Privacy Policy
Last updated: 2026-09-30 (OENARI 4.2)
OENARI ("we", "us", "our") operates the OENARI application on iOS, Android and the web at app.oenari.com (together, the "App"). This policy explains what personal data we process, why, and what you can do about it. It is written to be read; if anything is unclear, write to support@oenari.com.
The short version. Your cellar is yours and nobody else sees it. Nothing social happens until you activate a profile. We do not sell data, we do not show ads, and everything is stored in the EU.
1. What We Collect
1.1 Information you provide
- Account: e-mail address and password (hashed), or a Google / Apple sign-in identity.
- Profile: first and last name (never shown to other users), bio, country, taste preferences, avatar and — if you activate a social profile — your handle.
- Cellar data: wines, vintages, purchase prices and dates, vendors, storage positions, drinking windows, tags, wishlist, consumption history, and — if you use Wine Portfolio — your own valuations and sale prices.
- Tasting notes: scores, structured evaluations, free text, photos and — only if you choose to tag it — the location of a tasting (see 1.4).
- Receipts and certificates you attach to bottles.
- Files you import (CSV / Excel) — processed to create your bottles; the parsed rows are kept as import history for 24 hours' undo.
- Social activity (only with an activated profile): follows, likes, taste sessions and scores, wine clubs and noticeboard posts, reports and blocks.
- Community contributions: wines, producers, vendors, barcodes and label photos you add to the shared catalogue.
- Support correspondence if you e-mail us, and feedback you send with Write to us, including any image you attach and the app version and platform, which are added automatically.
1.2 Information collected automatically
- Device language and locale to set your language and units.
- Push token for your device, if you enable push notifications.
- Usage events — which screens and features are used, recorded under a random pseudonym rather than your account ID, for improving the App. There is no third-party analytics SDK and no advertising identifier.
- Session tokens to keep you signed in.
1.3 Information we do not collect
- No advertising trackers, no data brokers, no sale of data.
- No contacts, no phone number, no messages.
- No location, except a tasting-note location you explicitly tag.
- No precise device fingerprinting.
1.4 Location tagging
When writing a tasting note you can tag where you tasted it. This asks for location permission once and stores coordinates on that note only. The coordinates are never shown to other users; your public profile shows the number of countries you have tasted from. You can remove the tag at any time.
2. Why We Process It (and the legal basis)
| Purpose | Basis (GDPR Art. 6) |
|---|---|
| Providing the App: your account, cellar, notes, import, export | Contract (b) |
| Social features you opt into: profile, follows, sessions, clubs, likes | Contract (b) |
| Paid memberships and receipts | Contract (b) |
| Community catalogue and anonymous statistics (OP averages, average prices paid, leaderboards) | Legitimate interest (f) |
| Moderation: handling reports, blocks and catalogue corrections | Legitimate interest (f) and legal obligation (c) |
| Push and e-mail notifications | Your settings — consent (a) |
| Usage events for improving the App | Legitimate interest (f), pseudonymised |
| AI features (label reading, food pairing, tasting-note translation) | Contract (b) |
| Security, abuse prevention, legal requests | Legitimate interest (f) / legal obligation (c) |
3. What Other Users Can See
Nothing, until you activate a social profile. After activation:
- your handle, avatar, bio, taste preferences and the achievements you chose to show;
- counts of published notes, countries tasted, and tastings attended;
- tasting notes you set to public, and to followers for approved followers;
- your membership of public clubs; sessions you host or take part in, to their participants.
Never visible to other users: purchase prices, bottle counts, cellar value, storage positions, note coordinates, name, e-mail, membership tier, wishlist. Profile aggregates are derived from notes you published and sessions you joined, never from your cellar.
Your OP score on a private note still contributes to the anonymous community average for that wine. It cannot be traced back to you.
Your purchase price contributes in the same way to the average price paid that a wine page shows once at least three collectors have bought the wine. No individual price is ever shown.
When someone who can already read one of your notes translates it, the translation is stored with the note and shown to other readers of that language who can see the note. It is deleted when you edit or delete the note.
4. Where and How Data Is Stored
- All data is stored with Supabase in the European Union (eu-west-1).
- Transport is encrypted (TLS). Passwords are hashed. Database row-level security ensures each account can only read its own data and the public surfaces described above.
- Photos and files are stored in EU-hosted object storage.
5. Third-Party Services
We use the following processors. None of them may use your data for their own purposes.
| Service | What for | Data involved | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage, server functions | All App data | EU |
| Apple / Google (Sign-In) | Optional sign-in | Identity token, e-mail | EU/US, SCCs |
| Apple App Store / Google Play | In-app subscriptions | Purchase handled by the store; we receive a transaction reference, never your card | Per store |
| RevenueCat | Subscription status and receipts | Anonymous app-user ID, purchase status | US, SCCs |
| Google Cloud Vision | Reading text on wine labels you scan | The label photo | EU/US, SCCs |
| Anthropic | AI reading of scanned labels; AI food & wine pairing; translating tasting notes; checking wines submitted to the shared catalogue | The label photos and their text; the dish and the wines you match it against, including wines from your cellar; the text of the note being translated; submitted wine data — never your name, e-mail or account ID | US, SCCs |
| Expo / Firebase / Apple Push | Delivering push notifications | Device push token, the notification text | US/EU |
| Resend | Transactional e-mail: verification, password reset, session invitations, digests | E-mail address, message content | US, SCCs |
| Cloudflare | Hosting oenari.com, support.oenari.com, app.oenari.com | Standard web request logs | EU/global |
Currency exchange rates are fetched from a public rates API without any user data.
Check price in Wine Portfolio opens the Wine-Searcher website with the wine's name and vintage. We send Wine-Searcher nothing about you; what happens on their site is covered by their own policy.
6. Retention
- Your data is kept while your account exists.
- Deleting your account removes all personal data immediately (see Account Deletion). Community contributions — wines, producers, barcodes, label photos, anonymous OP scores — are kept in anonymised form, with every link to you removed. Usage events lose their link to you when the pseudonym is deleted.
- Deactivating a social profile (without deleting the account) makes all notes private and removes all followers, but keeps your data.
- Reports you filed are kept, without your identity, for moderation records.
- Push tokens are removed when you sign out or revoke notifications.
- Import history is kept for undo and then summarised.
- Translations of a tasting note are deleted when the note is edited or deleted.
7. Your Rights
- Access and portability: Profile → Settings → Privacy → Export my data downloads everything we hold about you as JSON, instantly.
- Rectification: edit your profile, notes and bottles in the App.
- Erasure: Profile → Settings → Delete Account, or e-mail us.
- Restriction, objection, withdrawal of consent: notification consent is withdrawn in Settings; anything else, e-mail support@oenari.com.
- Complaint: to the Swedish Authority for Privacy Protection (IMY) or your local authority. Details in GDPR.
8. Children
The App is not intended for anyone under 16, and it concerns alcoholic beverages. We do not knowingly collect data from children; contact us if you believe we have.
9. Changes
We update this policy when the App changes. Material changes are announced in the App. Continued use after a change means acceptance.
10. Contact
support@oenari.com · https://support.oenari.com