Bartender Rolodex

Privacy Policy

Effective date: September 10, 2026

Bartender Rolodex ("the app") is a private memory companion for remembering the bartenders, servers, and hospitality professionals who make your nights good. It is published by QLD Holdings, LLC. Your people, places, visits, notes, and photos are yours. This policy is short because the honest answer is short.

What we collect

Nothing. Bartender Rolodex has no account, no sign-in, no analytics, no advertising, and no server of ours. We receive no data from the app. We cannot see your notes, your people, your photos, or your location. Everything you put into the app is stored on your phone.

What leaves your phone, and only if you switch it on

Every switch below ships off. Nothing leaves your phone on its own.

On iPhone

• Use Apple Maps — what you type in the venue search, and the saved location of a place, is sent to Apple to find the venue, draw the map, or open directions. Your notes are not sent, and neither is your own location: the search deliberately carries no location hint.
• Find places near me — uses your location on this phone to sort places near you. Your location is not transmitted anywhere, and the app never reads it in the background.
• iCloud sync — keeps your people, places, and visits in your own iCloud account, so they survive a lost phone. This is Apple's CloudKit private database: encrypted to your Apple account, and we cannot read it. Turning sync off removes your data from iCloud — it stays on your phone.
• Include photos (only available when iCloud sync is on, and off by default even then) — photos are the one thing in the app that identifies someone, so they get their own switch. Note that Apple can access iCloud data unless you turn on Advanced Data Protection in iOS Settings.
• Export your data — creates a file on your phone and opens the iOS share sheet; you pick where it goes. The app never transmits it. Anyone you send it to can read it.

On Android

The same promise, and the same rule: every switch below ships off.

• Look up venues — the venue text you type, and nothing else, is sent to Google, which is what Android uses to look up addresses. Never a person, never a note, never a photo, and never where you are: the request deliberately carries no location hint.
• Find places near me — uses your approximate location on this phone to sort places near you. Your location is not transmitted anywhere, and the app never reads it in the background.
• Sync to Google Drive — keeps your people, places, and visits in a private app folder inside your own Google Drive, so they survive a lost phone. The app can only see that folder and nothing else in your Drive, and we have no server and no way to read it. Turning sync off removes your data from Drive. This syncs between your Android devices; it does not reach an iPhone.
• Include photos (only available when sync is on, and off by default even then) — photos are the one thing in the app that identifies someone, so they get their own switch.
• Export your data — writes a file wherever you choose with Android's file picker. The app never transmits it. Anyone you send it to can read it.

Android's own backup

Android can back this app up to your own Google account, if backup is turned on for your phone — your notes and your photos included. That is the phone doing it, not us, and we cannot read it. On Android 9 and later it is encrypted with a key derived from your screen lock; without a screen lock, or on older phones, it is not. You can turn it off in Android's own Settings, under Backup. This is the one thing on this page that is not controlled by a switch inside the app, which is why it has its own heading.

Deleting your data

You do not have to ask us, and there is nobody to ask: we hold none of it. Deletion is a button inside the app, and it takes effect immediately.

• One person, place, visit or recommendation — open it and delete it. It is gone from the app at once, and removed from your cloud copy on the next sync.
• Everything, on this phone and in the cloud — Settings → Delete all data. This erases every person, place, visit, recommendation and photo on the device, switches sync off, and empties the folder the app created in your Google Drive or iCloud. If the network is unavailable at that moment the app keeps trying at every launch until that folder is verifiably empty. Off means off.
• Just the cloud copy — turn sync off. That alone removes what the app put there and leaves your records on the phone.
• Uninstalling removes the app's data from the phone. It does not empty the cloud folder, because the app is no longer there to do it — so use Delete all data first if you want both gone.

Nothing is retained after that, by us or anywhere else, because there was never a copy anywhere we could reach. On Android, note that your phone's own Auto Backup is separate and is controlled in Android's Settings, under Backup.

Photos

Photos you attach are re-encoded on import and all metadata — including GPS location — is stripped, always, with no setting to turn that off.

What the app deliberately has no field for

Home addresses, private phone numbers, financial data, medical data. The absence is a feature.

Children's privacy

Bartender Rolodex is about remembering the people who make bars and restaurants good. It is intended for adults and is not directed at children.

Changes to this policy

If the app ever gains a capability that moves data somewhere new, it will ship as a new, off-by-default switch named for what leaves the device, this policy will change on the same day, and the effective date above will move.

Contact

Questions about this policy: hello@qldholdings.com.