GrapeDNA

When you create an account and use the app, we store:

• Your email address, used to sign you in (via Firebase Authentication).
• Wine data you enter or scan — names, producers, vintages, regions, ratings, tasting notes, and cellar quantities.
• Photos you take of wine labels or bottles, if you choose to attach one.
• Basic profile info you provide, like a display name.
• Storage-location labels you create (e.g. "Wine Fridge," "Rack A") to track where bottles physically sit.
• Who you follow (and who follows you) if you use the Follow feature, along with a small numeric summary of your taste (body/tannin/acidity/sweetness, averaged from your own ratings) used for group wine recommendations — see Section 3.
• Tasting session details you choose to log — a restaurant name, date, wines tried, and each attendee's reaction — if you use that feature. If any attendee isn't an GrapeDNA user, you're entering their name and reaction on their behalf; only you (the host) can see or edit that record.

The camera is used only to photograph wine labels for on-device text recognition and for your own bottle photos — nothing is captured without you actively taking a picture.

GrapeDNA uses a few Google Firebase/Cloud services to keep the app reliable:

• Firebase Analytics — records general usage events (e.g. which screens you visit, that a scan or sign-up happened) along with device-level information like device model, OS version, and approximate country derived from IP address. This is aggregate product-usage data, not sold or shared for advertising.
• Firebase Crashlytics — if the app crashes, it sends a report containing the device model, OS version, and the technical error trace at the moment of the crash, so we can fix the bug. It does not intentionally include your wine data or photos.
• Google Cloud Vision — if you opt in to publicly share a wine photo (Section 3), it's automatically screened by this image-safety service before anyone else can see it. It only ever looks at photos you've chosen to share.

If you enable notifications, we also store a device push-notification token so we know where to deliver them — see Section 5.

All data is stored on Google's Firebase platform (Firestore for your wine records, Firebase Storage for photos, Firebase Authentication for sign-in), processed on Google Cloud infrastructure in the United States. It's protected by access rules that restrict your data to your own account — other users can't read or write your personal wine records, ratings, or photos.

• We don't sell your data.
• We don't share your data with third parties for advertising or marketing.
• We don't run ads in the app.
• We don't track you across other apps or websites.

If you use the in-app notification bell, we generate entries for your own activity (scans, ratings) and a monthly summary of wines approaching or past their drinking window. To deliver these as push notifications even when the app is closed, we store a device token issued by Firebase Cloud Messaging, tied to your account. You can clear this by revoking notification permission in your device settings or deleting your account.

GrapeDNA is not directed at children and is not intended for anyone under the legal drinking age in their jurisdiction. We don't knowingly collect information from children. If you believe a child has created an account, contact us and we'll remove it.

We keep your data for as long as your account is active. If you delete a wine, it's removed immediately. If you delete your account (Section 8), everything tied to it — wines, photos, profile, notification history — is permanently deleted right away.

You can view and correct your profile information at any time from Profile → Edit Profile. You can delete individual wines from within the app whenever you like.

If this policy changes, the "last updated" date above will change too. Material changes will be reflected here before they take effect.