Privacy Policy

1. Introduction

POURPIN ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our wine logging application on the web and on iOS.

2. Our Approach: Keep as Little as Possible

We design POURPIN so that we hold as little personal information as we can, and so that a leak of our database would reveal as little as possible about who you are.

• No real names or profile photos from Google or Apple. We do not copy them into your profile, and we remove these fields from our stored sign-in records.
• Your email address stays in the sign-in records. It is not stored in our app tables, not shown to other users, and not sent to the AI services. If you subscribe, it is also given to Stripe for receipts.
• Notifications to our team identify you only by the first eight characters of your account ID, not by your name or email address.
• Your avatar is a generated pattern made from your account ID, unless you choose to upload a photo.
• No continuous location tracking. With your permission, your location is read when you open a place picker, search for a place, or look for a nearby shop. We never track it in the background.
• Scanning a label without saving does not store the photo. We keep only daily usage counters, and wine descriptions that are shared between users and not linked to you.

3. Information We Collect

Account Information

When you sign in with Google or Apple, we keep:

• Email address (used only for signing in and account recovery; if you sign in with Apple and choose to hide your email, we only receive Apple's private relay address)
• An account ID from Google or Apple

We do not keep your real name or your Google profile picture. Google or Apple may send them during sign-in, but we do not copy them into your profile, we remove them from our sign-in records, and we do not show them in the app. Your display name and profile picture are only what you choose to set yourself, and both are optional.

Wine Log Data

Information you provide when logging wines:

• Wine names, wineries, and origins
• Ratings and tasting notes
• Photos of wine labels
• Where you enjoyed or bought the wine, if you add it (the place name, address, and map position)
• Purchase prices, dates, and whether you shared the wine

Account Activity

• Your language and app settings, badges, and streaks
• Your plan and subscription status
• Which wines you looked up with the wine information feature, and when (to apply the monthly limit)

If You Subscribe or Contact Us

• Payments on the website: Stripe processes your payment and receives your email address for receipts. We never see or store your card details; we keep only Stripe's customer ID and your plan.
• Purchases in the iOS app: Apple processes the payment through the App Store; we never see your payment details or your Apple Account. After a purchase, the app sends the App Store transaction to our server, which checks it with Apple and links it to your POURPIN account. We keep the subscription's original transaction ID, the product (monthly or yearly), the current period's end date, and the subscription status, plus the IDs of the notices Apple sends us. Apple also sends our server notices when the subscription renews, is cancelled, or is refunded, so your plan stays correct.
• Contact form: Your message and the name and email address you type are delivered to our team through Slack and used only to reply to you.

Usage Data

We automatically collect:

• Page views and app events (for example, which features are used and how long a scan takes), counted with Umami, a privacy-focused analytics service that does not use cookies
• On the website, ad measurement events sent to OpenAI (see "Advertising Measurement" in section 7), unless you turn it off
• Device and browser type
• Diagnostic logs with timings, status, and error details. Label-reading logs leave out the photo and the text read from it.

4. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Display your wine logs and history
• Show your wines on the map feature
• Calculate badges and streaks
• Improve and optimize the Service
• Communicate with you about updates or issues

5. Data Storage and Security

Your data is stored using Supabase, a database platform. We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS); our database provider encrypts stored data
• Sign-in via Google or Apple; we never handle passwords
• Row-level security, which restricts direct access to private records to their owner. Information you choose to share (shared wine pages, your invitation page) is public.
• Two-factor authentication on the administrative accounts we use to run the service

Photos are stored in Cloudflare Images. Anyone who has a photo's link can open it. The links are long and random; they appear on wine pages you share and on your invitation page (with your uploaded avatar, if you set one).

6. Data Sharing

We do not sell your personal data. We may share data only:

• With service providers necessary to operate the app (listed in the next section)
• If required by law or legal process
• To protect our rights or the safety of users

7. Third-Party Services

We use the following third-party services:

• Google Sign-In and Sign in with Apple: For authentication
• Supabase: For database and authentication
• Cloudflare: For hosting and image storage
• Stripe (web): For payments (Premium plan)
• Apple App Store (iOS): For in-app subscription purchases (Premium plan)
• Mapbox (web): For showing maps and turning a position you pin into an address
• Google Maps Platform (web): For searching places. The words you type are sent with your approximate location to rank nearby results; when you look for a nearby shop, your position is sent to find places within about 200 meters.
• Apple Maps (iOS): For showing maps, searching places, and turning a position into an address. The iOS app remembers the last map position on your device.
• Umami: For usage statistics
• OpenAI (web): For measuring the results of our ads (see "Advertising Measurement" below)
• Slack: To deliver contact form messages, feedback, and account notices (sign-up, plan changes, deletion) to our team. Feedback and notices carry only the first eight characters of your account ID.

AI Services

Some features send data to third-party AI services. Data is sent when you use these features. Some sends happen automatically as part of a feature: a label photo you add is analyzed right away, or shortly after the check-in is saved if you added it while offline; in Japanese, the wine name you type is converted to kana shortly after you stop typing; and the wine news shown in the app is fetched with a fixed search request that contains none of your data.

• Label reading: The wine label photo you add is sent to Anthropic (Claude). If Anthropic is unavailable or cannot read it, the same photo may be sent to Google (Gemini) instead.
• Taste profile (scan): When you scan a label, the label photo, or the wine name, producer, region, type, and vintage read from it, are sent to Anthropic (Claude) to describe the wine's style.
• Wine information and history: The wine name, winery, and region are sent to Perplexity to look up background information about the wine.
• Tasting note drafts: The wine name, winery, wine type, country of origin, and your rating are sent to Anthropic (Claude) to draft a tasting note.
• Phonetic readings (kana): The wine name is sent to Anthropic (Claude) to convert it into Japanese phonetic characters.
• Wine news: A fixed news search request (only the display language) is sent to Perplexity to collect recent wine news. No personal data is included.

We do not send your own written notes, your location data, your email address, or your account ID to these services. Please avoid photographing personal information along with a label, as the photo is sent as is. In the iOS app, we ask for your consent the first time you use these features, and you can withdraw it at any time in Settings. Each provider handles the data it receives under its own privacy policy:

• Anthropic Privacy Policy
• Google Privacy Policy
• Perplexity Privacy Policy

Advertising Measurement

Our website uses the OpenAI Ads Measurement Pixel to learn whether our ads on OpenAI's services lead to people trying the app, signing up and subscribing. When you visit the website, the Pixel loads from OpenAI and your browser sends directly to OpenAI (OpenAI, L.L.C., United States) the pages you view and these events: tapping the button to try the app, saving a record without an account (only that a record was saved and a number for that record, not its content or photos), creating an account, signing in with Google, and starting a paid plan or a free trial (the plan and the amount; this one is sent from our server). It also stores two cookies set by OpenAI (__oppref for 30 days and __obref for 365 days) that record whether you arrived from an OpenAI ad.

We do not send your email address, name, account ID, wine records, or photos for this purpose, and we do not use OpenAI's matching of personal data. The iOS app does not use the Pixel. OpenAI handles this data under its Privacy Policy.

You can turn ad measurement off here or in your Profile. When it is off, nothing is sent and the Pixel's cookies are removed. The choice is saved in this browser.

8. Your Rights

You have the right to:

• Access: View all data we have about you
• Correct: Update your information through the app
• Delete: Delete your account and all associated data
• Export: Request a copy of your data

To exercise these rights, use the Profile settings in the app or contact us.

9. Data Retention

We retain your data as long as your account is active. When you delete your account:

• Your account, profile, and wine logs are permanently deleted from our database
• We delete the photos attached to your records and your avatar. If a photo cannot be deleted at that moment, it may remain in image storage until we clean it up.
• Any subscription is cancelled; Stripe keeps its own payment records, as required by law
• Copies in our provider's database backups are overwritten on its regular schedule
• This process is irreversible

10. Cookies and Local Storage

We use local storage on your device to:

• Maintain your login session
• Store language preferences and whether ad measurement is allowed
• Keep records you saved offline until they sync, and guest-mode records

The only tracking cookies are the two set by OpenAI's ad measurement on the website (__oppref, __obref; see "Advertising Measurement" in section 7). You can turn them off at any time.

11. Children's Privacy

POURPIN is intended for users of legal drinking age. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, please contact us.

12. International Data Transfers

POURPIN is operated by bykamo from Japan. Your account and wine logs are primarily stored in Supabase's Tokyo region. Some of the services listed in section 7 are provided by companies based in the United States and may handle data outside Japan. If you would like details about where your data is handled and how it is protected, please contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email.

14. Contact Us

For questions or concerns about this Privacy Policy or your data, please contact us.