Privacy Policy


Last updated: July 7, 2026

A note on the name: the app formerly published as shayoink is now published as MixKings. MixKings is a product of Shayoink LLC; references to “Shayoink” in this document refer to Shayoink LLC and its services, including the MixKings app.

This Privacy Policy explains how Shayoink LLC (“Shayoink”, “we”, “us”, or “our”) collects, uses, and shares information when you use the Shayoink mobile and web applications and related services (the “Service”). Shayoink LLC is the controller responsible for your personal information.

If you have questions, email privacy@shayoink.com.

1. Information We Collect

1.1 Information you give us

Category What it is Why we need it
Account credentials Username, display name, email address, password (stored as a hash, never in plain text) To create your account and let you log in on multiple devices
Profile Optional avatar photo, anonymous-mode preference To show you in messages, search, and Find Menus the way you want to be seen
Menu content Sections, drinks, ingredients, prices, ornaments, theme, custom background images, taglines This is the Service — the menu you create
Messages Text, images, recipe cards, reactions, and reply/edit metadata for messages you send and receive in direct and group threads To deliver them to recipients and render the conversation history accurately, including replies that quote earlier messages
Contacts Users you save as contacts, including optional friendly-name and full-name fields you add for your own reference So you can find them again and label them the way you want to see them
Bookmarks and cart Drinks and ingredients you save To remember them between sessions
Recognition data (“yoinks”) A record of each time you save another user’s recipe, including the recipe content at the time you saved it, your per-yoink anonymity preference, and a timestamp To show recipe owners that their recipes have been valued, to power the count and attribution surfaces, and to prevent gaming of those counts
Reactions Emoji reactions you add to messages To display them on the message in the thread
Reports Reports you submit about other users or content, including the report category and any free-text description To investigate abuse and enforce our Terms
Support & feedback messages The message you write when you contact support, send feedback, or report a problem, and the email address you provide so we can reply. Our website contact form also collects your name; the in-app problem report does not, though it attaches basic diagnostic context (see § 1.2) To reply to you, investigate and resolve the issue, and improve the Service
Block list Users you have blocked To filter their content and prevent them from contacting you
Venue early-access / commercial details (if you request venue early access or use venue features — rolling out) Venue name, full postal address, phone number, website, hours of operation, a contact email address, your display preferences, and your answers to a short product survey To process your venue early-access request, contact you about venue features, and prepare your venue listing for when venue features launch (see § 1.4 and § 3).

1.2 Information collected automatically

Category What it is Why we collect it
Approximate location (consumer menu mirror) A coarse geohash (roughly 1 km precision) derived for discoverable accounts. Used only for accounts that have enabled “Be Discoverable.” Personal accounts are not surfaced by location — see § 1.4 below. To power location-based discovery surfaces (Find Menus, rolling out for venues).
Venue / business address and precise coordinates (venue features — rolling out) If you submit a venue or business street address (for example, when you request venue early access or use venue features), we geocode that address to precise coordinates (latitude/longitude) and a fine-grained geohash using a third-party geocoding service. This applies to the venue/commercial path only; it is not collected for ordinary personal accounts. To power venue location features such as Find Menus when venue features launch. See § 1.4 and § 3.
Device & app info App version, device model, operating system To diagnose problems and improve the app
Push notification tokens A device-specific identifier issued by Apple Push Notification service (APNs), passed to us via Firebase Cloud Messaging, only if you grant notification permission To deliver push notifications you’ve opted into (new messages, contact requests, etc.). The token is tied to your account and device. We delete it when you sign out, deny permission, uninstall the app, or after 60 days of inactivity.

Analytics and crash reporting (mobile app). The Shayoink iOS app uses Firebase Analytics (Google Analytics for Firebase) and Firebase Crashlytics to understand, in aggregate, how the app is used and to diagnose crashes and stability problems. Firebase Analytics records a small, fixed set of product-usage events (for example: account creation, creating a drink, pairing a display, sharing a recipe, and completing a purchase) as anonymous product telemetry. It does not use advertising identifiers, does not present an App Tracking Transparency prompt, and is not used to build advertising or behavioral profiles or to track you across other companies’ apps or websites. Crashlytics collects crash and diagnostic reports (such as app state and device/OS information at the time of a crash) so we can fix bugs. Usage analytics is on by default and you can turn it off at any time in Privacy & Preferences. We do not build advertising profiles. See § 3 for these providers.

Website analytics and cookies. Our website (shayoink.com, including public recipe pages) uses Google Analytics 4, a web-analytics service provided by Google, to understand how visitors find and use the site — for example, which pages are viewed and roughly where traffic comes from — so we can improve it. Google Analytics sets cookies (named _ga and _ga_*) and processes information such as your IP address (which Google Analytics 4 uses to derive an approximate, city-level location and does not retain), device and browser type, and the pages you view. We do not use this data for advertising, do not enable Google’s advertising or “Signals” features, and do not combine it with your in-app account. Google processes this data on our behalf as our service provider under Google’s data-processing terms, with Google Signals and Google’s advertising/remarketing features disabled and ads-data redaction enabled.

We use CookieYes, a consent-management platform, to control these cookies. On your first visit you are shown a cookie banner, and in regions where consent is legally required (including the EEA and the UK) Google Analytics is loaded in a consent-denied state and sets no analytics cookies or measurement data until you accept (implemented via Google Consent Mode). You can change or withdraw your choice at any time using the cookie-preferences control on the site. The only cookie set before you make a choice is CookieYes’s own cookie that remembers your preference. The mobile app does not use cookies.

1.3 Information from third parties

If you purchase Shayoink Pro (a one-time in-app purchase) or, when venue features launch, subscribe to Shayoink for Venues (an auto-renewing subscription), Apple processes the transaction and provides us with a confirmation that the purchase or renewal succeeded. We do not receive your payment card or full Apple ID details from Apple. We use RevenueCat, a third-party payment-infrastructure and subscription-management service, to validate receipts and track entitlement status; RevenueCat receives your account identifier (the identifier we use for your account) along with the purchase and entitlement signals it needs to confirm whether your purchase is active. See § 3.

1.5 Sensitive information

We do not seek to collect sensitive personal information such as government identifiers, financial-account numbers, precise geolocation of personal accounts, health data, or information revealing race, religion, or sexual orientation. Precise location is collected only when you submit a venue or business address through the venue/commercial path (see § 1.2); ordinary personal accounts are not located precisely. We do not use or disclose sensitive personal information for purposes that would give you a right to limit its use under California or other state law.

1.4 Notes on specific features

Anonymous yoinks. Shayoink lets you save another user’s recipe (“yoink it”) with your handle visible to the recipe owner or anonymously to them. “Anonymous” here means anonymous to the recipe owner only, not anonymous to Shayoink. When you yoink anonymously, the recipe owner sees only an updated count and an “anonymous” marker — they do not learn your username, display name, or any other identifier. Shayoink itself retains the underlying record of who yoinked what, for three reasons:

  1. Anti-gaming: preventing the same user from inflating their own counts via multiple accounts.

  2. Abuse moderation: investigating reports of coordinated harassment or other abuse involving yoinks.

  3. Legal compliance: responding to valid legal process that requires us to identify a specific user’s activity.

If you delete your account, all your yoink records (both as a yoinker and on your recipes as an owner) are deleted along with the rest of your data.

Messaging features. Shayoink lets you send and receive direct and group messages, including text, images, recipe cards, and emoji reactions. Messages you send are visible to the participants of the thread (and to Shayoink, for routing and abuse handling). You can delete messages you sent; deleted messages leave a “This message was deleted” placeholder in the thread for context, but the original text or image is removed from our servers. You can edit your own text messages within a 15-minute window of sending; edited messages are marked as edited. Other participants may quote a message of yours in a reply before you delete or edit it; the quoted snippet stored alongside their reply is a separate piece of content and persists with their message.

Content reporting and blocking. You can report another user, a message, or a recipe via the in-app reporting flow. Reports are visible only to Shayoink and are used to investigate violations of these terms. Blocking another user hides their content from your experience, prevents them from messaging you, and filters them out of your yoinker lists; the blocked user is not notified that they have been blocked.

Find Menus discovery radius (venue accounts only). Find Menus is a geographic discovery surface scoped to commercial venue accounts — bars, restaurants, hotel lounges using Shayoink to display menus to paying customers. Personal accounts (home-bar hosts and craft-cocktail enthusiasts) are not surfaced by location and do not appear in Find Menus regardless of their Be Discoverable state; personal-account discovery happens via Community (Trending, Classics, Rooms — see the next paragraph), which is topic-based and carries no location signal. This split reflects a deliberate product design decision: a commercial venue’s location is the venue’s public address (already published by the venue), while a personal account’s location is the user’s home — a category of information that warrants a different discovery model.

When a commercial account enables Be Discoverable, the venue’s menu becomes findable by other Shayoink users in nearby geographic areas. Find Menus runs each search at the tightest geographic tier first (approximately 1 mile / 1.6 km) and silently expands outward when there are not enough nearby results to display — to wider local areas, then to your state or region, then potentially to your country or globally during periods of low adoption density. This means a discoverable venue’s listing may be visible to users far outside its immediate area, particularly while Shayoink is small. As adoption grows, the radius tightens automatically. A commercial account can opt out of all of this at any time by toggling Be Discoverable off in Privacy & Preferences, which removes the venue from Find Menus entirely. To power the consumer-facing discoverable-menu mirror we use a coarse geohash (roughly 1 km precision). Separately, when you submit a venue or business street address through the venue/commercial path, we geocode that address to precise coordinates (latitude/longitude) and a fine-grained geohash to support venue location features such as Find Menus (see § 1.2). We do not derive precise coordinates from ordinary personal accounts.

Community discovery (Trending, Classics, Rooms — non-geographic). Community is Shayoink’s topic-based and activity-based discovery surface, available to all account types. It carries no location signal — your geographic area is not used to determine what Community shows you or who Community shows your content to.

The same Be Discoverable toggle in Privacy & Preferences controls Community inclusion for Trending and Rooms: turning it off removes your menu and recipes from those surfaces with no separate opt-out required. Recipes and menus from non-discoverable accounts never enter Trending or Rooms regardless of yoink count or room-tag state.

Recipe scan (AI import). Shayoink lets you create a recipe by photographing one — for example, from a cookbook or a bar menu — using your device camera, or by selecting a photo from your library. The text is read from the image on your device (on-device optical character recognition); the photo itself is not uploaded to us or to anyone else. Only the extracted text is sent to our AI service provider, Anthropic (the Claude API), which structures it into ingredients and steps and returns the result for you to review and save. We do not send the image, your identity, or your account details — only the recipe text. Anthropic processes that text solely to provide the structuring service to us, under its API terms.

Taste profile (“Your Palate”). If you turn on Taste Profile in Privacy & Preferences — it is off by default — Shayoink builds a private, personal read of the spirits, flavors, and styles you tend to favor, from your own activity in the app (the drinks you react to, and your replies to optional follow-up prompts). It is computed on your device from data already tied to your account; we do not build or store it unless you turn the feature on, and turning it off stops it from being built and discards it. It is private to you and used only to personalize your in-app experience (such as suggesting drinks you may like). We do not use it for advertising, do not sell or share it, and do not use it to make decisions that produce legal or similarly significant effects about you.

2. How We Use Information

We use the information we collect to:

We do not use your menu content, messages, contacts, bookmarks, or cart for advertising. We do not build advertising profiles.

Marketing communications. We send marketing or promotional email only if you have opted in, and you can unsubscribe at any time using the link in those emails or by emailing privacy@shayoink.com. Transactional and service messages (such as security and account notices) are not marketing and may still be sent.

3. How We Share Information

We do not sell or rent your personal information. We share it only as described below:

The vendor list above reflects the integrations shipped in the build as of this revision: Firebase, Google Analytics and CookieYes (website only), Apple APNs, RevenueCat, Google Maps Geocoding API, and Resend (the GIPHY GIF-picker integration is built but disabled in v1, so GIPHY receives no data at launch). Note that FCM tokens are device identifiers tied to a user account — some jurisdictions (notably the EU under GDPR) may treat these as personal data.

Third-party links and off-platform sharing. The Service lets you share recipes and links to third-party platforms (such as Reddit, X, Facebook, or your device share sheet) and may display links to third-party websites. When you follow such a link or share to such a platform, the third party handles your information under its own privacy policy, which we do not control and are not responsible for. We encourage you to review the privacy practices of any third-party service you use.

4. Your Rights and Choices

Depending on where you live, you may have rights under privacy laws such as the EU/UK GDPR, California CCPA/CPRA, Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Brazil LGPD, and others. These can include the right to:

To exercise these rights, email privacy@shayoink.com. We may need to verify your identity before acting. We will respond within the time required by applicable law (generally 30–45 days).

You may use an authorized agent to submit a request where the law allows, and we will take reasonable steps to verify the agent’s authority. We do not charge a fee for most requests and will not discriminate against you for exercising your rights. If we decline a request, we will explain why, and where the law provides an appeal we will tell you how to appeal.

You can also:

(The mobile app uses Firebase Analytics and Crashlytics as described in § 1.2, with an opt-out in Privacy & Preferences; our website’s use of Google Analytics and your cookie choices are also described in § 1.2.)

4.1 California Residents

The CCPA/CPRA gives California residents the right to know what personal information we collect, request deletion, correct inaccurate data, and opt out of “sales” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under California law. To exercise your rights, contact privacy@shayoink.com. We will not discriminate against you for exercising any of your rights.

Categories of personal information. In the past 12 months we have collected the following CCPA categories: identifiers (such as username, email, and device/push identifiers); internet or network activity (app and website usage, device and browser type); approximate geolocation (coarse, for discoverable accounts; precise only for venue addresses you submit); commercial information (purchase/entitlement status); and other content you provide (menus, recipes, messages, images, reports). We collect these from you and your device, use them for the purposes in § 2, and disclose them only to the service providers and recipients in § 3. We do not knowingly sell or share the personal information of consumers under 16.

Shine the Light. We do not disclose your personal information to third parties for their own direct-marketing purposes.

4.2 EEA / UK Residents

Where GDPR applies, our lawful bases for processing are:

You have the right to lodge a complaint with your local supervisory authority.

You may withdraw consent at any time (for example, by changing your discoverability or cookie choices) without affecting processing already carried out. Where we transfer your data outside the EEA or UK, we rely on the safeguards in § 7. The “Trending” surface uses an automated process based on recent yoink activity, but it does not produce any legal or similarly significant effect on you within the meaning of Article 22 GDPR.

4.3 Other U.S. State Residents

If you are a resident of a U.S. state with a comprehensive consumer-privacy law — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as they take effect — you may have rights to access, correct, delete, and obtain a portable copy of your personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not sell personal data for money, do not engage in targeted advertising, and do not use personal data for profiling that produces legal or similarly significant effects. To exercise any of these rights, email privacy@shayoink.com; where the law provides an appeal of our decision, we will tell you how to appeal.

5. Retention

We keep your personal information for as long as your account is active. When you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain it longer for legal, accounting, fraud-prevention, or safety purposes. In particular:

6. Security

We use industry-standard measures to protect your information, including encrypted transport (HTTPS/TLS) and password hashing. We also limit access to personal information to personnel and service providers who need it to operate the Service, and we require them to protect it. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security. If we learn of a security breach affecting your data, we will notify you and the appropriate authorities as required by law.

7. International Data Transfers

If you are located outside the United States, your information may be transferred to and processed in countries with different data-protection laws. Where required, we use safeguards such as Standard Contractual Clauses to protect your data during such transfers.

8. Children

Shayoink is intended for users who are of legal drinking age in their jurisdiction (21 and older in the United States), and is not directed to children. Because the Service is built around alcoholic-drink recipes, it is not directed to anyone under the legal drinking age, and we do not knowingly collect personal information from anyone under that age — and in no event from a child under 13 (or the equivalent age of digital consent in your country). See the Terms of Service for the full eligibility requirement. If you believe we have collected information from a child or anyone under the applicable age, please contact us at privacy@shayoink.com and we will delete it.

9. Apple’s App Privacy “Nutrition Label”

The disclosures we make to Apple in App Store Connect reflect the data practices active in the shipped build. Because the current build is consumer-only (venue/commercial features are not yet active), the App Store App Privacy labels are narrower than this policy, which is written to cover venue features when they launch (see § 3). The labels will be updated to disclose the venue data flows when venue features ship. If you see a discrepancy that is not explained by this rollout, this policy controls and we will update the App Store disclosure to match.

10. Changes to This Policy

We may update this policy from time to time. If changes are material we will notify you in the app or by email, and where the law requires, we will obtain your consent before the change takes effect. The “Last updated” date at the top reflects the latest revision.

11. Contact

Shayoink LLC

2501 Chatham Rd #5195, Springfield, IL 62704, USA

Privacy questions: privacy@shayoink.com

General contact: support@shayoink.com