Legal

Account & Data Deletion

Last updated: 1 September 2026

My Bar Shelf is published by Nisshagen Advisory AB. You can delete your account yourself, from the app or from this website, without emailing us first. This page says what the button removes, what it does not, and how to have the rest removed by hand. The privacy policy is the versioned document and sets all of this out in full.

1. From the app

Open My Bar Shelf.
Go to Profile.
Scroll to the Account section and tap Delete Account.
Confirm twice. This cannot be undone.

It runs when you confirm and finishes inside that request. There is no queue and no 30-day window, and you are signed out as soon as it completes.

2. From this website

Open the account panel on mybarshelf.com, sign in with the same account you use in the app, and press Delete account. The button asks once and deletes on the second press. It runs exactly the same deletion as the app, including the shared bottle inventory described below.

3. If you cannot reach either

If you have uninstalled the app and cannot sign in, email support@mybarshelf.com from the address on the account, with the subject line "Delete my account". We will confirm once, then delete it, and we will answer within one month. We keep that email, because it is the record of a request you made and of what we did about it.

4. What is deleted

Your bottles. They live in one inventory shared with My Whiskey Shelf, so they disappear from that app too, along with the whiskey-side details on them and every whiskey pour recorded against them.
Your check-ins: dates, ratings, notes and the location on each one.
Your bookmarks, shopping list, recipes and the feedback you gave on recommendations.
Any cocktail menus you scanned.
Your barcode contributions to the shared lookup table.
Your profile record, including your analytics consent setting, and your scan and search counters, which go whether or not your sign-in record is kept. That consent row is the one My Bar Shelf, My Whiskey Shelf, My Wine Shelf, My Beer Shelf and My Cigar Shelf all read and write, so removing it here removes your recorded answer for those four as well and any of them will ask you again. It is not the answer My Coffee Shelf holds, which is a separate row in a separate table and is untouched.
Your whiskey shopping list items and accessories, for the same shared-account reason as the bottles.
Your notification token and pending notifications for this app and for My Whiskey Shelf.
Photographs linked from your bottle records. These are removed after the records themselves, on a best-effort basis: if that step fails it is logged and the deletion still completes.

5. Your sign-in may stay

Your sign-in record is deleted only if the account holds nothing in the other Shelf apps. If you also use My Coffee Shelf, My Wine Shelf, My Cigar Shelf, My Beer Shelf or My Supply Shelf, the sign-in stays so those apps keep working, and only the data above is removed. The same happens if we cannot check, which we treat as a reason to keep the sign-in rather than risk destroying another app's data.

The app tells you the deletion succeeded either way, and does not currently distinguish the two cases. If you want the sign-in gone, delete your data in the other apps first, or write to us and we will do it.

Cocktails you submitted to the shared catalogue stay, because other people's check-ins reference them. The record of who submitted a cocktail is cleared before the sign-in record is deleted.

6. What is left afterwards

Saying nothing is left would be easier and it would not be true. These outlive the deletion:

Any data export you asked for. Pressing Export writes a file holding your email address, your account identifier, your whole shelf and every check-in with its notes, and gives you a link that expires after seven days. The link expires; the file does not. Nothing deletes it today.
Check-in photographs, and any photograph with no record pointing at it, such as a label scan you cancelled. The deletion routine finds your files through your bottle records, so it cannot reach these. They stay at addresses that need no sign-in to open.
Analytics events already sent. If you turned usage analytics on, the events already recorded stay with our analytics provider. They are keyed to your account identifier, not anonymous and not aggregated, which is what an earlier version of this page called them. Because they are keyed to it, we can have them removed on request.
Your subscriber record at RevenueCat, keyed to the same account identifier. It exists even if you never bought anything, because the app identifies your account to RevenueCat on launch.
Crash and error reports. An earlier version of this page said these contain no personal identifiers. That was wrong: two kinds of report attach your account identifier on purpose, the request trail inside a report can carry it, and a failed database write can quote a bottle name in its error message. Most reports are not filed under your account, so there is no reliable way to find yours. Tell us roughly when a crash happened and we will look.
When your sign-in record is kept: the shared record of AI scans, which is one row per scan naming the app, the kind of scan and the time, and which is a record of calls made rather than the thing that limits your scanning here; the log of notifications already sent; and any cocktail you created. Your scan and search counters are not on this list. They are removed either way, kept sign-in or not. An earlier version of this page listed them in section 4 as deleted and again here as surviving, and both could not be true.
Reference data that carries no account identifier: the cache of venues found near a map tile, the pooled venue list, and the cache of AI search text. None of these can be traced to you, which also means we cannot find yours to delete on request.
Server request logs kept by our host and our database provider on their own schedules.
Your deletion request email, if you sent one, kept as the record of what you asked for and what we did.

Write to support@mybarshelf.com and we will remove by hand what the button does not, apart from the unattributable reference data, which we have no way to identify as yours.

7. Purchases

We never receive your card, bank or billing details and we hold no billing record of our own. If you bought a subscription, Apple or Google issued the receipt and keeps it under their own terms and their own retention. RevenueCat holds the subscriber record described above, and we can have that removed.

Deleting your account does not cancel a subscription. Cancel it in your App Store account settings or your Google Play subscriptions first, or the store will keep billing you.

8. Backups

Deleted rows can remain in our database provider's routine backups for a period set by that provider, until those backups age out. We are not going to quote a number for it, because it depends on their schedule rather than on ours.

9. What changed on this page

Updated 1 September 2026, alongside version 2.2 of the privacy policy. Section 4 said your profile record and its analytics consent setting are removed, and left out the consequence: that row is the one five Shelf apps share, so deleting here clears your recorded answer in four other apps too. It now says which apps, and that My Coffee Shelf keeps a separate answer that is untouched. Section 6 described the surviving scan ledger without saying what it is for; it is a record of AI calls made, not the limit that governs scanning in this app, and the privacy policy's section 5 now states the limit, which counts bottles on your shelf rather than scans.

This page was also re-dated to 1 September 2026 in an earlier revision that day, alongside version 2.1 of the privacy policy, without a note being added here. That revision corrected the contradiction over the scan and search counters, which section 4 and section 6 had listed both as deleted and as surviving. They are deleted on both paths, and both sections now say so. Re-dating a page without extending this section is the thing that makes a changelog worthless, and it should not have happened.

Updated 31 August 2026, alongside version 2.0 of the privacy policy. The previous version of this page said usage data was anonymised and aggregated and could not be linked back to you, and that crash and diagnostic logs contained no personal identifiers. Both were false, and both are corrected in section 6. It also gave a retention period for purchase records we do not hold, described a menu path that no longer matches the app, and made no mention of the shared bottle inventory, of the website route, of the sign-in record being kept, or of anything surviving the deletion.

10. Questions

For any question about this process, write to support@mybarshelf.com.

Nisshagen Advisory AB, Stockholm, Sweden.