Privacy Policy

CellarPals (“CellarPals”, “we”, “us”) provides a web and mobile application for cataloguing personal wine and spirits collections. This policy explains what we collect, how we use it, who we share it with, and the choices you have. CellarPals is intended for adults of legal drinking age.

• Account & sign-in.Your email address. If you sign in with Google or Facebook, we receive your name, email address, and profile picture from that provider — only what is needed to create and identify your account. We never receive your Google or Facebook password.
• Your collection. The wines, spirits, cellars, tasting notes, purchase details, and photos you choose to add.
• Payment information.Subscriptions are handled by Stripe. We do not store your card number — only a Stripe customer / subscription identifier and your plan status.
• Technical & usage data. Log data such as IP address, browser type, and timestamps, used to operate and secure the service.
• Cookies. Strictly-necessary cookies keep you signed in and remember preferences (for example, your light/dark theme). We do not use advertising cookies or third-party ad trackers.

• To create, secure, and operate your account.
• To store and display your collection and its analytics.
• To generate AI tasting assessments and recommendations (see AI features below).
• To process subscriptions and gift certificates.
• To send service messages (for example, password resets and subscription notices).
• To prevent fraud and abuse, and to comply with the law.

We do not sell your personal information, and we do not use it for advertising.

Some features — tasting assessments, “what to pour” recommendations, and label recognition — send the relevant item details, or an uploaded label image, to our AI provider (Anthropic) to generate text. This data is processed only to produce your result and is not used to train third-party models. Please do not upload images that contain other people’s personal information.

We share data only with providers that help us run CellarPals, under contract and only as needed:

• Supabase— database, authentication, and file storage.
• Stripe— payment processing.
• Anthropic— AI text and image processing for the features above.
• Google / Facebook (Meta)— only if you choose to sign in with them, to authenticate you.

We may disclose information if required by law or to protect the rights and safety of our users and the public. We do not sell personal data.

CellarPals’ use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in solely to authenticate you and access only your basic profile (name, email address, and profile picture). We do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as needed to provide the service, to comply with applicable law, or as part of a merger or acquisition with equivalent protections.

If you sign in with Facebook, we receive your name, email address, and profile picture to create and identify your account. We request only these basic permissions. You can revoke CellarPals’ access at any time in your Facebook settings under Settings & Privacy → Settings → Apps and Websites.

We keep your data while your account is active. You can delete your account at any time from Account settings in the app. Deletion is scheduled with a 30-day grace period, during which you can cancel; after that, your personal data and collection are permanently removed.

How to delete your data. Either (a) in the app, go to Account → Delete account; or (b) email us at privacy@cellarpals.com and we will delete your data. This section also serves as our data deletion instructions for Facebook Login.

Depending on where you live (for example, the EEA/UK under the GDPR, or California under the CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can access and export your data at any time from the app (Account → Export) and delete it as described above. To exercise any other right, contact us. We will not discriminate against you for exercising your rights.

We use industry-standard safeguards, including encryption in transit (HTTPS/TLS), access controls, and database row-level security so each account can reach only its own data. No method of transmission or storage is completely secure, but we work to protect your information.

CellarPals is hosted in the European Union (Frankfurt, Germany). If you use it from elsewhere, your data may be transferred to and processed there and by the providers listed above.

CellarPals is intended for adults of legal drinking age in their jurisdiction and is not directed to anyone under 18. We do not knowingly collect data from children. If you believe a minor has provided us information, contact us and we will delete it.

We may update this policy from time to time. We will post the new version here and update the “Last updated” date; we may also note material changes in the app.

Questions or requests: privacy@cellarpals.com