Privacy Policy
& Terms of Use
On this page
This page contains the privacy policy and terms of use for the Drank app and the justdrank.menu website. This document describes the collection and handling of user data.
Terms of Use
License to Submitted Content
By submitting a photo to the Drank app, you grant Breakfast Company LLC a worldwide, royalty-free, perpetual license to store, display, and distribute the photo. You represent that you have the right to grant this license; for example, you took the photo yourself or have permission from the person or entity who did.
Privacy Policy
Effective Date: March 22, 2026
Overview
Drank is a photo-first drink menu app for Pittsburgh. We collect the minimum information needed to operate the service. This policy explains what we collect, where it goes, and your rights.
Information We Collect
When you verify your age
We ask you to self-report whether you are 21 or older. Your answer is stored only on your device and is never transmitted to our servers.
When you create an account
We collect your phone number to verify your identity via SMS. Your number is stored by Firebase Authentication (Google) and is not visible to other users of the app.
When you submit a menu photo
- The photo is uploaded to Cloudflare R2 cloud storage and is publicly accessible via a content delivery URL. Anyone with the link can view it.
- EXIF metadata embedded in your photo — including GPS coordinates if your camera recorded them — is preserved in the uploaded full-size image file. A compressed thumbnail version does not include EXIF metadata.
- If GPS coordinates are present in your photo's EXIF data, those coordinates are also stored as structured data in our database.
- The photo's EXIF capture date, if present, is used as the submission timestamp.
- Your drink type selection, the venue name and address, and the date of submission are stored in our database alongside the photo.
Automatically collected
Standard server logs (IP addresses, request timestamps) are generated by Firebase, Cloudflare, and Mapbox in the normal course of operating the service. Refer to each provider's privacy policy for their data retention practices.
Third-Party Services
We share data with the following services to operate the app:
| Service | What they receive |
|---|---|
| Google Firebase | Phone number (Auth); all submitted content (Firestore); server-side processing (Cloud Functions) |
| Cloudflare R2 | Photo files, including EXIF metadata in full-size images |
| Mapbox | Location search queries; map tile requests |
We do not sell, rent, or share your personal information with any other third party.
Photos Are Public and Permanent
Submitted photos and their associated venue information are publicly accessible once approved. There is currently no in-app mechanism to delete a submitted photo. Once a photo is approved it is stored indefinitely.
User Rights
Access: You may request a copy of the data associated with your account by contacting us.
Deletion: You may request deletion of your account and associated data by contacting us.
Correction: Contact us to correct inaccurate information we hold about you.
We are a small U.S.-based operator. If you believe you have jurisdiction-specific privacy rights (such as under CCPA or GDPR), please contact us and we will do our best to assist you.
Children
This app requires users to be 21 or older. We do not knowingly collect information from anyone under 21.
Policy Changes
Changes will be posted here with an updated effective date. Material changes will be communicated via the app.
Contact
Use the form on this page to contact us.