Humidor Etc ("we", "our", "us") operates the Humidor AI mobile application (the "App"). This policy explains what information we collect, why, on what legal basis, how long we keep it, who we share it with, and how you can exercise your rights.
For users residing in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following legal bases apply to each processing activity:
| Processing activity | Legal basis (GDPR art. 6) |
|---|---|
| Account creation and authentication | Performance of contract (art. 6(1)(b)) |
| Backup of your humidor, bar and journal | Performance of contract (art. 6(1)(b)) |
| AI-generated pairings | Performance of contract (art. 6(1)(b)) |
| Cigar identification from a photo | Performance of contract (art. 6(1)(b)) |
| Pairing history for personalization | Legitimate interest (art. 6(1)(f)) |
| Pro subscription validation and management | Performance of contract (art. 6(1)(b)) |
| Technical support on request | Legitimate interest (art. 6(1)(f)) |
| Notifications of important updates | Legitimate interest (art. 6(1)(f)) |
You may object at any time to processing based on legitimate interest by writing to support@humidor-ai.com.
To deliver the App, we use the following services. Each has its own privacy policy and is bound to us by a data processing agreement (DPA) including, where applicable, the European Commission's Standard Contractual Clauses for transfers outside the EEA.
| Data category | Retention period |
|---|---|
| Account data (email, name, profile picture) | While your account is active, then deleted within 30 days after account deletion |
| Inventory (humidor, bar, tasting journal, photos) | While your account is active; deleted immediately upon account deletion |
| Pairing history | The 50 most recent entries are retained; older entries are automatically purged |
| Technical error logs | 90 days maximum |
| Billing data | Processed and retained by Apple / Google according to their own policies; we do not store any banking data |
Your data is stored on secure servers with encryption in transit (HTTPS) and encryption at rest.
Under applicable laws (including the General Data Protection Regulation — GDPR — for residents of the EEA, the UK, and Switzerland; Canada's Personal Information Protection and Electronic Documents Act — PIPEDA; and the California Consumer Privacy Act — CCPA — in the United States), you have the following rights:
To exercise these rights, contact support@humidor-ai.com. We will respond within one month, extendable by two additional months for complex requests (GDPR art. 12(3)). Permanent account deletion is also available directly in the App: Account → Delete my account.
Supervisory authorities:
The App is intended for adults (18+, or 21+ in some jurisdictions). We do not knowingly collect data about minors under 13 (in compliance with COPPA in the United States) or under 16 (GDPR art. 8). If you are a parent and believe your child has provided us information, contact us for immediate deletion.
The App uses your device's local storage (localStorage) to maintain your session and preferences. We do not use any advertising cookies or third-party trackers. No specific consent is required as this storage is strictly necessary for the operation of the App.
Your data may be processed in Canada (our place of business) and the United States (at our technical service providers listed in section 4).
For users in the EEA, the United Kingdom, and Switzerland, these transfers are protected by:
You may obtain a copy of the applicable safeguards on request at support@humidor-ai.com.
In accordance with Article 27(2) of the GDPR, we benefit from the exemption from designating a representative in the EU because our processing concerning EU residents is occasional, does not involve the special categories of data referred to in Article 9 or data relating to criminal convictions (Article 10), and is unlikely to result in a risk to the rights and freedoms of natural persons.
For any question relating to the protection of your data, please contact us directly at support@humidor-ai.com.
We apply technical (encryption in transit and at rest, authentication, per-user data isolation via Supabase row-level security policies) and organizational (access restricted to strict necessity) measures to protect your data.
As no system is infallible, in the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you within the legally required timeframes (72 hours under GDPR, art. 33-34).
We may modify this policy. The date at the top indicates the last update. Material changes will be communicated via the App or by email.
Humidor Etc., a division of Quadriom Son & Image Inc.
Quebec Business Number (NEQ): 1165048894
CP 31, Bureau-Chef
Vaudreuil-Dorion (Quebec) J7V 5V8, Canada
Email: support@humidor-ai.com
© 2026 Humidor Etc. All rights reserved.