Version 0.1 · Effective: August 1, 2026
In plain words: We collect very little. Your beer photos are seen only by your own Team and are automatically deleted after the season ends. We never ask for your GPS location, your contacts, your phone number, or a password. There are no ads and no trackers, and we never sell personal information. The only things we keep long-term are numbers: the world's count and anonymous statistics (like "Guinness was photographed 40,000 times in 23 countries"), which may be shared with sponsors — never anything about you personally. An AI briefly checks each photo to confirm it's a beer. You can delete your account and data any time.
Who is responsible for your data ("controller"): CAMMY LLC, a Florida limited liability company doing business as The World Race, 1738 SW 57th Ave, Unit # A505, Miami, FL 33155, USA. Contact for all privacy matters: support@theworldrace.app.
This policy covers the 100 Million Beers app, theworldrace.app and worldrace.app, and related services (the "Service").
| What | Details | Why we use it | Legal basis (GDPR/UK) |
|---|---|---|---|
| Beer photos | Live-captured photos you submit. Visible only to your Team, never publicly. | Operating the count; verification (incl. AI check); moderation; aggregate statistics; limited promotion per the Terms | Contract; legitimate interests (fraud prevention) |
| Identity | An anonymous device/browser identity; if you "claim" your history: your Sign in with Apple identifier (and, if Apple shares it, a relay email). No passwords, no phone numbers, no contact uploads. | Keeping your contributions attached to you | Contract |
| Declared allegiance | The home country and city you pick from a fixed list ("I drink for Lisbon"). A declaration — not tracked location. | Country/city rankings | Contract |
| Coarse location | Your country only, detected per-request by our hosting provider (Cloudflare) from your connection. We never request GPS or precise location. | The age gate; regional availability | Legal obligation / legitimate interests (age law compliance) |
| Age-gate confirmation | A record that you confirmed being 18+ and of legal drinking age, with date and country. | Proving we checked | Legal obligation / legitimate interests |
| Team & activity data | Team membership, your contributions' sequence numbers, timestamps, beer brand (from barcode or label), cheers (ephemeral reactions that auto-delete and are never totaled) | Operating the Service | Contract |
| Push tokens | A device token if you enable notifications | Sending the notifications you enabled | Consent (you can disable any time) |
| Moderation records | Reports you make or receive, hidden-content states, appeals, fraud strikes, bans | Keeping the count honest and users safe | Legitimate interests; legal obligation |
| Crash & error data | Technical crash reports via Sentry (device model, OS, app state at crash) | Fixing bugs | Legitimate interests |
What we deliberately do NOT do: no ads or ad trackers; no analytics SDKs beyond the above; no sale or sharing of personal information for advertising; no GPS; no contact-list access; no public profiles; no individual consumption data ever shown publicly or shared with anyone.
Every submitted photo is automatically reviewed by an AI model (currently OpenAI's, acting as our processor) to confirm it shows a beer and to read the beer's brand from the label. The AI sees the photo only for this check; OpenAI is contractually barred from using it to train models under our API terms. Photos the AI can't confirm are hidden and reviewed by a human, with an appeal path — no count is ever finally removed by a machine alone.
We compute brand-level, aggregate statistics — for example, "Brand X was photographed 40,000 times across 23 countries" — and may share or sell these to sponsors and partners. These statistics are not personal data: they never identify you, your consumption, or any individual, and individual-level data is never shared. This is a hard product rule.
| Provider | Role | Where |
|---|---|---|
| Supabase | Database, authentication, photo storage | Hosted in London, UK (eu-west-2) |
| Cloudflare | Website hosting, CDN, country detection, future photo storage (R2) | Global network |
| Expo | Push notification delivery | US |
| OpenAI | AI photo check (Section 2) | US |
| Sentry | Crash reporting | US |
| Apple | Sign in with Apple | US |
We have (or will sign before launch — see checklist) data-processing agreements with each. We also disclose data if legally compelled (court order, valid legal process) and in a merger/acquisition, in which case this policy continues to apply to data transferred.
Your data is primarily stored in the UK/EU (London). Because CAMMY LLC is a US company and some processors are US-based, data is transferred to the US under appropriate safeguards (EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework, per each processor's DPA).
EU/UK representative: CAMMY LLC has not yet appointed representatives under GDPR Art. 27 / UK GDPR.
| Data | Kept for |
|---|---|
| Beer photos | The current Season, then automatically deleted no later than 60 days after the Season ends — or immediately when you delete them or your account |
| Contribution ledger (sequence number, timestamp, team, brand, declared country/city) | Kept as the permanent historical record of each Season — pseudonymous once your account is deleted |
| Cheers | Ephemeral by design — auto-deleted within days |
| Account/identity | Until you delete your account |
| Push tokens | Until you disable notifications, uninstall, or delete your account |
| Age-gate confirmation | Life of the account/guest identity |
| Moderation & fraud records | Up to 2 years, or as long as legally required |
| Crash reports (Sentry) | 90 days |
| Server/security logs | Up to 30 days |
When you delete your account, your photos, identity, team memberships, and tokens are deleted; your contributions' numbers remain in the season archive without any link to you (like a marathon result with the name removed).
Everyone: you can access, correct, or delete your data, or ask questions — in the App (Passport → settings) or by emailing support@theworldrace.app. We respond within 30 days and never charge for a first request. We may need to verify you control the account (e.g., a confirmation from within the App or your sign-in), since we hold no names or emails to check against.
EEA/UK/Switzerland: you additionally have the rights to restrict or object to processing, to data portability, to withdraw consent (e.g., disable push) without affecting prior processing, and to complain to your data-protection authority (in the UK, the ICO).
California: we do not "sell" or "share" personal information as the CCPA/CPRA defines those terms, and we collect no "sensitive personal information" categories requiring a limitation right. You have rights to know, delete, correct, and to non-discrimination. We honor Global Privacy Control signals where legally required.
Other countries (Canada, Brazil, Australia, and others): we apply this same policy globally — minimal collection, no selling, deletion on request — which we believe meets or exceeds PIPEDA, LGPD, and the Australian Privacy Principles at our scale.
The Service is restricted to people 18 or older who are at or above legal drinking age where they are — there is no under-18 access of any kind, so the Service is not directed to children and we do not knowingly collect children's data (COPPA and GDPR parental-consent regimes are not engaged by design). If we learn an under-age person used the Service, we delete their data and remove their counts. Report suspected under-age use to support@theworldrace.app.
Photos and data are protected by access controls enforced at the database and storage layer (your photos are readable only by your Team), encrypted in transit, with secrets managed outside the codebase. No system is perfectly secure; if a breach affects you, we will notify you and regulators as the law requires.
We'll post changes here with a new version and date, and announce material changes in the App or on the Site at least 14 days before they take effect. Prior versions are available on request.
Contact: CAMMY LLC d/b/a The World Race · 1738 SW 57th Ave, Unit # A505, Miami, FL 33155, USA · support@theworldrace.app