Effective August 13, 2026 · Applies to Landed on iPhone, iPad and Mac, and to its widgets
None. Landed does not collect, store, transmit, sell, or share any personal information. There is no sign-up, no account, no analytics SDK, no advertising identifier, and no third-party tracking of any kind. That is true of the Mac app as much as the iPhone and iPad ones. They are the same app, built from the same code.
Costs, discounts, margins, saved calculations, settings: everything you enter is stored on your device, and on your own iCloud account if you are signed into iCloud (see below). Widgets read a small summary of your latest calculation from private on-device storage shared between the app and its widget; that data never leaves the device. Deleting the app deletes all of it. On the Mac, Landed runs in Apple's App Sandbox, so its files live in the app's own container and it can only reach files you hand it yourself.
Landed Pro keeps your saved markets and suppliers in sync across your own devices using Apple's iCloud key-value storage, iPhone and iPad and Mac alike. That data goes to your iCloud account, under Apple's privacy terms. We operate no server for it, hold no key to it, and cannot read it. Sync happens automatically when you're signed into iCloud; if you aren't (or you turn iCloud Drive off for your device), Landed is exactly the local-only app it always was. Your saved builds (History) never sync. They stay on the device. You can also move your whole library by hand: Settings can export everything to a single file and import it on another device, with no network involved at all.
The price-list scanner (a Pro feature) can photograph or import a picture of a supplier price list. On the Mac there is no camera, so you open a file or drop one onto the window instead. Text recognition runs entirely on your device using Apple's Vision framework. Images are never uploaded anywhere, are not stored by Landed after scanning, and no photo content is transmitted off the device.
Landed can open a price list you pick, export a build or your whole library to a spreadsheet or a file, and print a build (on the Mac, that includes Save as PDF from the print panel). All of it happens on your device. Opening and saving go through the system file picker, so Landed reaches only the file or folder you choose, and printing goes straight to your printer or to a PDF you keep. Nothing is sent to us, and no copy is kept anywhere but where you put it.
Apart from iCloud sync, which talks only to Apple, Landed makes exactly one kind of network request, and only when you ask for it: tapping the exchange-rate refresh button fetches the European Central Bank's daily reference rate from frankfurter.dev, a free public API. The request contains only the two currency codes (for example, EUR and USD). No identifiers, no account information, and nothing about your pricing. Signed out of iCloud and with the button untapped, Landed never touches the network at all.
The Landed Pro upgrade is a one-time purchase processed entirely by Apple, through the App Store on iPhone and iPad and the Mac App Store on the Mac. It is a Universal Purchase, so buying it once unlocks it on all your devices. We never see or store your payment details. Purchases can be restored through Apple at any time.
Landed is a professional tool for the beverage trade and is not directed at children. It collects no data from anyone, of any age.
The app carries no analytics. This site does: landedwineapp.com uses Cloudflare Web Analytics, which counts page views without cookies and without building a profile of you. It is measurement of the site, not of you, and it has nothing to do with anything you enter in the app.
If Landed's privacy practices ever change, this policy will be updated first, with the effective date above revised. An example would be a future feature requiring a new kind of network access.
Questions about privacy, or anything else: support@hg.hn.