Privacy

What we collect

• · Your email

  You sign in with a magic link or with Sign in with Apple. We store your email so we can recognize you on return visits. If you use Sign in with Apple’s “Hide my email” feature, we only see the anonymized relay address Apple gives us.

• · Photos of wine lists

  When you scan a list, the photos are uploaded to private storage scoped to your account. Only you can access your own folder.

• · Scan results and favorites

  The bottle names, prices, and picks generated from each scan are saved so you can revisit them in History. Favorites are saved when you tap the heart.

• · Standard server logs

  Our hosting provider (Vercel) records IP addresses and request metadata for normal operational purposes. Logs are kept short and not used for tracking.

What we don't collect

• · No analytics. No third-party trackers. No advertising IDs.
• · No location data. No contacts. No microphone.
• · The camera is used only when you actively take a photo of a wine list. Photos are not captured in the background.

How your photos are processed

To extract bottle names and generate picks, each photo is sent to Anthropic (the maker of Claude, the AI model that reads the list) over an encrypted connection. Per Anthropic’s commercial terms, the content you send is not used to train their models, and is retained only as needed to run the service. The picks you see in the app are AI-generated and should be treated as a starting point, not professional advice.

Third parties we use

• · Supabase — auth, database, photo storage. Your data lives here, protected by row-level security so only your account can read it.
• · Anthropic — reads the photos and writes the picks. See above.
• · Vercel — hosts the web app and API.
• · Resend — sends the magic-link sign-in emails.
• · Apple — Sign in with Apple, App Store distribution.

How long we keep it

We keep your account, scans, and favorites until you ask us to delete them. If you delete your account, all of your scans, photos, and favorites are deleted with it.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete your account at any time. Email jmsurma+cellar@gmail.com with the email address you signed up with and we’ll handle it within 30 days. If you’re in the EU/UK, these rights come from the GDPR; if you’re in California, the CCPA. We extend them to everyone.

Children

Cellar is rated 17+ because it surfaces information about alcoholic beverages. It’s not intended for anyone under the legal drinking age in their jurisdiction. We don’t knowingly collect data from children under 13.

Changes

If we change anything material, we’ll update the effective date at the top of this page. For substantive changes, we’ll also email registered users.

Contact

Questions, deletion requests, or anything else: jmsurma+cellar@gmail.com.