Privacy Policy

Oenophile (https://oenophile.ai) is a personal wine cellar app: you record the bottles you own, where they came from, where they are stored and when you open them, and you can share a cellar with people you invite. This policy explains what information the app collects, how it is used, and the choices you have. In this policy, “we” means the operator of Oenophile.

Information we collect

Account information

• If you sign in with Google: we request only the basic scopes openid, email and profile. Google shares your email address, your name, your profile picture and a unique account identifier. The app uses your email address to identify you and to match cellar invitations to you. Your name and picture are stored by our authentication provider as part of your account record but are not shown to other users. We do not request access to your Gmail, Google Drive, contacts, calendar or any other Google data.
• If you sign up with email: your email address and a password, which is stored only as a salted hash by our authentication provider.

Cellar information you enter

• Wines and bottles: names, producers, vintages, regions, grapes, sizes, prices, storage locations and notes.
• Where bottles came from and where they went: merchants, the names of people who gave you wine, occasions, dates, food pairings, tasting notes and ratings. If you record other people’s names, please only record what they would be comfortable with.
• Photos of wine labels or bottles that you upload or take in the app.
• Cellar names, and the email addresses of people you invite to a cellar.
• An activity log of changes to your inventory (for example, a bottle added, moved or opened), and who made them.

Technical information

• Cookies that are needed for the app to work: your sign-in session, and which of your cellars is currently open. We do not use advertising or cross-site tracking cookies.
• Usage analytics, collected with our hosting provider’s privacy-focused Vercel Web Analytics and Speed Insights: which pages are visited (with search text and other personal details removed from the address), page load timings, and product events such as “a wine was added”, “a label was scanned” or “a review was resolved”. Events contain only the kind of action and simple counts (for example, the number of bottles), never your name, email, wine details, notes or searches. These tools do not use cookies to identify you or track you across other websites. A short-lived cookie is used only to pass an event from our server to your browser, and is deleted as soon as it is sent.
• Standard server logs kept by our hosting and database providers for security and troubleshooting.

How we use information

• To provide the app: store and show your cellar, keep bottle-level history, and share a cellar with its members.
• To sign you in and keep your account secure.
• To read wine labels and answer questions about your cellar, using AI (see “AI features” below), only when you use those features.
• To diagnose problems, prevent abuse (for example, rate-limiting AI requests) and improve performance.
• To understand, in aggregate, which features are used and where people get stuck, so we can improve the app.

We do not sell your information, use it for advertising, or share it with data brokers.

AI features

When you scan a label or use catalogue mode, the label photo is sent to Anthropic’s Claude API to read the wine’s details. When you ask the assistant a question, your question and the relevant cellar records it looks up are sent to the same API. Anthropic processes this data to return a result to us under its commercial terms; it does not use API inputs to train its models. Results are always shown to you for review, and the assistant cannot change your cellar unless you confirm the change.

Google user data

Oenophile’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information from Google sign-in is used only to create and secure your account and to match cellar invitations. It is not transferred to others except as needed to provide the app (our authentication provider), not used for advertising, and not read by humans except with your permission, for security purposes, or to comply with the law.

Who can see your information

• Members of a cellar: everyone you share a cellar with can see that cellar’s wines, bottles, photos, notes and history, and the email addresses of its other members and pending invitations. They cannot see your other cellars.
• Service providers that run the app on our behalf, only to provide their service:
  • Supabase: database, authentication and photo storage (data stored in Sydney, Australia).
  • Vercel: website hosting, usage analytics and performance measurement.
  • Anthropic: AI label reading and the cellar assistant.
  • Google: sign-in, if you choose “Continue with Google”.
• Authorities, if we are required to by law, or to protect the rights and safety of users.

Because these providers operate internationally, your information may be processed outside the country where you live. We rely on their contractual and security commitments to protect it.

Security

Data is encrypted in transit (HTTPS). Every database table is protected by row-level security so that only members of a cellar can read or change it, and photos are stored privately and served only to cellar members. Uploaded photos are resized in your browser before upload, which removes location (GPS) and other camera metadata. No system is perfectly secure, but we take reasonable measures to protect your information.

Retention and deletion

• Your information is kept while your account is active.
• Wine, bottle and photo records can be edited or removed in the app. To keep an accurate history, removing a bottle records why it was removed rather than erasing it. An owner can delete an empty cellar.
• To delete your account and all cellars where you are the only member, email privacy@oenophile.ai. We will do so within 30 days, except for information we must keep by law. Cellars shared with other people remain available to them.
• Backups and provider logs are deleted on their providers’ normal schedules.

Your choices and rights

You can access and correct your cellar data in the app at any time and export it as CSV. Depending on where you live, you may have rights to access, correct, delete or port your personal data, or to object to its use. To exercise them, email privacy@oenophile.ai. You can also remove Oenophile’s access to your Google account at myaccount.google.com/permissions.

Age

Oenophile is about alcoholic drinks and is intended only for people of legal drinking age where they live, and in any case 18 or older. We do not knowingly collect information from anyone younger.

Changes to this policy

If we change this policy, we will update the effective date above, and for significant changes we will tell you in the app or by email before they apply.

Contact

Questions or requests about privacy: privacy@oenophile.ai.