Winelingo — Privacy Policy

This policy explains what personal data Winelingo (“we”, “us”) collects, why, and your rights. Winelingo is a wine-education app that identifies wines you photograph, teaches you about them, and builds a private taste profile from the wines you rate. The data controller is Jonas Egeskov, Denmark. Contact: jonsegeskov29@gmail.com.

1. What we collect

Data	Why
Account email (and password, stored hashed by our auth provider)	To create and secure your account.
Photos of wine labels and wine lists you scan	Sent to our AI provider to identify the wine and read the list. Processed transiently to return a result; we do not build an advertising profile from them.
Your tastings — ratings, aroma/taste notes, free-text notes, and the resulting taste (“palate”) profile	The core feature: to show your history and personalise recommendations.
Declared preferences (e.g. body/sweetness leanings) you optionally enter	To personalise recommendations before you have rated many wines.
Learning activity (lessons completed, streak, language)	To run the daily-learning features and show progress.
Basic product-analytics events, keyed to your account identifier	To understand usage and improve the app.

We do not knowingly collect special-category data, and we do not sell your personal data.

2. Who processes your data

We use trusted processors, each bound by their own data-protection terms:

Processor	Purpose
Supabase	Backend, database and authentication (data hosting).
Anthropic	AI vision + text: reads your scanned photos and writes the tasting explanations. Photos are sent for processing to return your result.
PostHog	Privacy-focused product analytics.

Some processors operate outside the EEA; where they do, transfers are covered by appropriate safeguards (e.g. Standard Contractual Clauses).

3. Legal bases (EU/UK GDPR)

We rely on: performance of a contract (running the app and your account), your consent (optional analytics and push notifications, which you can withdraw at any time), and our legitimate interests (securing and improving the service).

4. Retention

We keep your account data for as long as your account exists. Scanned photos are processed to produce a result and are not retained by us as a long-term gallery. When you delete your account, your profile, journal, palate and scan history are deleted.

5. Your rights

You can access, correct, export or delete your data. You can delete your account and all its data directly in the app (Profile → Delete account). For any other request, or to exercise your rights to access, portability, restriction or objection, contact jonsegeskov29@gmail.com. You may also lodge a complaint with your local supervisory authority (in Denmark, Datatilsynet).

6. Security

Data is encrypted in transit. Access to your personal records is restricted to you via row-level security; account credentials are never stored in plain text.

7. Children

Winelingo concerns alcohol and is intended for adults of legal drinking age (rated 17+). It is not directed at children.

8. Changes

We may update this policy; material changes will be reflected by the “Last updated” date and, where required, notified in-app.