Winelingo Privacy Policy — What the Wine App Collects

This policy explains what personal data Winelingo (“we”, “us”) collects, why, and your rights. Winelingo is a wine-education app that identifies wines you photograph, teaches you about them, and builds a private taste profile from the wines you rate. The data controller is Jonas Egeskov, Denmark. Contact: jonsegeskov29@gmail.com.

1. What we collect

Data	Why
Account email (and password, stored hashed by our auth provider)	To create and secure your account.
Photos of wine labels and wine lists you scan	Sent to our AI provider to identify the wine and read the list; we do not build an advertising profile from them. Wine-list photos are processed transiently. When you save a tasting, the label photo is stored privately with that journal entry so you can recognise the bottle later — only you can open it.
Your tastings — ratings, aroma/taste notes, free-text notes, and the resulting taste (“palate”) profile	The core feature: to show your history and personalise recommendations.
Declared preferences (e.g. body/sweetness leanings) you optionally enter	To personalise recommendations before you have rated many wines.
Learning activity (lessons completed, streak, language)	To run the daily-learning features and show progress.
Basic product-analytics events, keyed to your account identifier	To understand usage and improve the app.
A device notification token, only if you allow notifications	To send the reminders you opted into (for example, that your learning streak is about to end). Turning notifications off in iOS Settings stops them.
Subscription status and purchase history, if you buy Premium	To unlock the features you've paid for on all your devices and support restores and refunds. Payment itself is handled entirely by Apple — we never see your payment details.

We do not knowingly collect special-category data, and we do not sell your personal data.

2. Who processes your data

We use trusted processors, each bound by their own data-protection terms:

Processor	Purpose
Supabase	Backend, database and authentication (data hosting).
Anthropic	AI vision + text: reads your scanned photos and writes the tasting explanations. Photos are sent for processing to return your result.
PostHog	Privacy-focused product analytics.
Expo	Delivers push notifications to your device, if you allow them.
RevenueCat	Manages subscription status and receipts for Premium purchases (Apple processes the payment).

Some processors operate outside the EEA; where they do, transfers are covered by appropriate safeguards (e.g. Standard Contractual Clauses).

3. Legal bases (EU/UK GDPR)

We rely on: performance of a contract (running the app and your account), your consent (optional analytics and push notifications, which you can withdraw at any time), and our legitimate interests (securing and improving the service).

4. Retention

We keep your account data for as long as your account exists. A label photo attached to a saved tasting is kept privately with that journal entry until you delete the entry or your account; photos scanned without saving a tasting, and wine-list photos, are processed to produce a result and are not kept. When you delete your account, your profile, journal, palate, scan history and stored label photos are deleted.

5. Your rights

You can access, correct, export or delete your data. You can delete your account and all its data directly in the app (Profile → Delete account). For any other request, or to exercise your rights to access, portability, restriction or objection, contact jonsegeskov29@gmail.com. You may also lodge a complaint with your local supervisory authority (in Denmark, Datatilsynet).

6. Security

Data is encrypted in transit. Access to your personal records is restricted to you via row-level security; account credentials are never stored in plain text.

7. Children

Winelingo concerns alcohol and is intended for adults of legal drinking age (rated 17+). It is not directed at children.

8. Changes

We may update this policy; material changes will be reflected by the “Last updated” date and, where required, notified in-app.