CELLAREDDownload
Menu
CELLAREDDownload

Privacy Policy

Last updated: May 29, 2026

1. Introduction

Cellared, LLC (“we”, “us”, “our”) operates the Cellared mobile application and the cellared.ai website. This Privacy Policy explains what data we collect, how we use it, how we protect it, and what rights you have regarding your information.

2. Information We Collect

The following data types are collected by Cellared. This reflects our App Privacy disclosure on the Apple App Store.

Contact Info (linked to your identity)

  • Name — collected at account creation. Used for app functionality and to personalize product communications.
  • Email address — used for authentication, account management, and product communications. Password is hashed via bcrypt and never stored in plaintext.

Financial Info (linked to your identity)

  • Subscription and purchase data — your subscription tier and purchase history from Apple App Store subscriptions. We do not collect or store payment card information.
  • Cellar valuation — the prices you enter per bottle and the total value of your collection. This is asset data used to show your cellar worth and personalize recommendations. We do not share valuation data with third parties.

User Content (linked to your identity)

  • Cellar data — wine names, vintages, producers, regions, purchase prices, storage locations, tasting notes, and ratings that you enter into the app.
  • Sommelier response reports — if you report a sommelier response, we store the reported response, the related prompt, your selected report reason, and technical context needed to review it.

Search History (linked to your identity)

  • Sommelier queries and wine searches — questions and search terms you enter. Used to personalize recommendations and improve the sommelier.

Identifiers (linked to your identity)

  • User ID — your unique account identifier within Cellared (Supabase Auth UUID).
  • Device ID — used for push notifications (drinking window alerts), crash reporting, analytics, and ad measurement where permitted by your device settings.

Purchases (linked to your identity)

  • Purchase history — in-app purchases and subscription history from the App Store, managed via RevenueCat.

Usage Data (linked to your identity)

  • Product interaction — how you interact with app features (screens visited, actions taken, bottles added or consumed).
  • Other usage data — feature usage frequency, session patterns, app installs, signup, onboarding, paywall, and subscription events used to improve the product and measure ad performance.

Diagnostics (linked to your identity)

  • Crash data — collected via Sentry to identify and fix bugs.
  • Performance data — app performance metrics collected via Sentry to maintain stability.

We do not collect location data, contacts, health data, or any other sensitive device information.

3. How We Use Your Information

  • App functionality: Provide core features including cellar management, drinking window calculations, label scanning, and sommelier recommendations.
  • Product personalization: Tailor recommendations, Cellared Ageability Index (CAI) scores, and sommelier responses to your specific collection and taste preferences.
  • Analytics: Analyze aggregate usage patterns to improve features and app performance. We do not sell individual-level data.
  • Product communications: We may use your name, email address, and subscription status to send product updates, feature announcements, and relevant communications about Cellared. You can opt out of marketing emails at any time via the unsubscribe link in any email.
  • Notifications: Send drinking window alerts and other in-app notifications you have opted into.

4. Photos and label scanning

When you scan a wine label or attach a photo to a sommelier message, your image is sent to Google Cloud Vision for text extraction (OCR). Cellared extracts only the text from the photo and uses that text for the autofill or to give context to the sommelier. The image itself is processed in memory by Cloud Vision and is not stored by Cellared in our database, in logs, or in any persistent storage. We do not retain the image beyond the request lifetime.

Per Google's Cloud Vision API terms, your image is not used for model training.

5. Third-Party Services

We use the following third-party services to operate Cellared:

  • Supabase (database & authentication) — your data is stored with row-level security so only you can access your cellar. Supabase Privacy Policy.
  • RevenueCat (subscription management) — manages your subscription status and purchase history. RevenueCat receives your User ID and subscription data. RevenueCat Privacy Policy.
  • Anthropic (sommelier on paid tiers, drinking-window descriptions) — your sommelier queries on paid tiers are sent to Anthropic's API for processing. Per Anthropic's commercial API terms, your data is not used to train models. Anthropic Privacy Policy.
  • Google (Gemini for the free-tier sommelier and wine-data enrichment; Cloud Vision OCR for label scanning and photo attachments) — free-tier sommelier queries and wine enrichment requests are sent to Gemini; photos you scan or attach are sent to Cloud Vision for text extraction. Per Google's commercial API terms, your data is not used to train models. Google Privacy Policy.
  • Perplexity (wine fact lookup) — when you add a bottle, Perplexity is used to fetch vintage notes, critic scores, and food-pairing data. Per Perplexity's commercial API terms, your data is not used to train models. Perplexity Privacy Policy.
  • Apple (App Store & in-app purchases) — payment processing is handled entirely by Apple. We do not collect or store payment card information. Apple Privacy Policy.
  • Sentry (error & performance monitoring) — crash reports and performance metrics are sent to Sentry to help us identify and fix bugs. Sentry Privacy Policy.
  • Amplitude (product analytics & session replay) — we collect in-app event data (tied to your User ID, with no IP address) and record in-app sessions to diagnose usability issues. Session recordings mask text entered into input fields (such as passwords); other on-screen content, such as your cellar, may appear in a recording. Amplitude Privacy Policy.
  • HeyCatch (product analytics & touch interaction capture) — we send screens visited, in-app touch interactions, User ID, email, display name, signup date, current subscription plan, provider-verified subscription lifecycle details, device data, IP address, and approximate location. Cellared strips route parameters before screen events are sent. HeyCatch does not receive payment card information or the contents of typed inputs. HeyCatch Privacy Policy.
  • Meta (app event measurement for advertising performance) — where permitted by your device settings, limited app event data (such as app installs, signup, onboarding, paywall, and subscription events) is shared with Meta to measure ad performance and attribute installs. You can opt out at any time in your iOS privacy settings. Meta Privacy Policy.
  • Microsoft Advertising (paid search conversion measurement). When you arrive from one of our ads, we measure whether that visit led to a sign-up or a subscription. To match a conversion back to the ad you clicked, we may share a one-way SHA-256 hashed version of your email address, never the address itself. Microsoft matches the hash against its own signed-in users and retains hashed identifiers for 30 days. Unmatched data is discarded. Microsoft Privacy Statement.
  • Resend (transactional & lifecycle email) — used to send drinking-window briefs, weekly cellar emails, and other product email you have opted into. Resend receives your email address and the body of any email we send you. Resend Privacy Policy.
  • Expo (push notifications and over-the-air updates). Expo Privacy Policy.

We do not sell or rent your personal data. Where permitted by your device settings, we may share limited app event data with Meta to measure ad performance.

6. Data Storage and Security

  • Your data is stored on Supabase servers with row-level security (RLS) — only you can access your cellar data.
  • All data is encrypted in transit (TLS) and at rest.
  • Passwords are hashed using bcrypt via Supabase Auth and are never stored in plaintext.
  • Account deletion completes within 30 days under GDPR/CCPA. We retain limited records only where required for security, fraud prevention, or legal compliance.

7. Your Rights

  • Export: You can export your cellar data as CSV or Excel at any time from the app (Profile > Your Data > Export My Data).
  • Deletion: You can request deletion from Profile > Your Data > Delete Account in the app, or by emailing support@cellared.ai. Account deletion completes within 30 days under GDPR/CCPA. We retain limited records only where required for security, fraud prevention, or legal compliance.
  • Correction: You can edit any of your cellar data at any time within the app.
  • Opt out of tracking: You can allow or deny app tracking for Cellared at any time in your iOS privacy settings (Settings > Privacy & Security > Tracking).

8. Cookies

The cellared.ai website uses essential cookies for form functionality, and product analytics (Amplitude and Vercel Analytics) to understand how pages are used. Our paid-search landing page at cellared.ai/get additionally loads Microsoft Advertising's Universal Event Tracking tag so we can measure which ads lead to real sign-ups. That tag is limited to that one page and is not present on the rest of the site. We do not sell your personal information.

On four pages only (the pricing page, the features page, the drinking window calculator, and the CellarTracker import page) we also record website session replays through Amplitude. A replay captures your clicks, scrolling, and page navigation on that page so we can see where the page itself is confusing. Amplitude masks text input by default, and we do not use replay to identify you. No other page on cellared.ai records sessions, and the rest of the site is covered by the page-level analytics described above.

9. Children's Privacy

Cellared is intended for users aged 21 and older (or the legal drinking age in your jurisdiction). We do not knowingly collect data from anyone under the legal drinking age. If we learn that we have collected data from someone under the legal drinking age, we will delete it immediately.

10. International Users (UK and EU GDPR)

Cellared, LLC is the data controller for the personal data described in this policy. If you are located in the United Kingdom or the European Economic Area, the UK GDPR and EU GDPR give you specific rights over that data.

Legal bases. We process your data to perform our contract with you (operating the app and your account), for our legitimate interests (securing, maintaining, and improving the product and measuring aggregate usage), and with your consent (marketing email and, where applicable, advertising measurement).

Your rights. You can access, correct, erase, restrict, or port your personal data, object to processing, and withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out beforehand. To exercise any of these, email support@cellared.ai.

International transfers. Your data is processed in the United States by the providers listed in Section 5. Where data is transferred out of the UK or EEA, that transfer is protected by Standard Contractual Clauses or an equivalent safeguard. We retain personal data only while your account is active. Account deletion completes within 30 days under GDPR/CCPA. We retain limited records only where required for security, fraud prevention, or legal compliance.

Complaints. You have the right to lodge a complaint with a supervisory authority. In the UK that is the Information Commissioner's Office (ICO), ico.org.uk. In the EU it is the data-protection authority in your country of residence.

11. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or via email. Continued use of Cellared after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or requests, contact us at support@cellared.ai.