Privacy Policy

Last updated: May 29, 2026

1. Introduction

Cellared, LLC (“we”, “us”, “our”) operates the Cellared mobile application and the cellared.ai website. This Privacy Policy explains what data we collect, how we use it, how we protect it, and what rights you have regarding your information.

2. Information We Collect

The following data types are collected by Cellared. This reflects our App Privacy disclosure on the Apple App Store.

Contact Info (linked to your identity)

  • Name — collected at account creation. Used for app functionality and to personalize product communications.
  • Email address — used for authentication, account management, and product communications. Password is hashed via bcrypt and never stored in plaintext.

Financial Info (linked to your identity)

  • Subscription and purchase data — your subscription tier and purchase history, managed via RevenueCat, the Apple App Store, and Google Play. We do not collect or store payment card information.
  • Cellar valuation — the prices you enter per bottle and the total value of your collection. This is asset data used to show your cellar worth and personalize recommendations. We do not share valuation data with third parties.

User Content (linked to your identity)

  • Cellar data — wine names, vintages, producers, regions, purchase prices, storage locations, tasting notes, and ratings that you enter into the app.
  • Sommelier response reports — if you report a sommelier response, we store the reported response, the related prompt, your selected report reason, and technical context needed to review it.

Search History (linked to your identity)

  • Sommelier queries and wine searches — questions and search terms you enter. Used to personalize recommendations and improve the sommelier.

Identifiers (linked to your identity)

  • User ID — your unique account identifier within Cellared (Supabase Auth UUID).
  • Device ID — used for push notifications (drinking window alerts), crash reporting, analytics, and ad measurement where permitted by your device settings.

Purchases (linked to your identity)

  • Purchase history — in-app purchases and subscription history from the App Store, managed via RevenueCat.

Usage Data (linked to your identity)

  • Product interaction — how you interact with app features (screens visited, actions taken, bottles added or consumed).
  • Other usage data — feature usage frequency, session patterns, app installs, signup, onboarding, paywall, and subscription events used to improve the product and measure ad performance.

Diagnostics (linked to your identity)

  • Crash data — collected via Sentry to identify and fix bugs.
  • Performance data — app performance metrics collected via Sentry to maintain stability.

We do not collect location data, contacts, health data, or any other sensitive device information.

3. How We Use Your Information

  • App functionality: Provide core features including cellar management, drinking window calculations, label scanning, and sommelier recommendations.
  • Product personalization: Tailor recommendations, CAI scores, and sommelier responses to your specific collection and taste preferences.
  • Analytics: Analyze aggregate usage patterns to improve features and app performance. We do not sell individual-level data.
  • Product communications: We may use your name, email address, and subscription status to send product updates, feature announcements, and relevant communications about Cellared. You can opt out of marketing emails at any time via the unsubscribe link in any email.
  • Notifications: Send drinking window alerts and other in-app notifications you have opted into.

4. Photos and label scanning

When you scan a wine label or attach a photo to a sommelier message, your image is sent to Google Cloud Vision for text extraction (OCR). Cellared extracts only the text from the photo and uses that text for the autofill or to give context to the sommelier. The image itself is processed in memory by Cloud Vision and is not stored by Cellared in our database, in logs, or in any persistent storage. We do not retain the image beyond the request lifetime.

Per Google's Cloud Vision API terms, your image is not used for model training.

5. Third-Party Services

We use the following third-party services to operate Cellared:

  • Supabase (database & authentication) — your data is stored with row-level security so only you can access your cellar. Supabase Privacy Policy.
  • RevenueCat (subscription management) — manages your subscription status and purchase history. RevenueCat receives your User ID and subscription data. RevenueCat Privacy Policy.
  • Anthropic (sommelier on paid tiers, drinking-window descriptions) — your sommelier queries on paid tiers are sent to Anthropic's API for processing. Per Anthropic's commercial API terms, your data is not used to train models. Anthropic Privacy Policy.
  • Google (Gemini for the free-tier sommelier and wine-data enrichment; Cloud Vision OCR for label scanning and photo attachments) — free-tier sommelier queries and wine enrichment requests are sent to Gemini; photos you scan or attach are sent to Cloud Vision for text extraction. Per Google's commercial API terms, your data is not used to train models. Google Privacy Policy.
  • Perplexity (wine fact lookup) — when you add a bottle, Perplexity is used to fetch vintage notes, critic scores, and food-pairing data. Per Perplexity's commercial API terms, your data is not used to train models. Perplexity Privacy Policy.
  • Apple (App Store & in-app purchases) — payment processing is handled entirely by Apple. We do not collect or store payment card information. Apple Privacy Policy.
  • Google Play (Android distribution & in-app purchases) — on Android, app distribution and payment processing are handled by Google Play. We do not collect or store payment card information. Google Privacy Policy.
  • Sentry (error & performance monitoring) — crash reports and performance metrics are sent to Sentry to help us identify and fix bugs. Sentry Privacy Policy.
  • Amplitude (product analytics & session replay) — we collect in-app event data (tied to your User ID, with no IP address) and record in-app sessions to diagnose usability issues. Session recordings mask text entered into input fields (such as passwords); other on-screen content, such as your cellar, may appear in a recording. Amplitude Privacy Policy.
  • Meta (app event measurement for advertising performance) — where permitted by your device settings, limited app event data (such as app installs, signup, onboarding, paywall, and subscription events) is shared with Meta to measure ad performance and attribute installs. You can opt out at any time in your iOS privacy settings. Meta Privacy Policy.
  • Resend (transactional & lifecycle email) — used to send drinking-window briefs, weekly cellar emails, and other product email you have opted into. Resend receives your email address and the body of any email we send you. Resend Privacy Policy.
  • Expo (push notifications and over-the-air updates). Expo Privacy Policy.

We do not sell or rent your personal data. Where permitted by your device settings, we may share limited app event data with Meta to measure ad performance.

6. Data Storage and Security

  • Your data is stored on Supabase servers with row-level security (RLS) — only you can access your cellar data.
  • All data is encrypted in transit (TLS) and at rest.
  • Passwords are hashed using bcrypt via Supabase Auth and are never stored in plaintext.
  • We retain your data for as long as your account is active. Upon deletion, all data is permanently removed.

7. Your Rights

  • Export: You can export your cellar data as CSV or Excel at any time from the app (Profile > Your Data > Export My Data).
  • Deletion: You can delete your account and all associated data from Profile > Settings in the app, or by emailing support@cellared.ai.
  • Correction: You can edit any of your cellar data at any time within the app.
  • Opt out of tracking: You can allow or deny app tracking for Cellared at any time in your iOS privacy settings (Settings > Privacy & Security > Tracking).

8. Cookies

The cellared.ai website uses only essential cookies for waitlist form functionality. We do not use advertising cookies, tracking pixels, or third-party analytics on the website.

9. Children's Privacy

Cellared is intended for users aged 21 and older (or the legal drinking age in your jurisdiction). We do not knowingly collect data from anyone under the legal drinking age. If we learn that we have collected data from someone under the legal drinking age, we will delete it immediately.

10. International Users (UK and EU GDPR)

Cellared, LLC is the data controller for the personal data described in this policy. If you are located in the United Kingdom or the European Economic Area, the UK GDPR and EU GDPR give you specific rights over that data.

Legal bases. We process your data to perform our contract with you (operating the app and your account), for our legitimate interests (securing, maintaining, and improving the product and measuring aggregate usage), and with your consent (marketing email and, where applicable, advertising measurement).

Your rights. You can access, correct, erase, restrict, or port your personal data, object to processing, and withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out beforehand. To exercise any of these, email support@cellared.ai.

International transfers. Your data is processed in the United States by the providers listed in Section 5. Where data is transferred out of the UK or EEA, that transfer is protected by Standard Contractual Clauses or an equivalent safeguard. We retain personal data only while your account is active or as needed to provide the service, then delete it (see Section 6).

Complaints. You have the right to lodge a complaint with a supervisory authority. In the UK that is the Information Commissioner's Office (ICO), ico.org.uk. In the EU it is the data-protection authority in your country of residence.

11. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or via email. Continued use of Cellared after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or requests, contact us at support@cellared.ai.