Humidor Reserve Privacy Policy

Sign-In And Age Assurance

Humidor Reserve requires Sign in with Apple before use. Before private content is shown, the app uses Apple's age-assurance features where available and asks you to confirm that you meet the legal-age requirement for your App Store country or region. The United States requirement is 21 or older.

The app does not ask for or store your exact age or birth date. It also does not store or sync raw age-range details, child-account status, declaration method, or parental-control details.

Private Humidor Data

Your humidor data is private to your signed-in app account. This includes humidors, cigars, tasting history, notes, private user rating summaries, purchase/source fields, wishlist, favorites, saved pairings, Smoking Ritual details, Receipt Archive files and OCR text, Smart Humidor Monitoring readings, profile preferences, reusable values, sync status, attached photos, generated Export files while you create or share them, and paid Backup & Restore snapshots.

The app stores this data locally on your device and syncs or stores it through Apple's private CloudKit database for your account. Humidor Reserve does not publish public profiles, reviews, comments, follows, retailer links, deals, coupons, or purchase flows.

Bundled Catalog Ratings

For bundled catalog cigars, Humidor Reserve automatically contributes a pseudonymous Catalog rating when you save a smoke/check-in rating or later edit that bundled-vitola rating in History. There is no opt-in or opt-out for this contribution.

The contribution is limited to one contribution per signed-in app account per bundled vitola. To protect that limit, the app may send transient Sign in with Apple proof to the public rating backend to obtain a Humidor Reserve rating token. The backend verifies the Apple proof, discards Apple tokens, does not store Apple refresh tokens or raw Apple account subjects, and returns a rating token that the app stores only on your device in account-scoped Keychain storage.

If you rate the same bundled vitola more than once, the submitted contribution is your all-time average for that bundled vitola, rounded to one decimal.

The submitted payload contains the bundled catalog version, bundled vitola ID, the contribution rating, and optional non-identifying app/platform metadata. The backend derives and stores a per-vitola dedupe key. The app does not send a client-provided dedupe key, your Apple account identifier, local app account ID, CloudKit identity, tasting record ID, physical cigar ID, event date, edit date, notes, photos, flavor tags, location, smoking duration, purchase price, source text, humidor name, profile data, wishlist state, or favorite state.

The backend stores server receipt/update timestamps. Catalog rating contributions may be combined with other users' contributions, but low-volume bundled vitolas may reflect very few contributions.

Photos

Photos are optional and available only in paid tiers. Premium supports one photo per humidor and physical cigar. Exclusive supports full first-release photo support for humidors, physical cigars, and tasting records. Photos are stored locally and may sync through private CloudKit data. Photos and photo metadata are excluded from diagnostics.

Backup And Restore

Backup & Restore is available for paid tiers as private restore-point snapshots in your CloudKit private database. Snapshot packages include private synced account records and synced photo bytes needed for full-account restore.

Backup & Restore snapshots exclude diagnostics, RevenueCat state, Keychain bearer tokens, public Catalog rating queues and caches, local-only settings, and rebuildable caches. Downgrade, expiration, or cancellation preserves existing snapshots until their normal retention window expires, but stops new snapshot creation and requires Premium or Exclusive to restore from retained snapshots.

Anonymous Diagnostics

Anonymous diagnostics are optional and require consent. If enabled, diagnostics use a random app-instance ID that is separate from your Apple account, local app account, profile, and Cloud sync identifiers.

Diagnostics may include product interaction, crash or diagnostic data, and limited cigar-related text, price, or location fields when needed to understand app quality problems. Diagnostics are used only for crash reporting and product-quality analysis. They are not used for advertising, resale, marketing, or tobacco promotion.

You can withdraw diagnostics consent in Profile > Privacy. Withdrawing consent stops future diagnostics, deletes queued local diagnostics, and clears the random diagnostics app-instance ID. Successful sign-out and account deletion also clear queued local diagnostics and the current diagnostics app-instance ID before another signed-in app account can share diagnostics.

Diagnostics already uploaded to the production diagnostics service are not automatically deleted by sign-out, account deletion, or consent withdrawal. Uploaded diagnostics objects are retained for 90 days.

Sign-Out And Account Deletion

Sign-out clears local synced data for the signed-in app account after sync blockers pass. Account deletion requires typing DELETE and is blocked while unsynced local changes remain.

Successful account deletion removes the active account's CloudKit private-zone data, including synced photos and Backup & Restore snapshots, plus local offline data for that account. It stops future public Catalog rating submissions and clears the local Catalog rating token, but it does not withdraw pseudonymous Catalog rating contribution records already submitted to the public rating backend. It does not delete data for another Humidor Reserve app account.

Tracking, Ads, And Payments

Humidor Reserve does not sell personal data, does not use tracking domains, does not run ads, and does not include trials, demo mode, tobacco purchase flows, retailer links, or non-Humidor Reserve in-app purchases.

Paid Premium and Exclusive access is handled through Humidor Reserve auto-renewable subscriptions where available for your App Store country or region. Subscription purchase, restore, entitlement, Paywall, and Customer Center flows use RevenueCat. RevenueCat receives subscription purchase history and related app/platform purchase metadata for receipt validation, entitlement unlocks, restore, customer support, fraud prevention, and subscription analytics. Humidor Reserve does not send raw Apple account identifiers, local app account IDs, profile IDs, CloudKit identities, or reusable sync identifiers to RevenueCat in the first release. Apple handles payment processing; Humidor Reserve does not receive payment card details. Lounge Edition is planned for later and is not purchasable in the first release.