Privacy Policy

We collect only what's needed to provide personalized cigar recommendations:

• Account: Email address, display name, experience level
• Taste Profile: Flavor preferences, strength, body, pairing preferences
• Journal: Cigar name, rating, flavors, date, location, notes, photos you upload
• Humidor: Cigars you own, quantity, aging dates, purchase info
• Conversations: Questions you ask Cigarato (retained 30 days, then deleted)
• Usage: Pages visited, features used (anonymized, 90-day retention)

• Payment card numbers (handled by our payment processor)
• Precise GPS location (only user-entered location text)
• Contacts or phone book data
• Health data beyond what you voluntarily log
• Data from other apps on your device

• Personalize cigar recommendations (the core product purpose)
• Send transactional emails (verification, password reset)
• Send product emails (weekly digest, recommendations) — you can opt out
• Improve the recommendation engine using aggregate patterns
• Detect and prevent abuse

We never sell your data. We never share individual profiles. We never serve ads.

• AWS: Infrastructure hosting (data encrypted at rest + in transit)
• OpenAI: Conversation text for generating recommendations (no personally identifiable information sent)
• Nobody else. We do not sell, rent, or share your personal data with third parties for advertising or marketing.

You can exercise these at any time from Settings:

• Access: Export all your data (Settings → Your Data → Export)
• Correct: Edit your profile, journal, and humidor directly in the app
• Delete: Delete your account and all data (Settings → Your Data → Delete Account)
• Opt out of personalization: Toggle personalized recommendations off (Settings → Privacy)
• Opt out of emails: Unsubscribe link in every email, or Settings → Notifications

• Encryption at rest (AES-256) and in transit (TLS 1.2+)
• Authentication via AWS Cognito (passwords never stored in plaintext)
• Admin access restricted to authorized team members
• Regular security reviews of infrastructure

We use only functional cookies for authentication (keeping you signed in). We do not use advertising cookies, tracking cookies, or third-party analytics cookies. No cookie consent banner is needed because we don't track you.

Cigarato is for adults only (18+ or the legal smoking age in your jurisdiction). We do not knowingly collect data from minors. If we discover a minor has created an account, we will delete it immediately.

We'll notify registered users by email about material changes 30 days before they take effect. Continued use after changes constitutes acceptance.

Questions about this policy? Email privacy@cigarato.com