Privacy Policy

Last updated: 24 April 2026

WinePick does not sell your personal data. The information we collect is used solely to provide the service, improve your recommendations, and fulfil legal and technical obligations for running the application.

This Privacy Policy describes how AppCreations Ltd ("we", "our", "us") collects, uses, and protects information relating to users of the WinePick application. It complies with the UK GDPR, the EU General Data Protection Regulation (GDPR), and applicable privacy laws.

1. Data controller

The data controller is AppCreations Ltd, a company registered in the United Kingdom.

For any questions regarding your personal data, you may contact us at: support@winepick.app.

2. Data we collect

WinePick is designed to collect the minimum information necessary to operate. We collect:

Anonymous identifier A UUID generated locally on your device at first launch, with no link to your real identity.

Preferences Your answers to onboarding questions (budget, situations, expertise level) to personalise recommendations.

Wine list photos Photographs of wine lists you submit, processed for analysis and not permanently stored.

Subscription status Your subscription state (active / expired / cancelled), transmitted by Apple via RevenueCat.

Technical data Device language, iOS version, app version, anonymised error logs.

Usage statistics Anonymised events (app opens, scans performed) to understand usage and improve the service.

What we do not collect: your name, your email address (unless you contact us voluntarily), your phone number, your postal address, your precise geolocation, your contacts, any photos other than wine lists you explicitly submit.

3. Purposes and legal bases

Collected data is used for the following purposes:

Service delivery (legal basis: contract performance) — analyse the photographed wine lists and generate personalised recommendations
Subscription management (contract performance) — verify your subscription status to grant access to paid features
Service improvement (legitimate interest) — statistically analyse anonymised usage to improve the app
Legal obligations (legal obligation) — retain certain data to comply with accounting, tax, or compliance requirements
Customer support (legitimate interest) — handle your enquiries when you contact us

4. Technical partners (processors)

To deliver the service, we rely on third-party processors. Each processes only the data strictly necessary for its purpose:

Apple Inc. (United States) — app distribution, purchase and subscription management, anonymous authentication via Apple account
Supabase (European Union) — user database hosting (preferences, subscription status) and analysis request handling
Anthropic (United States) — AI model used to analyse wine lists (Claude API)
RevenueCat (United States) — App Store subscription status management and synchronisation

Data transfers outside the European Economic Area are governed by the European Commission's Standard Contractual Clauses or equivalent mechanisms (Data Privacy Framework, SOC 2 certifications, etc.).

5. Data retention

Your data is retained for the following periods:

Anonymous identifier and preferences: as long as you use the app, then deleted when you use the "Delete Account" function
Wine list photos: processed and immediately deleted after recommendation generation
Anonymised technical logs: 30 to 90 days
Subscription-related data: retained in accordance with applicable accounting and tax obligations (up to 10 years in the United Kingdom)

6. Your rights

In accordance with the GDPR and applicable legislation, you have the following rights regarding your personal data:

Right of access — obtain confirmation that your data is processed and receive a copy
Right to rectification — have inaccurate data corrected
Right to erasure — request deletion of your data, directly accessible via the "Delete Account" function in the app's Settings
Right to portability — receive your data in a structured format
Right to object — object to processing on legitimate grounds
Right to restriction — request suspension of processing in certain cases
Right to lodge a complaint — with a supervisory authority (ICO in the United Kingdom, CNIL in France, AEPD in Spain, ANPD in Brazil)

To exercise your rights, contact us at support@winepick.app. We will respond within one month.

7. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction, or disclosure. This includes encryption in transit (TLS), encryption at rest on processor servers, anonymous identifier authentication, and limited data access by authorised personnel.

8. Cookies and trackers

The WinePick app does not use cookies in the strict sense. Certain technical information (anonymised IDFV/IDFA, language, app version) is transmitted to technical partners for the purposes described above. This information does not directly identify you.

The website winepick.app does not use any analytics or advertising cookies.

9. Children

WinePick is not intended for persons under 18 (or the legal drinking age in your jurisdiction). We do not knowingly collect data from minors. If you believe a minor has submitted data, please contact us for immediate deletion.

10. Policy amendments

This policy may be amended to reflect legal or technical changes. The last update date appears at the top of this page. Material changes will be notified via the application.

11. Contact

For any questions regarding your data protection or the exercise of your rights, contact us at:

AppCreations Ltd
Email: support@winepick.app