Privacy Policy

WIINE is built around a simple idea: your wine, your phone, your business. This policy explains what we collect, what we don't, and how the app handles the small amount of information that does leave your device. "We," "us," and "WIINE" refer to the team behind the WIINE iOS application. "You" means you, the person using the app.

The short version

• WIINE is local-first. Your fridge, memories, ratings, notes, and photos are created on your iPhone, and WIINE keeps no server-side copy of them.
• If your device is signed in to iCloud, that data syncs across your Apple devices through your own iCloud account, never a WIINE database.
• Sign in with Apple is optional and used to start a subscription. If you use it, WIINE receives a Sign in with Apple identifier, plus your name and email only if you choose to share them.
• When you scan a label, the photo passes through a WIINE relay server to our AI partner (currently OpenAI) to read the wine's details. Neither WIINE nor the provider keeps the photo or trains on it.
• Location is optional. If you pick "Home" as the venue for a memory, no coordinates are stored. Ever.
• We use one privacy-focused analytics tool for anonymous, aggregate usage counts. No advertising trackers, no behavioral profiling, and we never sell data.

What stays on your device

The following information is created and held entirely in iOS-managed storage on your iPhone (SwiftData, encrypted by the operating system):

• Wines you've saved (name, producer, vintage, region, grape, color, average price, your tasting notes).
• Your fridge inventory (quantity, purchase price, when added).
• Your memories (date, rating, companions, personal notes, optional location, optional photos).
• App preferences (location capture toggle, AI suggestions toggle, etc.).
• Photos you keep with a bottle or memory.

WIINE keeps no server-side copy of any of this. If iCloud sync is off and you delete the app, the data is gone, so we recommend exporting to CSV or JSON from Settings → Your data before uninstalling. With iCloud on, a copy also lives in your own iCloud account; see iCloud sync below.

What leaves your device

Wine label scans

When you tap to scan a label, WIINE resizes and compresses the photo and sends it over HTTPS to a WIINE relay server, which forwards it to a third-party AI provider (currently OpenAI) to extract structured fields like producer, vintage, region, grape, and an estimated market price. The relay exists so the AI provider's key is never shipped inside the app; it passes the request through and does not store the photo. The request carries only the image and the prompt, with no name, email, or account identifier. It also includes an Apple App Attest token so the relay can confirm the request came from a genuine, unmodified copy of WIINE; that token verifies the app itself and is not linked to your name, email, or account. Per our agreement with the AI provider, image content is not retained and is not used to train models.

Subscription billing

Subscriptions are processed by Apple through your Apple ID. WIINE never sees your card number, billing address, or Apple ID. We receive only anonymous receipt information from StoreKit needed to verify that your subscription is active.

Support email

If you tap "Contact support," your default mail app opens with a pre-filled message. The body includes your app version and iOS version so we don't have to ask. If you choose to send the email, your email address and message reach us at support@wiine.co. If you don't want us to have those, don't send the email.

iCloud sync

If your device is signed in to iCloud, WIINE syncs your wines, fridge, and memories across your Apple devices using Apple's CloudKit. That data lives in the private database of your own iCloud account. WIINE cannot read it, and Apple handles it under Apple's iCloud terms and privacy policy. Sync follows your device's iCloud setting; to keep WIINE on-device only, sign out of iCloud or turn off the app's iCloud access in iOS Settings.

Sign in with Apple

Starting a subscription uses Sign in with Apple. It is optional. WIINE runs in a limited, free mode without it. When you sign in, Apple gives WIINE a stable identifier for your account, which we store in the iOS Keychain so reinstalling the app doesn't strand you. Apple also passes your name and email address the first time you authorize; you may use Apple's "Hide My Email" relay instead of your real address. We use these only to recognize you across devices and to answer support requests. We never sell them or use them for marketing.

Analytics

WIINE uses TelemetryDeck, a privacy-focused analytics service, to see how the app is used in aggregate, such as how often a scan succeeds or a memory is saved. These signals carry only counts and categories. They never include wine names, producers, regions, tasting notes, companions, photos, or location coordinates, and TelemetryDeck is built not to track individual users or build advertising profiles.

Location data

WIINE can attach a location to a memory so you remember where the wine was. This is opt-in for each memory. Two important details:

• If you pick a venue from the nearby list, WIINE saves the venue name and its coordinates so it can show you a map pin later. The coordinates come from Apple's MapKit; we don't collect a real-time GPS feed.
• If you pick "Home," WIINE saves only the word "Home" with no coordinates and no address. Drinking at home shouldn't pin a map.

You can disable location capture entirely at Settings → Capture location on Memories, or revoke location permission in iOS Settings.

What we don't do

• We don't run advertising, attribution, or behavioral-profiling SDKs.
• We don't fingerprint your device.
• We don't sell or rent your data, ever.
• We don't share your data with anyone beyond the service providers named above (the AI provider for a scan; Apple for iCloud sync and Sign in with Apple; TelemetryDeck for anonymous analytics), and only to operate the app.
• We don't keep a WIINE-server database of your wines, memories, or notes.

Children

WIINE is intended for adults of legal drinking age. The App Store rates the app 17+ for that reason. We do not knowingly collect any personal information from anyone under that age. If you believe a minor has used WIINE, contact support@wiine.co and we will help where we can.

Your rights

Because WIINE doesn't keep a copy of your data, the typical "request your data" or "delete your account" flow doesn't apply. You already have full access (it's all on your phone) and you can erase everything by uninstalling the app. For data covered by GDPR, CCPA/CPRA, or similar regimes, you may contact us at support@wiine.co with any question and we'll respond within 30 days.

Changes to this policy

If this policy changes in a material way, we'll update the effective date above and, where the change affects how data leaves your device, surface a notice in the app on next launch.

Contact

Reach us with any question, request, or concern at support@wiine.co.