Privacy

Tahona privacy policy

Last updated August 13, 2026

Tahona is an agave-spirits collection app published by Rainshadow Software. This policy describes what the app collects, why, who processes it, and how to delete it. It covers the Tahona mobile app only — the policy for this website is separate.

What we collect

Account data. Your email address and an optional display name and handle. Passwords are stored only as a hash by our authentication provider. If you sign in with Apple or Google, we receive your email address and name from that provider — nothing else, and we never receive your password. Apple's Hide My Email is supported and works normally.

Content you create. Your bottle collection, tasting notes, ratings, lists, flights, follows, likes, comments, and any bottles you submit to the shared catalog.

Usage analytics. We use PostHog to understand how the app is used: screens viewed, features used, searches performed, and basic device information such as platform and app version. This is tied to a pseudonymous identifier, not to your email.

Crash and error diagnostics. We use Sentry to capture crashes and errors. A report includes a stack trace, device model, OS version, and app version so we can fix the problem. Reports are linked to a pseudonymous identifier.

Push notification tokens. If you turn on notifications, we store the device token the operating system issues so we can deliver them. You are never prompted without asking for notifications first, and you can turn them off at any time in Settings or in your device's system settings.

AI features. When you use AI insights, your question and the relevant parts of your collection — bottle names, categories, and similar catalog details — are sent to Anthropic's Claude API to generate a response. These requests are not used to identify you and are subject to Anthropic's usage policies.

We do not collect your location, contacts, photos, health data, or advertising identifiers. We do not sell your data, we do not share it with data brokers, and the app contains no ads and no third-party ad tracking.

Camera

The app requests camera access for one purpose: scanning bottle barcodes. Frames are processed on the device for barcode detection and are never stored or uploaded. The app does not request microphone access and does not record audio or video.

What other people can see

Tahona has social features, so some of what you create is visible to other signed-in users. Being explicit about which is which:

  • Private to you: your bottle collection and its details (including purchase price and storage location), and your tasting notes. Other users cannot read these.
  • Visible to other signed-in users: your profile — display name, handle, and public collection statistics — along with your lists and their contents, your follows, and any likes or comments you leave. Lists are a sharing feature and are readable by other signed-in users; do not put anything in a list you would not want another user to read.
  • Public and permanent: bottles you submit to the shared catalog become part of a crowdsourced registry used by everyone. These entries survive account deletion in anonymized form, with your name removed.

Where your data is stored

Data is stored with Supabase (PostgreSQL) in the United States, region us-west-2. Access is enforced at the database level with row-level security.

Deleting your account

You can permanently delete your account and its data from inside the app at any time: Settings → Delete Account. No email, no support ticket, no waiting period.

Deletion removes your account record, bottle collection, tasting notes, lists, flights, follows, push notification tokens, and AI usage records. Catalog submissions are retained but anonymized, as described above. Deletion cannot be undone.

Data retention

Your data is retained for as long as your account exists. Analytics and crash-diagnostic records are retained on our providers' standard schedules and are not linked to your account after deletion.

Age requirement

Tahona is for adults of legal drinking age in their jurisdiction and is rated 18+. The app asks you to confirm you are of legal drinking age before it can be used. We do not knowingly collect data from anyone under that age; if you believe a minor has created an account, contact us and we will remove it.

Your rights

You can access, correct, export, or delete your data. Editing and deletion are available in the app; collection export is available in Settings. For anything else — including requests under the GDPR or CCPA — email us and we will respond.

Third-party processors

  • Supabase — database, authentication, file storage
  • Apple and Google — sign-in, if you choose to use it
  • Expo — push notification delivery
  • PostHog — product analytics
  • Sentry — crash and error reporting
  • Anthropic — AI-generated responses

Each processes data only as needed to provide the functionality described above.

Changes

We may update this policy as the app evolves. The date at the top reflects the most recent revision, and material changes will be noted in the app's release notes.

Contact

Questions or data requests: hello@rainshadowhq.com