Your data, handled with care.

CellarPals (“CellarPals”, “we”, “us”) provides a web and mobile application for cataloguing personal wine and spirits collections. This policy explains what we collect, how we use it, who we share it with, and the choices you have. CellarPals is intended for adults of legal drinking age.

• Account & sign-in. Your email address. If you sign in with Google or Facebook, we receive your name, email address, and profile picture from that provider — only what is needed to create and identify your account. We never receive your Google or Facebook password.
• Your collection. The wines, spirits, cellars, tasting notes, purchase details, and photos you choose to add. If you import from a merchant invoice, we keep the line items read from it — vendor, invoice number, date, and what each row said — but not the document itself, which is discarded once it has been read.
• Passport memories. The details you save with a bottle you’ve opened — venue, companions, mood, weather, occasion, your caption and cost, and, if you choose to add it, the precise location where you enjoyed it. A place name you search is sent to our maps provider to resolve a location.
• Payment information. Web subscriptions are handled by Stripe; in-app subscriptions by the Apple App Store or Google Play (via RevenueCat). We never store your card number — only a customer / subscription identifier and your plan status.
• Notifications. If you switch on push notifications, we store a device token issued by Apple or Google so a notification can reach that device. It identifies the device and is linked to your account, and we hold it only while push is on: turning push off removes it, and a token the store tells us is dead — because the app was uninstalled — is deleted automatically. Email notifications use the address already on your account and add nothing new. You can switch either channel, and each kind of notification, on or off at any time in the app.
• Technical & usage data. Log data such as IP address, browser type, and timestamps, used to operate and secure the service.
• Cookies. Strictly-necessary cookies keep you signed in and remember preferences (for example, your light/dark theme). We do not use advertising cookies or third-party ad trackers.

• To create, secure, and operate your account.
• To store and display your collection and its analytics.
• To generate AI tasting assessments and recommendations (see AI features below).
• To process subscriptions and gift certificates.
• To send service messages (for example, password resets and subscription notices).
• To tell you when a bottle in your cellar becomes ready to drink, nears the end of its window, or passes it — in the app, and by push or email if you have those switched on.
• To prevent fraud and abuse, and to comply with the law.

We do not sell your personal information, and we do not use it for advertising.

Some features — tasting assessments, “what to pour” recommendations, label recognition, and reading a merchant invoice — send the relevant item details, an uploaded label image, or an uploaded invoice, to our data and AI providers to generate your result. A label photo is sent to a wine-data provider (GrapeMinds) and/or our AI provider (Anthropic). An invoice is sent to Anthropic only. Invoices normally carry your own name and delivery address: the document is used solely to read the wines off it, we keep only the line items and not the document, and it is deleted from our side once read. This data is processed to produce your result and is not used to train third-party models. Where a scan reads a wine list or a shelf, we also keep what was read — the wine, producer, vintage, and the price as printed — to build our reference catalogue of wines. That record carries no account, name, device, or location, and we do not link it back to you: our catalogue has no column to store who a reading came from. Your own photo is not kept, and nothing about your cellar, your ratings, or your purchases goes into it. Please do not upload images or documents that contain other people’s personal information.

We share data only with providers that help us run CellarPals, under contract and only as needed:

• Supabase — database, authentication, and file storage.
• Stripe — web payment processing.
• RevenueCat, Apple App Store, Google Play — mobile in-app subscription processing and status.
• Anthropic and GrapeMinds — AI text/image and wine-data processing for label recognition and tasting features.
• Resend — sending service emails, notification digests, and (if you opt in) marketing emails.
• Expo, and through it Apple and Google — delivering push notifications. They receive the device token and the message itself; Apple and Google operate the only channels by which a notification can reach a phone, so there is no way to send one without them. This applies only if you switch push on.
• Nominatim / OpenStreetMap — resolving a place search or coordinates into a location name for Passport.
• Sentry — crash and error reporting (technical diagnostics such as error messages, stack traces, and device/browser details) to help us find and fix bugs.
• Google / Facebook (Meta) — only if you choose to sign in with them, to authenticate you.

We may disclose information if required by law or to protect the rights and safety of our users and the public. We do not sell personal data.

CellarPals’ use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in solely to authenticate you and access only your basic profile (name, email address, and profile picture). We do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as needed to provide the service, to comply with applicable law, or as part of a merger or acquisition with equivalent protections.

If you sign in with Facebook, we receive your name, email address, and profile picture to create and identify your account. We request only these basic permissions. You can revoke CellarPals’ access at any time in your Facebook settings under Settings & Privacy → Settings → Apps and Websites.

We keep your data while your account is active. You can delete your account at any time from Account settings in the app. Deletion is scheduled with a 30-day grace period, during which you can cancel; after that, your personal data and collection are permanently removed.

How to delete your data. Either (a) in the app, go to Account → Delete account; or (b) reach us through our support page and we will delete your data. This section also serves as our data deletion instructions for Facebook Login.

Depending on where you live (for example, the EEA/UK under the GDPR, or California under the CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can access and export your data at any time from the app (Account → Export) and delete it as described above. To exercise any other right, contact us. We will not discriminate against you for exercising your rights.

We use industry-standard safeguards, including encryption in transit (HTTPS/TLS), access controls, and database row-level security so each account can reach only its own data. No method of transmission or storage is completely secure, but we work to protect your information.

CellarPals is hosted in the European Union (Frankfurt, Germany). If you use it from elsewhere, your data may be transferred to and processed there and by the providers listed above.

CellarPals is intended for adults of legal drinking age in their jurisdiction and is not directed to anyone under 18. We do not knowingly collect data from children. If you believe a minor has provided us information, contact us and we will delete it.

We may update this policy from time to time. We will post the new version here and update the “Last updated” date; we may also note material changes in the app.

Questions or requests? Reach us through our support page.