Effective August 13, 2026 · Applies to Landed on iPhone, iPad and Mac, and to its widgets
The whole policy in one sentence: Landed collects no personal data. No accounts, no analytics, no ads, no trackers. Everything you enter stays on your device, or in your own iCloud.
None. Landed does not collect, store, transmit, sell, or share any personal information. No sign-up, no account, no analytics SDK, no advertising identifier, no third-party tracking. The Mac app is the same app, built from the same code.
Costs, discounts, margins, saved calculations, settings: everything you enter is stored on your device, and in your own iCloud account if you are signed in. Widgets read a small summary of your latest calculation from private on-device storage shared with the app. That summary never leaves the device. Deleting the app deletes all of it. On the Mac, Landed runs in Apple's App Sandbox, so it can only reach files you hand it yourself.
Landed Pro syncs across your own devices, iPhone and iPad and Mac alike. Markets, suppliers and settings travel through Apple's iCloud key-value storage. Saved builds (History) travel through your private CloudKit database. Both go to your iCloud account, under Apple's privacy terms. We operate no server for either one, hold no key to it, and cannot read it. Sync happens when you are signed into iCloud. If you are not, Landed is a local-only app. Settings can also export your whole library to a single file and import it on another device, with no network involved.
The price-list scanner (a Pro feature) can photograph or import a picture of a supplier price list. On the Mac you open a file instead. Text recognition runs on your device, using Apple's Vision framework. Images are never uploaded anywhere and are not kept by Landed after scanning.
Landed can open a price list you pick, export to a spreadsheet or a file, and print. All of it happens on your device. Opening and saving go through the system file picker, so Landed reaches only the file you choose. Nothing is sent to us, and no copy is kept anywhere but where you put it.
Apart from iCloud sync, which talks only to Apple, Landed makes one kind of network request, and only when you ask for it. Tapping the exchange-rate refresh button fetches the European Central Bank's daily reference rate from frankfurter.dev, a free public API. The request carries the two currency codes and nothing else. No identifiers, no account information, nothing about your pricing. Signed out of iCloud and with the button untapped, Landed never touches the network.
The Landed Pro upgrade is a one-time purchase, processed by Apple. It is a Universal Purchase, so buying it once unlocks it on all your devices. We never see or store your payment details. Purchases can be restored through Apple at any time.
Landed is a professional tool for the beverage trade and is not directed at children. It collects no data from anyone, of any age.
The app carries no analytics. This site does. landedwineapp.com uses Cloudflare Web Analytics, which counts page views without cookies and without building a profile of you. It measures the site, not you, and it never sees anything you enter in the app.
If Landed's privacy practices ever change, this policy is updated first and the effective date above is revised.
Questions about privacy, or anything else: support@hg.hn.
Proudly made in Chicago.