This policy covers the Sommelier AI apps (iOS, Android, web) and this website. It explains what personal data we collect, why, who we share it with to run the service, and how you stay in control. We do not sell your data.
The short version.
Your palate is yours. We do not sell it, and we do not use it to train general-purpose models. We keep what we need to make the product better for you, we share it only with the vendors who help us run the service, and you can export or delete it whenever you want.
What we collect.
- Account, identity & purchases. Your name, email, and language, plus the login handled by our authentication provider (Auth0). If you subscribe, the purchase is handled by whoever sold it to you — Stripe on the web, the Apple App Store on iOS, Google Play on Android — and we receive receipt, entitlement, and subscription-status information back from them. We never see full card numbers.
- Your cellar & journal. Bottles, vintages, dates, ratings, tasting notes, and journal entries you create.
- Your palate. Taste-quiz answers, ratings, and scan history, used to build and tune your personal taste profile.
- Photos you scan. Images of wine labels and wine lists you capture are sent to our AI provider (Microsoft Azure OpenAI) to identify the wines.
- Chat with the AI sommelier. The messages you send, and context we attach (such as your cellar), are processed by Azure OpenAI. To answer some questions we may send a search query to our web-search provider (Tavily).
- Contacts you choose for invites. When you invite someone to a Wine Night from your device contacts, we upload the name and — if you include them — the email and/or phone number of the specific people you pick. We never read or upload your whole address book.
- Notifications. If you turn notifications on, we store a device push token issued through Expo and the platform's notification service, and use it only to deliver the notifications you asked for — Wine Night invitations, cellar and drinking-window alerts, and account or security notices. You can turn them off at any time in the app or in your device settings; nothing in the app requires them.
- Cellar Journal newsletter. If you subscribe from this website, we store your email address and the IP address of the request as evidence of opt-in, and we use them only to send you the Cellar Journal. Every letter carries a one-click unsubscribe link, and you can unsubscribe anytime at asksommelier.ai/unsubscribe or by emailing help@asksommelier.ai. After you unsubscribe we keep the minimum record needed to honor it.
- Consent & security records. When you accept these terms, we record the version, timestamp, IP address, and device/browser (user-agent) to evidence your consent.
- Device & diagnostic data. App version, device and OS type, and error/performance telemetry, processed by Microsoft Azure Monitor to keep the service reliable. We do not use third-party advertising or cross-site tracking.
How we use it.
- To provide and personalize the service — recommendations, your cellar, scanning, and chat.
- To validate purchases, unlock the entitlements you paid for, and keep your subscription status current (via Stripe, Apple, or Google Play, depending on where you subscribe, and RevenueCat for the mobile apps).
- To keep the service secure, debug problems, and prevent abuse.
- To comply with legal obligations.
We do not sell your personal data, and we do not use your palate or content to train models for anyone other than you.
Who processes it.
We share data with a small set of vendors who process it on our behalf, only to provide their part of the service, under contracts that require them to protect it:
- Microsoft Azure — hosting, database, and file storage (United States).
- Microsoft Azure OpenAI — AI chat, label recognition, and enrichment.
- Tavily — web search used to ground some AI answers.
- Auth0 by Okta — sign-in and account authentication.
- Stripe — subscription payments made on the web.
- Apple App Store — iOS purchases, receipts, and subscription status.
- Google Play — Android purchases, receipts, and subscription status.
- RevenueCat — receipt validation and entitlement management for App Store and Google Play subscriptions.
- Expo — push notifications (mobile).
- Azure Communication Services — transactional email we send you.
- Cloudflare — Turnstile bot protection on the forms on this website.
We may also disclose data if required by law, or to protect the rights and safety of our users and the service.
People you invite.
When you invite someone to a Wine Night using their contact details, you are sharing another person's information with us. We use it only to deliver that invite and manage the event, and we do not use it to market to them. If you — or the person you invited — want that information removed, email privacy@asksommelier.ai and we will delete it.
Your palate.
Your palate fingerprint is the most personal thing in this product, and we treat it that way: stored encrypted at rest, never sold, and never used to train general-purpose or third-party models. It exists to serve your recommendations. When you delete your account, your palate is deleted with it.
Retention & deletion.
We keep your data while your account is active. You can delete your account at any time from Settings. When you do, we delete your account data — cellar, journal, palate, chat history, and scans — from our active systems and remove your sign-in identity; residual copies are purged from encrypted backups within 30 days. Contact details you provided to invite guests are deleted when the event is removed, or earlier on request. We may retain a minimal record where the law requires it (for example, tax or transaction records).
Subscriptions are a separate matter, and it matters where you bought yours. A subscription bought on our website is cancelled with your account through the Stripe billing flow. A subscription bought through the Apple App Store or Google Play is managed by that store — deleting your Sommelier AI account does not cancel it, so cancel it in your App Store or Google Play subscription settings. Either way, you never have to cancel first: you can delete your account immediately.
Cookies & tracking.
This website uses no advertising cookies, no third-party pixels, and no cross-site tracking. The app stores a sign-in token on your device so you stay logged in. Server-side, we use Microsoft Azure Monitor for diagnostics as described above. We self-host our fonts, so reading a page sends nothing to a font CDN. One third party does load on every page of this site: Cloudflare Turnstile, the challenge that keeps bots out of our contact and newsletter forms. Cloudflare receives your IP address and basic browser signals to tell a person from a script, and does not use them to advertise to you.
Your rights.
You can access, correct, export, or delete your data. In the app, use Settings · Account; for anything the app doesn't cover — including a full export — email privacy@asksommelier.ai. EU and UK residents have the rights granted by the GDPR (including the right to object and to lodge a complaint with a supervisory authority); California residents have the rights granted by the CCPA/CPRA, including the right not to be discriminated against for exercising them. We honor these rights for all users, everywhere.
Age & children.
Sommelier AI is for adults of legal drinking age in their country. It is not directed to, and we do not knowingly collect personal data from, anyone under that age. If you believe a minor has provided us data, contact us and we will remove it.
Changes & contact.
We may update this policy; when we do, we will change the effective date above and, for material changes, notify you in the app or by email. The data controller is IT Solutions & Consulting Services INC, operating as Sommelier AI.
Questions or requests: privacy@asksommelier.ai. We answer within five working days.