Winelingo Privacy Policy — What the Wine App Collects

This policy explains what personal data Winelingo (“we”, “us”) collects, why, and your rights. Winelingo is a wine-education app that identifies wines you photograph, teaches you about them, and builds a private taste profile from the wines you rate. The data controller is Jonas Egeskov, Denmark. Contact: jonsegeskov29@gmail.com.

1. What we collect

Data	Why
Account email (and password, stored hashed by our auth provider)	To create and secure your account.
Photos of wine labels and wine lists you scan, and photos you add to a tasting	Scanned photos are sent to our AI provider to identify the wine and read the list; we do not build an advertising profile from them. Wine-list photos are processed transiently. When you save a tasting, the label photo is stored privately with that journal entry so you can recognise the bottle later. You can also add or change a tasting’s photo from your camera or photo library; the app only receives the photo you choose, and it is stored the same way (it is not sent to our AI provider). Only you can open these photos, unless you share that tasting with friends (see below).
A profile photo, if you add one	Shown next to your name wherever other Winelingo users see it: your friends, the friends feed, comments, search results and the weekly league. It is stored as a public image file, so anyone who has its link can open it; choose a photo you are happy for others to see. You can change or remove it at any time in the app.
Your tastings — ratings, aroma/taste notes, free-text notes, and the resulting taste (“palate”) profile	The core feature: to show your history and personalise recommendations. Your star rating of a wine, including a tasting you keep private, is also counted anonymously in that wine’s Winelingo rating: only the average and the number of ratings are shown, never who rated, and the average appears only once at least three people have rated the wine.
If you use friends: your display name, username and optional bio, your friends list, and the tastings, cheers and comments you share	To let friends you accept find you and see what you share. Shared tastings (including their label photo) are visible only to accepted friends, and you can keep any tasting private. Friend activity also feeds the weekly league, friend streaks and Taste Together sessions, and accepted friends who allow friend notifications may be told that you took a lesson that day.
Reports and blocks you make	To review reports (within 24 hours), remove content that breaks our terms and stop blocked users from seeing you.
Declared preferences (e.g. body/sweetness leanings) you optionally enter	To personalise recommendations before you have rated many wines.
Learning activity (lessons completed, streak, hearts, language) and the learning choices you make (the wine countries you pick and your daily goal)	To run the daily-learning features, show progress and order your course.
Basic product-analytics events, keyed to your account identifier	To understand usage and improve the app.
A device notification token, only if you allow notifications	To send the reminders you opted into (for example, that your learning streak is about to end). You can switch each kind of notification off, or choose your own reminder time, in the app (Profile → Notifications). Turning notifications off in iOS Settings stops them all.
When you use the app: the times you complete lessons, practice, tests and tastings, and whether you were active on a given day	To send your reminder around the time you usually learn rather than at a fixed hour, and to estimate each day how likely you are to come back, so that people who will probably return anyway get their reminder later. This estimate is calculated from your own activity only. It decides when we send you a reminder and nothing else: it is not used for advertising, not shared with anyone, and has no other effect on your account. If you choose your own reminder time, we use that time instead.
Gift codes, if you buy the course as a gift or redeem one	To show the buyer their codes and unlock the course for whoever redeems one. We keep which account bought each code and which account redeemed it.
Subscription status and purchase history, if you buy Premium	To unlock the features you've paid for on all your devices and support restores and refunds. Payment itself is handled entirely by Apple, or by Paddle when you buy on our website — we never see your payment details.

We do not knowingly collect special-category data, and we do not sell your personal data.

2. Who processes your data

We use trusted processors, each bound by their own data-protection terms:

Processor	Purpose
Supabase	Backend, database and authentication (data hosting).
Anthropic	AI vision + text: reads your scanned photos and writes the tasting explanations. Photos are sent for processing to return your result.
PostHog	Privacy-focused product analytics.
Expo	Delivers push notifications to your device, if you allow them.
RevenueCat	Manages subscription status and receipts for purchases (Apple, or Paddle on our website, processes the payment).
Paddle	Our online reseller (Merchant of Record) for purchases on winelingo.app: takes the payment, handles VAT and sends receipts. Paddle collects your payment details and email directly; we only receive the purchase status.

Some processors operate outside the EEA; where they do, transfers are covered by appropriate safeguards (e.g. Standard Contractual Clauses).

3. Legal bases (EU/UK GDPR)

We rely on: performance of a contract (running the app and your account), your consent (optional analytics and push notifications, including the timing of your reminders, which you can withdraw at any time), and our legitimate interests (securing and improving the service).

4. Retention

We keep your account data for as long as your account exists. A photo attached to a saved tasting is kept privately with that journal entry until you delete the entry or your account; photos scanned without saving a tasting, and wine-list photos, are processed to produce a result and are not kept. A profile photo is kept until you remove it or delete your account. When you delete your account, your profile, profile photo, journal, palate, scan history and stored tasting photos are deleted.

5. Your rights

You can access, correct, export or delete your data. You can delete your account and all its data directly in the app (Profile → Delete account). For any other request, or to exercise your rights to access, portability, restriction or objection, contact jonsegeskov29@gmail.com. You may also lodge a complaint with your local supervisory authority (in Denmark, Datatilsynet).

6. Security

Data is encrypted in transit. Access to your personal records is restricted to you via row-level security; account credentials are never stored in plain text.

7. Children

Winelingo concerns alcohol and is intended for adults of legal drinking age (rated 18+). It is not directed at children.

8. Changes

We may update this policy; material changes will be reflected by the “Last updated” date and, where required, notified in-app.