Privacy policy

• Account: the ID of the account the app creates for you automatically, and a hash of a random value the app generates on your device (the device secret). If you sign in: your email address, your name (display name), and the identifier and details that your sign-in provider (Apple, Google or LINE) gives us.
• What you record: wines and bottles, purchase prices and dates, where you keep them, tasting notes, and the preferences in your taste profile.
• Scanning bottles: the barcode number when you add a bottle, and the features of labels you confirm (a label signature). The text and the label image sent for label reading are used only to identify the wine and are not stored.
• Usage and technical data: how often you use AI features and what they cost, how scans were answered (not their content), and error reports and performance data from the app and our servers (account ID, device model, OS, app version and similar). These reports don't record IP addresses.
• Email sends: to stop too many sign-in emails going to one address, we keep a hash of the address for one day. The sign-in code in each email is kept only as a hash, for 10 minutes or until it's used.

• To provide the Service: your cellar, wine search, label reading, the AI sommelier and so on
• To sign you in and keep your account secure
• To prevent abuse and to manage how much the AI features are used
• To investigate problems and improve the Service
• To send messages the Service needs, such as sign-in links

We don't use your personal information for advertising, we don't sell it, and we don't track you across other companies' apps or websites.

AI features run on Amazon Bedrock from Amazon Web Services, in its regions in Japan (Tokyo and Osaka). We send only what each feature needs.

• Label reading: the text your device read on the label (minus any address, phone or email lines) and a small image cropped to that text, with no photo metadata. It's used for that one identification and not stored. The full photo is never sent.
• Taste summary: from the preferences you set and your latest tasting notes (including the wines' names), we create a short summary for the sommelier. Your name and email are never sent. The summary is used only inside the Service and isn't shown in the app.
• Catalog details: only information that identifies a wine, such as its name.

Wines you add, and the barcodes and label signatures confirmed when you add a bottle, become part of a catalog shared by all users. The catalog never includes your name, notes, prices or storage locations.

We entrust personal information to these providers, only as far as needed to run the Service:

• Fly.io, Inc. (United States): servers and database, running in Tokyo
• Tigris Data, Inc. (United States): storage of database backups
• Amazon Web Services, Inc. (United States): AI features, processed in Japan
• Functional Software, Inc. (Sentry, United States): error reports and performance data, stored in the United States
• MailPace (United Kingdom): sending sign-in emails
• Apple Inc. (United States), Google LLC (United States), LY Corporation (Japan): sign-in, when you choose their sign-in option

The United States has no comprehensive federal privacy law equivalent to the APPI; privacy is governed by state laws such as the California Consumer Privacy Act. The United Kingdom is recognised by Japan's Personal Information Protection Commission as having an equivalent level of protection. See the Commission's information on other countries' systems. We use these providers after confirming they take appropriate security measures.

We don't give your personal information to any other third party without your consent, except where the law requires it.

• Account information is kept while your account exists.
• If you delete your account (in the app, under Account), everything, including your cellar, notes and taste profile, is deleted straight away. It disappears from backups as they expire.
• Accounts that never signed in and never added a bottle are deleted automatically 90 days after they were created.
• Error reports are deleted when Sentry's retention period ends.

All connections are encrypted. Credentials such as the device secret are stored only as hashes on our side, and in the iPhone's Keychain on your device. Only people who need it to run the Service can access personal information.

You can ask us to disclose, correct, add to or delete your personal information, to stop using it or giving it to third parties, and to disclose records of what we have given to third parties. Contact us at the address below. Once we have confirmed it's you, we'll respond without delay as the law requires.

The Service is for people aged 20 or over. We don't knowingly collect personal information from anyone under 20.

If we change this policy, we'll publish the new version on this page and tell you about important changes in the app.

Kiki Wine
Email: kiki.wine@proton.me

If the Japanese and English versions differ, the Japanese version prevails. 日本語