Sommelier's Window Privacy Policy

This policy covers the Sommelier's Window app for iPhone and Android and the Sommelier's Window website account. It is published by Buckshot Digital Sales Inc. ("BDS Inc.", "we", "us").

Last updated: October 11, 2026

Privacy questions?

The short version

  • - Your cellar, notes and ratings are tied to your account and visible only to you.
  • - Wine label photos you scan are stored on our servers (details below). They are not deleted right after analysis.
  • - We do not sell your personal data, we show no ads, and the apps contain no advertising, analytics or crash-reporting SDKs.
  • - You can delete your account and your data at any time, inside the app or on the web.

Information we collect

Account information

  • - Email address and name, when you sign up with email, Sign in with Apple (iPhone) or Google Sign-In.
  • - An account ID we generate for you, and your notification preferences.
  • - If you use Sign in with Apple's private relay, we only see the relay address Apple gives us.

Your cellar

  • - Wines you add: name, producer, vintage, quantities, bottle sizes, storage locations, prices you paid, ratings, tasting notes and personal notes.
  • - Reminders you create (a wine, a date and an optional message). Reminders are stored on our servers so they follow your account. The notification itself is scheduled by your phone as a local notification.

Photos

  • - Label photos. When you scan a wine label, the app shrinks the photo (longest side 1600 pixels), re-encodes it as a JPEG (which removes location and other embedded metadata) and uploads it to our storage (Supabase, bucket "wine-labels") in a folder named after your account ID. When you save the wine, the photo's web address is saved on your cellar entry so the label shows in the app.
  • - Wine list photos (a restaurant list or a shelf). These are uploaded so they can be read, and we then delete the uploaded photo as soon as the list has been read. The deletion is attempted automatically; it is not tied to saving anything to your cellar.
  • - We only use your camera or photo library when you start a scan or choose a photo.

Voice input

The microphone is used only when you tap the microphone button to say a wine name. The recording is not sent to our servers and we do not store it. Speech to text is done by your phone's own speech recognition: on iPhone it runs on the device where your language supports it, otherwise Apple's speech service handles it; on Android it is the system speech recognizer, which your device may run through Google's speech service. Only the resulting text is used by the app. Those services are governed by Apple's and Google's own privacy terms.

Purchases and usage

  • - Whether you have a Premium subscription, which plan, and its renewal or trial dates.
  • - How many wine analyses you have used this month (free plan limit), or in total for guests.
  • - Support messages you send us, and data-issue reports you submit about a wine.

What we do not collect

We do not collect your precise location, contacts, advertising identifier or payment card numbers. The app has no analytics or crash-reporting SDK. Our servers and our providers keep ordinary technical logs (such as IP address, request time and device type) for security and operations.

How we use your information

  • - To run the app: sign you in, keep your cellar and reminders, and sync them between your devices.
  • - To identify wines and generate analyses such as drinking windows, scores and food pairings.
  • - To manage your subscription and the free plan limit.
  • - To answer support requests and keep the service secure.

Wine analyses and our wine database

When you ask the app to analyze a wine, the wine's name, producer, vintage and similar details are sent to our analysis service. If you scan a label, the photo is also sent for reading. The general wine facts that result (for example a drinking window, critic scores and tasting profile) are saved in our shared wine database and can appear on public wine pages on sommelierswindow.com. These public pages describe the wine only and are not linked to you. Your own quantities, prices, notes and ratings are never published. Please do not put personal information in a wine name.

Who receives your information

We do not sell your personal data and we do not share it for advertising. We use these service providers to run the app, and they process data only for that purpose:

Supabase

Hosting, sign-in, database and photo storage.

OpenAI

Receives wine details (name, producer, vintage and similar text) to write wine analyses, and, if you import a CSV file, the column headings of that file to map them to cellar fields.

Perplexity

Receives the wine name and vintage to look up critic and community scores.

Lovable AI Gateway and Google Gemini

Receive your label photo or wine list photo to read the text on it (the gateway routes the request to Google's Gemini model).

RevenueCat

Subscription management. It receives your account ID as the app user ID and your purchase and subscription information.

Google Play and Apple App Store

Process payments. We never see your card number.

Apple and Google sign-in

If you choose Sign in with Apple or Google Sign-In, they confirm your identity and give us your email and name.

Resend

Delivers messages you send through the in-app support form (your email address and message) to our support inbox.

We may also disclose information if the law requires it, or to protect the safety and rights of our users and of us.

Subscriptions

Sommelier's Window Premium is bought through Google Play on Android and the App Store on iPhone. The store handles payment and billing details. We learn only your subscription status, plan and dates, through RevenueCat and the store.

Notifications

If you allow notifications, the app shows reminders about drinking windows and reminders you set. They are scheduled on your phone. Your reminder dates and notification preferences are also stored in your account. You can turn notifications off in the app or in your phone settings.

How long we keep data

  • - Account and cellar data: until you remove it or delete your account.
  • - Label photos: kept until you delete your account. Removing a wine from your cellar removes the wine and its link to the photo from your cellar, but the stored image file itself is deleted when your account is deleted. The photo's web address is long and unguessable, but the storage is publicly readable: anyone who has the exact address can open the image. We do not list or publish these addresses.
  • - Wine list photos: deleted automatically right after the list is read.
  • - Voice recordings: we do not receive or keep them.
  • - Public wine pages: general wine information stays in our wine database and does not identify you.
  • - Server logs and backups: kept by our providers under their retention schedules.

Deleting your account and your rights

You can:

  • - Delete your account in the app: Profile, then Delete Account. This runs immediately and cannot be undone.
  • - Delete it on the web at sommelierswindow.com/account-deletion, or email us from the address on your account.
  • - Edit or remove individual wines, notes and reminders at any time.
  • - Export your cellar as a CSV file from the app (a Premium feature).
  • - Ask us for a copy of, or a correction to, your data by emailing wine@sommelierswindow.com.

Deleting your account removes your profile, cellar entries, tasting notes, reminders, scan history and usage records, your uploaded label photos, and your sign-in. If you subscribed on our website with Stripe, we also cancel that subscription. Subscriptions bought through Google Play or the App Store are managed by those stores: deleting your account does not cancel them, so cancel in Google Play or in your Apple ID settings as well to stop renewals.

Security

Data is encrypted in transit. Your cellar is protected by database access rules so that only your signed-in account can read or change it. No system is perfectly secure, so we cannot guarantee absolute security.

Children

Sommelier's Window is for adults. It is not intended for anyone under 21 years of age (or the legal drinking age where you live). We do not knowingly collect personal information from anyone under that age. If you believe a child has given us information, email us and we will delete it.

International use

Our providers may process data in countries other than your own, including the United States. By using the app you understand that your data may be transferred and processed there.

Changes to this policy

We may update this policy. We will change the date at the top and, for significant changes, tell you in the app or by email.

Contact us

Publisher: Buckshot Digital Sales Inc. (BDS Inc.)

Email: wine@sommelierswindow.com

Account deletion: Request account deletion

Terms: Sommelier's Window Terms of Service