Privacy
Effective October 23, 2026
ShelfCall counts a bar's stock by voice. This is what it keeps about you and your bar, why, and who else sees it.
What we keep
- Your email and password. The password is stored scrambled (hashed), so nobody can read it, us included. We don't ask for your name.
- Your bar. Its name, areas, bottles, recipes, counts and sales, and who is on it with what role.
- Voice recordings and what was heard in them. Each take you record is kept, with its transcript.
- Photos of lists or invoices. A photo is sent to be read for bottle names. We don't keep the photo.
- POS sales reports you upload or paste, kept as sent, with what was read from them.
- One sign-in cookie, which keeps your phone signed in for up to 180 days. If you use the Android app, a second cookie remembers that, so the app can leave out links to pay. A take you record waits on your phone until it's sent, then it's removed from the phone.
Why
To run the app for you: sign you in, keep your bar's stock, and turn what you say, photograph or upload into counts and sales. Recordings and reports are kept so a count can be checked against what was really said or sold. When you correct which bottle a word meant, that word is remembered for your bar. We may also use recordings, with the corrections made to them, to test how well the app matches what was said to the right bottle.
Where it's kept, and for how long
On Cloudflare, which runs the app, its database and its file storage. Everything is kept until you delete your account, or until the bar it belongs to is deleted. That includes voice recordings: the app doesn't delete them on its own. A sign-in lasts up to 180 days. A password reset link works for 30 minutes.
Who else handles it
- Speech-to-text and AI providers hear your recordings and read your photos, along with your bar's bottle names so they can tell them apart. They send back the words; we match them to your bottles. One of them keeps small samples of the recordings it hears to improve its own speech models.
- Our payment processor takes the payment when a bar is on a paid plan. You give your card to them, not to us. We keep only their reference for your bar's plan and whether it's paid up.
- Our email provider sends password reset emails. Invites to a bar are links you share yourself; we don't email them.
- Cloudflare's web analytics counts page visits, without cookies.
What we don't do
No ads. We don't sell your data. Apart from those samples, we don't share it for anyone else's use. The only cookies are the sign-in one and, in the Android app, the one that remembers it.
Deleting your data
You can delete your account in the app, or ask us to. Here's how, and what's deleted.
Contact
Questions about your data: support@bananafest-destiny.com.