.

Notifications

You can enable or disable notifications in the app settings or through your device settings.

Data Portability

You have the right to receive a copy of your data in a portable format. Contact us to request your data.

Children's Privacy

Shot of the Dark is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using Shot of the Dark, you consent to such transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: hello@dulcixlabs.com.
Website: www.dulcixlabs.com

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You can request information about the personal data we collect, use, and disclose.

  • Right to Delete: You can request deletion of your personal data.

  • Right to Opt-Out: We do not sell personal information, so this right does not apply.

  • Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at hello@dulcixlabs.com.

European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

  • Right of Access: Request a copy of your personal data

  • Right to Rectification: Request correction of inaccurate data

  • Right to Erasure: Request deletion of your data

  • Right to Restrict Processing: Request limitation of data processing

  • Right to Data Portability: Receive your data in a portable format

  • Right to Object: Object to certain processing of your data

Our legal basis for processing your data includes:

  • Contract: To provide the services you requested

  • Consent: For optional features like notifications

  • Legitimate Interests: To improve our services and prevent fraud

To exercise your GDPR rights, contact us at hello@dulcixlabs.com.