CSSOMM Mobile App Privacy Policy

Effective Date: August 2025
Last Updated: August 2025

1. Introduction

Contemporary Sommelier Society Mobile ("CSSOMM," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address (for CSSOMM student verification)
  • Menu Data: Photos of restaurant menus and beverage lists you capture
  • Preferences: Your beverage and food preferences, exclusions, and settings
  • Reviews: Feedback about beverages, including taste scores and pairing ratings
  • Usage Data: App settings and configuration preferences

2.2 Information Collected Automatically

  • Device Information: Device type, operating system version, and app version
  • Usage Analytics: How you interact with the app, features used, and performance data
  • Technical Data: App crash reports and error logs for improving functionality

2.3 Information We Do NOT Collect

  • Personal Identifiers: We do not collect names, phone numbers, or addresses
  • Financial Information: We do not collect payment details or financial data
  • Location Data: We do not collect or track your physical location
  • Contact Information: We do not access your phonebook or contacts

3. How We Use Your Information

3.1 Primary App Functionality

  • Menu Processing: Analyze captured menu photos to extract beverage and food information
  • Recommendations: Provide personalized beverage and food pairing suggestions
  • User Experience: Remember your preferences and settings for future use
  • App Improvement: Analyze usage patterns to enhance app performance and features

3.2 Data Processing

  • Local Storage: Store menu data and preferences on your device (when enabled)
  • Remote Processing: Process menu images on secure servers to extract text and data
  • Anonymous Analytics: Use aggregated, non-personal data to improve our services

4. Data Sharing and Disclosure

4.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for monetary consideration.

4.2 Limited Sharing

We may share information only in these specific circumstances:

  • Service Providers: With trusted third-party services that help us operate the app (e.g., cloud storage, analytics)
  • Legal Requirements: When required by law or to protect our rights and safety
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with user notice)

4.3 Anonymous Community Features

  • Community Reviews: When you enable "Save Reviews Remotely," your beverage reviews may be shared anonymously with other users to improve community recommendations
  • No Personal Identification: Community reviews are completely anonymous and contain no personally identifiable information

5. Data Security

5.1 Security Measures

  • Encryption: All data transmission uses HTTPS/TLS encryption
  • Secure Storage: Data is stored using industry-standard security practices
  • Access Controls: Limited access to user data by authorized personnel only
  • Regular Audits: We regularly review and update our security practices

5.2 Data Retention

  • Local Data: Menu data stored on your device is retained according to your settings
  • Remote Data: Anonymous usage data is retained for up to 2 years for service improvement
  • Account Deletion: You can request complete account deletion at any time

6. Your Rights and Choices

6.1 Data Control

  • Local Storage: Choose whether to save menu data locally on your device
  • Community Sharing: Opt in or out of sharing anonymous reviews with the community
  • Settings Management: Control your app preferences and data collection settings

6.2 Account Deletion

We do not store any information to identify the actual users therefore are not able to delete any saved reviews.

7. Third-Party Services

7.1 Analytics and Services

Our app may use third-party services for:

  • Crash Reporting: To identify and fix app issues
  • Analytics: To understand app usage and improve features
  • Cloud Processing: To analyze menu images and provide recommendations

7.2 Third-Party Compliance

We ensure all third-party services comply with our privacy standards and do not collect personal data beyond what's necessary for app functionality.

8. Children's Privacy

Our app is not designed for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. International Data Transfers

If you are located outside the United States, please note that your information may be transferred to and processed in the United States. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Website Update: Posting the updated policy on our website

11. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: devsupport@cssomm.com
Website: www.cssomm.com Address: 1209 MOUNTAIN ROAD PL NE STE N ALBUQUERQUE, NM 87110

12. Legal Basis (EU Users)

For users in the European Union, we process your data based on:

  • Consent: For optional features like community sharing
  • Contract Performance: To deliver the app functionality you expect

Note: This privacy policy is designed to comply with Google Play's User Data policy requirements and applicable privacy laws. Please review it with your legal counsel to ensure it meets your specific needs and legal obligations.

Key Compliance Points Addressed:

✅ Transparency: Clear disclosure of data collection and usage
✅ No Data Sale: Explicit statement that personal data is not sold
✅ Security: Details about encryption and security measures
✅ User Control: Clear options for data management and deletion
✅ Third-Party Disclosure: Information about service providers
✅ Children's Privacy: Statement about not collecting data from children under 13
✅ Account Deletion: Clear process for users to delete their accounts
✅ EU Compliance: GDPR considerations for European users