Privacy Policy
Last updated: 11 October 2026 · Suomeksi
Wine Memories ("we", "us", "our") is a mobile application that helps you save wine memories, explore wine regions, and learn about wine. This policy explains what data we collect, why we collect it, and how you can control it.
Contact: oliver@winememories.fi
1. Data We Collect
Account information
You can use Wine Memories without creating an account (anonymous guest mode). If you sign in with Apple or Google, we receive your user ID and, optionally, your email address. We never see or store your password — authentication is handled by Apple, Google, and our backend provider Supabase.
Wine memories & logs
When you log a wine or create a memory, we store the details you enter: wine name, producer, region, vintage, tasting notes, ratings, photos, and any people you tag. Voice notes (max 2 minutes) are stored if you record them.
Photos and the gallery scan
On your phone first: with your permission, the gallery scan reads your photo library on your device. It uses each photo's time and place to group your photos into evenings and picks the ones that could be wine nights. Screenshots, saved chat images and duplicates are skipped.
AI photo analysis (only with your consent): for each candidate evening, the app sends small, compressed thumbnails (up to 15 per evening, about 128 pixels wide) to our server. Our server asks Google's Gemini AI (Google Cloud Vertex AI) whether the evening is a wine night and to write a title and caption for it. Nothing else from your library is sent. We ask for your consent before the first scan, and you can withdraw it at any time in Privacy Settings.
Where and how long: Google may process the thumbnails outside the EU, including in the United States (see "International transfers" below). Under Google Cloud's terms, Google does not use them to train its models; it may keep them briefly (up to about a day) to serve requests. The thumbnails are deleted from our servers within 2 days, and the scan's analysis results within a week. Basic scan records (dates and counts, no photos) are kept for up to 45 days to manage free scan limits.
Only what you keep: a found evening becomes a memory only when you keep it. Photos you keep in a memory are uploaded to our servers and stored with your account.
Reading wine labels: when you keep a memory from the gallery scan, up to 8 of its photos are sent to Google's Gemini to read the wine labels, so the bottles are named for you. We store the text read from the labels (wine, producer, vintage, origin), not extra copies of the photos. This uses the same consent as the gallery scan.
Wine lookups by name: when you log a wine our catalog doesn't know, its name, type, vintage and the memory's place name are sent to Anthropic's Claude to fill in the region, grapes and style. No photo is sent for this.
Location
With your permission, we use your device's GPS to tag where you logged a wine and to show visited regions on your map. Location data is matched against wine region boundaries on your device and is not continuously tracked or stored as a location history.
Contacts
With your permission, Wine Memories can read your contacts to help you find friends who already use the app or to send invites. Contact data is used only for this purpose.
Usage analytics
We collect anonymised usage events (screens viewed, features used, errors encountered) to improve the app. We do not track your search queries. Analytics are processed by our own first-party analytics system and Sentry (error monitoring only). We do not use advertising networks or sell data to third parties.
Purchases
In-app purchases are processed by the Apple App Store or Google Play. We never receive or store your payment card details. We receive only your subscription status from RevenueCat, our purchase management provider.
2. How We Use Your Data
- Provide and personalise the Wine Memories experience
- Sync your memories and progress across devices
- Match your location to wine regions for your wine map
- Calculate achievements and journey progress
- Send transactional notifications (e.g. friend requests, shared memories)
- Diagnose bugs and improve app performance
- Prevent fraud and enforce our terms
We do not use your data for advertising or sell it to third parties.
3. Third-Party Services
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Backend, authentication, database | Account info, memories, logs |
| Mapbox | Map rendering, geocoding | Viewport coordinates (no user ID) |
| Google (Gemini, Google Cloud Vertex AI) | Gallery scan: is this evening a wine night; reading wine labels | Small thumbnails of candidate photos; photos of memories you keep (not used for training) |
| Anthropic (Claude) | Wine details looked up by name | Wine name, type, vintage, place name (no photos) |
| RevenueCat | Purchase management | User ID, subscription status |
| Sentry | Error tracking | Crash reports, user ID only |
| Apple / Google | Sign-in, payments | OAuth tokens, purchase receipts |
Each service processes data under its own privacy policy.
4. Data Storage & Security
Your data is stored on Supabase servers (AWS, EU region). All network traffic uses HTTPS encryption. Authentication tokens are stored in your device's secure storage. Database access is protected by row-level security, so you can only access your own data.
International transfers: some of our providers process data outside the EU, mainly in the United States. Google processes the scan's thumbnails and the label photos on its global infrastructure. These transfers are covered by the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses in our providers' data processing terms.
Local data (settings, cached progress) is stored on your device using encrypted key-value storage and is cleared when you sign out.
5. Data Retention & Deletion
We keep your data for as long as you have an account. Deleted memories go to a "recently deleted" area where you can recover them, then are permanently removed.
To delete your account and all associated data, open the app and go to Profile, then Account, then Delete Account, and confirm. Deletion happens at once and removes your profile, memories, wine logs, voice notes, photos, achievements and friend connections. Usage statistics are kept only in a form that cannot identify you. If you can't use the app, email oliver@winememories.fi and we will delete your account within 30 days.
6. Your Rights
Depending on your location, you may have the right to:
- Access or download a copy of your data
- Correct inaccurate information
- Delete your account and data
- Object to or restrict certain processing
- Withdraw consent (e.g. revoke photo or location access in device settings)
To exercise any of these rights, email oliver@winememories.fi.
7. Children
Wine Memories is intended for users of legal drinking age (typically 18+). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
8. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes through the app or by email. The "last updated" date at the top always reflects the current version.
9. Contact
Questions or concerns? Reach us at oliver@winememories.fi.