Privacy Policy

Last updated: September 16, 2026

At a glance

Mashpad is designed to keep your production data on your device. We do not require an account, we do not run analytics SDKs, and the app does not transmit your production data anywhere. The rest of this page covers the limited information that may pass through Apple's standard channels, how to reach us, and your rights under applicable privacy laws.

Who we are

Mashpad is published by Bold Coast Creative LLC, a Maine limited liability company ("Mashpad," "we," "us"). You can reach us at info@mashpad.io.

Scope

This Privacy Policy describes how we handle information in connection with:

• The Mashpad iOS application (the "App").
• Our marketing website at https://mashpad.io (the "Site").
• Support communications you initiate with us.

It does not cover Apple's own collection of information from your device. Your use of the App is also subject to Apple's Privacy Policy. Your use of the App and Site is governed by our Terms of Service and End User License Agreement (the "Terms of Service").

Information we collect

Information that stays on your device

All of your production data — runs, recipes, ferments, distillations, cuts, aging, bottling, inventory, calculator inputs, and settings — is stored locally on your device using Apple's SwiftData framework. We do not have copies. We cannot read it. If you delete the App, that data is gone unless you exported it first or it is included in a device backup you have configured.

Photos you attach

You can optionally attach photos (for batch logs, aging samples, bottling records, and recipes) using Apple's standard photo picker. Photos you select are stored within Mashpad's local database on your device. We do not transmit them anywhere.

Backups you export

The App writes a daily local backup file to its Documents folder, and you can also export backup files manually at any time. Backups are written in JSON format and stay on your device — though, because they live in the App's Documents folder, they may be included in your device's iCloud or local (iTunes/Finder) backup depending on your iOS settings. That transfer is between you and Apple under Apple's terms. You can also choose to move a backup yourself — for example, by saving it to iCloud Drive, AirDropping it, or emailing it to yourself. We never receive backup contents.

Notifications (optional)

If you grant notification permission, the App uses Apple's standard notification system to remind you about aging targets or other time-sensitive events. Notification content and scheduling live on your device — we do not see them. You can disable notifications at any time in iOS Settings → Notifications → Mashpad.

Support correspondence

When you contact us at info@mashpad.io, we receive your email address, your message, and anything you choose to share. We retain that correspondence so we can respond and refer back to it later. We do not use it for marketing.

Apple's standard channels

A few categories of information may reach us indirectly through Apple, governed by Apple's policies rather than ours:

• Crash reports and diagnostics. If you have opted in to "Share With App Developers" in iOS Settings → Privacy & Security → Analytics & Improvements, Apple may share aggregated, anonymized diagnostics and crash logs with us.
• App Store and TestFlight metrics. Apple provides us with aggregate, anonymized statistics about installs, sessions, and beta-tester counts. We cannot identify individual users from these statistics.
• Purchases and paid features. Mashpad offers a one-time paid upgrade. Purchases are processed by Apple through the App Store using Apple's in-app purchase system (StoreKit); we do not operate our own checkout. A purchase/entitlement receipt is stored locally on your device so the app can unlock and recognize your paid features offline. We do not receive your payment-card number or billing details, and buying the upgrade does not create a Mashpad account or require a Mashpad login. Any sign-in prompt you see during purchase is Apple's, not ours.

Information we don't collect

We want to be specific about what Mashpad does not do, because for many distillation apps these are the questions that matter:

• We do not have user accounts and do not collect names, passwords, profile data, or email addresses beyond support correspondence you initiate.
• We do not use third-party analytics SDKs (no Firebase Analytics, Google Analytics, Mixpanel, Amplitude, Segment, PostHog, or equivalents).
• We do not use third-party crash-reporting SDKs (no Crashlytics, Sentry, Bugsnag, or equivalents).
• We do not display advertisements and we do not embed ad-tracking SDKs.
• We do not access your location, camera, microphone, contacts, health data, Bluetooth, or motion sensors.
• We do not phone home. The App contains no outbound network calls in its production code paths.

How we use information

For the limited information we do receive, our use is limited to:

• Responding to support correspondence you send.
• Diagnosing issues using anonymized crash logs Apple may share, to fix bugs.
• Aggregate App Store and TestFlight metrics, to inform App development.
• Managing entitlements and providing paid features.

How we share information

We do not sell or rent any information from the App. We share information only as follows:

• With Apple, to the extent Apple is the channel through which you obtain the App and the conduit for diagnostics you have opted into.
• With service providers that operate our support email, who process correspondence on our behalf.
• To meet legal, regulatory, and safety obligations, including where we are compelled by valid legal process.
• In connection with a business transaction, such as a merger, acquisition, financing, or sale of assets.

Data retention

• On-device data: your on-device data stays on your device for as long as you keep the App installed. Uninstalling the App deletes the data from your device (unless you have exported it).
• Support correspondence: we retain support correspondence for up to two years after your last message, so we can support you and maintain records of past requests, after which it is deleted. You can ask us to delete your support correspondence sooner at any time, unless we are required to retain it for legal, regulatory, or dispute-resolution purposes.
• Apple-provided diagnostics: these are held only for as long as needed to diagnose issues, typically short-lived.

Your rights and choices

Because we hold very little personal data, the privacy controls available to you are simpler than for typical apps:

• Access: your production data lives on your device. Export it via the App's backup feature at any time.
• Deletion: delete the App to remove on-device data; email us to delete support correspondence.
• Notifications: enable or disable in iOS Settings → Notifications → Mashpad.
• Diagnostics: enable or disable in iOS Settings → Privacy & Security → Analytics & Improvements.

If you reside in a jurisdiction with specific privacy rights under applicable data protection laws, you may have additional rights to access, correction, deletion, restriction, portability, and to object to processing. To exercise any such right, contact us at info@mashpad.io. We will respond within the timeframes required by applicable law.

Children

Mashpad is intended for adults — you must be at least 18 and of legal age to purchase and consume alcohol where you live to use Mashpad (see our Terms of Service). It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently received information from a child under 13, contact us and we will promptly delete it.

International users

Mashpad is operated from the United States. If you access the App or Site from outside the United States, you understand that any limited information processed by us (e.g., support correspondence) may be processed in the United States. For any cross-border transfer of personal data, we will use safeguards required by applicable law.

Security

Your production data resides on your device, protected by the security model of iOS itself. We recommend keeping iOS up to date and using a device passcode. Support correspondence is held with our email provider under standard industry safeguards.

No system is perfectly secure. We will notify you of any incident that affects information we hold about you to the extent required by law.

Changes to this policy

We may update this policy from time to time. Whenever we do, we will revise the "Last updated" date at the top of this page, and the new policy will be posted on the Site. Unless otherwise required by law, non-material changes become effective immediately upon posting of the updated policy; material changes become effective thirty (30) days after posting. If a change materially affects how we process your personal data, we will use reasonable efforts to provide notice, such as through an App update or on the Site. Your continued use of the App or Site after changes become effective constitutes acceptance of the revised policy.

Contact

Questions, requests, or complaints: