--- title: "Privacy Policy | Cellarful" description: "What Cellarful collects, why, who processes it, how long we keep it and how to export or delete your data." url: https://getcellarful.com/privacy/ language: en updated: 2026-10-29 --- # Privacy Policy Last updated 29 October 2026 Cellarful collects what the app needs to work, which is your account, your wine collection and what you choose to share. You can export your collection or delete your account in the app at any time. This policy covers the Cellarful app for iPhone and getcellarful.com. We follow the EU General Data Protection Regulation (GDPR) and Danish data protection law. ## 1. Who we are Cellarful is made by Loehde Hansen ApS, a Danish company with CVR number 37693774. We are the data controller for your personal data, and you can reach us about privacy at [support@getcellarful.com](mailto:support@getcellarful.com). ## 2. What we collect ### Your account - Your email address and password. Supabase Auth stores the password as a hash, so we never see it. - Your profile with name, username, bio, country, profile photo and whether the profile is public or private. - When you accepted our terms and which version you accepted. ### Your cellar - The wines you add, with name, producer, vintage, type, country, region, grape, alcohol, where and when you bought them, number of bottles, price and storage location. - Ratings, tasting notes and your tasting history. - Discoveries, which are wines you scan or save outside your cellar, for example at a restaurant or at a friend's house. - Files you import from Vivino, CellarTracker or CSV. We read the file to create your wines and don't keep the file itself. ### Camera and photos - When you scan a label, your iPhone first reads the text with Apple's Vision framework. The photo is then sent through our server to Anthropic so the AI can identify the wine. - Photos you save to a wine or your profile are stored with Supabase. We may crop and compress them and turn them into a digital label. - Cellarful only uses the camera and photo library when you choose to. ### Social features - The people you follow and the people who follow you, plus your privacy settings for what you share. - Activity you share, such as wines you add, open, give away or rate, and your discoveries. Your followers can see your discoveries by default. If you turn this off, you also stop seeing theirs. - Likes and comments. - Blind tastings you host or join, including participants, guesses and points. The other participants can see these. - Reports you make about content or users, and the users you block. ### AI features - Questions you ask the AI sommelier, its answers and the wine details it needs to answer. - Wine details used to calculate drinking windows and insights, including wine data, price, rating and your notes. ### Purchases Apple handles payment when you buy Premium in the App Store. We receive and store the transaction ID, product and expiry date so the app knows you have Premium. We never see your card details. ### Price index The prices you paid are included in a comparison across users ("Others paid …") without your name or profile. This is on by default, and you can turn it off in the app. ### Usage and technical data - Product events linked to your user ID, such as your onboarding answers and which features you use. We use them to improve Cellarful and never for advertising. - Login sessions, IP addresses and error logs, which we use for security and troubleshooting. - Notifications in the app, and push notifications sent through Apple if you allow them. - Visits to getcellarful.com and how the site is used, but only if you accept cookies (see section 9). ## 3. Why we use it and our legal basis | Purpose | Data | Legal basis (GDPR) | | --- | --- | --- | | Run your account, cellar, statistics and Premium | Account, cellar, photos, purchases | Contract, art. 6(1)(b) | | AI features you ask for (scan, sommelier, drinking windows) | The wine and question in that request | Contract, art. 6(1)(b) | | Keep your sommelier conversations | Questions and answers | Contract, art. 6(1)(b), so you can return to them. Legitimate interest, art. 6(1)(f), to improve answers and prevent misuse | | Show what you share to your followers | Shared activity, discoveries, tastings | Contract, art. 6(1)(b), controlled by your privacy settings | | Push notifications | Device token via Apple | Consent, art. 6(1)(a) | | Price index | Price, wine and date without your identity | Legitimate interest, art. 6(1)(f), to give all users useful price comparisons. You can opt out | | Moderation, security and troubleshooting | Reports, blocks, logs, IP address, error reports | Legitimate interest, art. 6(1)(f), and legal obligation, art. 6(1)(c), where it applies | | Product improvement | Product events | Legitimate interest, art. 6(1)(f) | | Website statistics | Visits, pages and clicks on getcellarful.com | Consent, art. 6(1)(a), given in the cookie banner | | Bookkeeping | Purchase records | Legal obligation, art. 6(1)(c), under the Danish Bookkeeping Act | Where we rely on legitimate interest, we have weighed it against your privacy, and you can object at any time (see section 6). ## 4. Who processes your data The companies below process data for us under data processing agreements. | Company | What they do | Where | | --- | --- | --- | | Supabase | Database, login, photo storage, server functions | London, UK | | Anthropic (Anthropic Ireland, Limited) | AI behind scanning, the sommelier, drinking windows and insights | USA | | Apple | App Store purchases, subscriptions and push notifications | USA/EU | | Resend | Emails such as welcome and account messages | USA | | Cloudflare | Hosting of getcellarful.com | Global | | Google (Google Analytics 4) | Website statistics, only with your consent | USA/EU | | Microsoft (Clarity) | How the website is used, only with your consent | USA | | Sentry | Error reports from the website | USA | We only send Anthropic what a feature needs, such as the photo, wine details or question in that request, and never your email or password. Anthropic's commercial terms don't allow it to train its models on this data. Anthropic deletes inputs and outputs within 30 days unless it needs them longer to stop misuse or to comply with the law. Our database is in the UK, which the EU Commission has found to protect personal data adequately. Data sent to the USA is protected by the EU-US Data Privacy Framework or the EU Commission's standard contractual clauses. ## 5. How long we keep it - We keep your data while your account is active so the app works. - Sommelier conversations are kept until you delete them in the app or delete your account. - When you delete your account under More → Delete account, we delete your profile, cellar, photos, notes, comments, conversations and activity at once. Backups are overwritten within 7 days. - Anonymous prices and wine facts stay in the shared catalogue and price index after you leave. - We keep purchase records for 5 years because Danish bookkeeping rules require it. - Comments or photos other people have already seen may remain in their notifications for a short while. - Google keeps website statistics for 14 months and Microsoft Clarity for up to 13 months. ## 6. Your rights You have the right to access, correct and delete your data, to restrict or object to how we use it, to receive it in a portable format and to withdraw consent at any time. You can do most of this yourself. - Export your collection as CSV under More → Data & backup. - Delete sommelier conversations in the sommelier, or delete your whole account under More → Delete account. - Change what you share and turn off the price index in your privacy settings. - Withdraw cookie consent at any time with the cookie link at the bottom of getcellarful.com. For anything else, write to [support@getcellarful.com](mailto:support@getcellarful.com) and we will reply within one month. If you think we handle your data wrongly, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, [datatilsynet.dk](https://www.datatilsynet.dk). ## 7. Security - Data is encrypted in transit with HTTPS and at rest at Supabase. - Row Level Security in the database means you can only read your own data and what others have chosen to share with you. - AI requests go through our own server, so the AI key never sits in the app. - If a breach puts your data at risk, we notify Datatilsynet and you as the law requires. ## 8. Age limit Cellarful is about wine and is only for people aged 18 and over. We don't knowingly collect data about anyone under 18, and if we find an account that belongs to someone under 18, we delete it. ## 9. Cookies and storage getcellarful.com only sets statistics cookies from Google Analytics 4 and Microsoft Clarity if you accept them in the cookie banner. Saying no is as easy as saying yes, and the site works the same either way. We use the numbers to see which pages help people and never for advertising. Some things run without cookies. Our host Cloudflare logs technical data such as IP addresses to keep the site secure, and Sentry receives error reports from the site. Your cookie choice is stored in your browser. The app stores settings and a cache on your iPhone so it opens quickly and works offline. This stays on your device. The app doesn't track you across apps, so it never asks for tracking permission. ## 10. Changes When this policy changes, we update the date at the top. If a change affects how we use your data, we tell you in the app before it takes effect. ## 11. Contact Write to [support@getcellarful.com](mailto:support@getcellarful.com) if you have questions about your data.