WineMenu.ai uses a sign-in (Sign in with Apple, Google, or an email link) so your access and subscription follow you across devices. From sign-in we collect only your name and email address. We never sell your data or use it for advertising.
1. Overview
WineMenu.ai is a mobile application that helps you understand wine pricing at restaurants. This Privacy Policy explains what data we collect, how we use it, and who we share it with. We've kept data collection to the minimum necessary to make the service work.
2. Data We Collect
Account & sign-in data. To use WineMenu.ai you sign in with Sign in with Apple, Google, or an email magic link. Authentication is handled by Firebase Authentication (Google). We receive and store your name and email address as provided by your chosen sign-in method, along with a stable account identifier (Firebase UID) and which provider you used. Sign in with Apple may provide a private relay email address instead of your real one. We use this data to identify your account, restore your subscription across your devices, and send you the email sign-in link. To deliver the email sign-in link we use Resend; to manage subscriptions, your account identifier is shared with RevenueCat.
Preferences & tasting profile. Settings you choose in the app — such as wine types, price range, styles, body, and flavor preferences — may be saved to your account to personalize your recommendations and keep your choices consistent across devices. You may also choose to tell us, in the app, which wines you ordered or enjoyed. We save this to your account to build your tasting profile, improve the recommendations we make for you, and — where you have opted in — surface relevant wine offers (see "Recommendations & marketing" below).
Camera / menu photos. When you scan a wine menu, the image is sent to Anthropic's Claude API for text extraction and parsing. Scan images may also be stored by WineMenu.ai in Google Cloud Storage to support service improvement, quality review, and potential use in anonymized datasets (see Section 3). Anthropic does not retain images after processing.
Location (GPS). When you initiate a scan, we use your device's GPS coordinates to identify the nearby restaurant name via Google Places API. GPS coordinates are stored in our database associated with the identified restaurant (placeId) to improve future restaurant detection. We do not track your movement or use location data for advertising.
Anonymous device identifier. When you first open the app, a random UUID is generated on your device. This ID is not linked to your name, email, Apple ID, or any other identifying information. It is used to associate your scan sessions with your device and track your subscription status.
Scan session data. When you scan a menu, we store the following in Google Cloud Firestore: wines identified, restaurant name and Google Places ID, GPS coordinates (associated with the restaurant), session and scan identifiers, timestamps, image count, and your anonymous device UUID. This data is used to power the service and improve our wine identification accuracy.
Subscription and purchase data. Subscription management is handled by RevenueCat. When you purchase a subscription through Apple In-App Purchase, RevenueCat receives your device identifier and purchase history to validate and manage your subscription. We do not receive or store your Apple ID, payment method, or billing address.
3. Aggregated & De-identified Data
We may use or license aggregated, de-identified data — including scan images of wine menus, pricing trends, menu composition patterns, and regional markup analysis — that cannot reasonably be used to identify any individual. Menu photos contain no personal information. Any data shared or licensed will be stripped of device identifiers, timestamps, and location information that could be traced back to you.
4. How We Use Your Data
- Account name & email → Identify your account, restore access across devices, and send email sign-in links
- Menu photos → AI text extraction via Anthropic Claude API
- GPS location → Identify nearby restaurant via Google Places API
- Account / device identifier → Session tracking and subscription status
- Scan session data → Powering the service and improving wine identification
Recommendations & marketing. We use your preferences and tasting profile to personalize the recommendations we show you in the app. With your consent, we may also send you wine recommendations, offers, and updates by email. These emails may include affiliate links to retailers where you can buy wine, and we may earn a commission on purchases made through them. Marketing email is optional — we only send it if you opt in, and you can unsubscribe at any time.
We do not sell or rent your personal data to third parties, we do not build profiles about you for third-party advertising, and we do not track you across other apps or websites.
5. Third-Party Services
We share limited data with the following service providers solely to operate the app:
- Firebase Authentication (Google) — Verifies your sign-in and stores your name, email, and account identifier. Privacy policy →
- Resend — Delivers the email sign-in link to your email address. Privacy policy →
- Anthropic — Menu photos sent for AI parsing. Not retained after processing. Privacy policy →
- Google Places API — GPS coordinates sent to identify nearby restaurant. Privacy policy →
- Wine Labs — Wine name and vintage sent to retrieve market pricing and ratings. No personal data included. winelabs.ai →
- RevenueCat — Device identifier and purchase history for subscription management. Privacy policy →
- Google Cloud (Firestore) — Database hosting for scan session data.
6. Data Retention
- Account data (name, email, identifier): Retained while your account exists; removed when you delete your account (see Section 8).
- Photos: May be stored in Google Cloud Storage for service improvement and quality review. May be used in anonymized datasets as described in Section 3.
- GPS coordinates: Stored in association with the identified restaurant to improve future restaurant detection.
- Scan session data: Retained as long as necessary to provide and improve the service.
- Subscription data: Managed by RevenueCat per their retention policy.
7. Children's Privacy
WineMenu.ai is not directed at children under 13 and is intended for adults of legal drinking age. We do not knowingly collect data from children under 13. If you believe a child has used the app, contact us at support@winemenu.ai.
8. Data Deletion
Delete your account in the app. Open the app, tap the profile icon, and choose Delete Account. This permanently removes your account record and sign-in identity — your name, email, account identifier, preferences, and marketing choices. Full instructions are on our Data Deletion page.
Your order/tasting history and scan data (Section 3) are anonymized rather than deleted: they are stripped of any link to your account and retained only as de-identified, aggregated wine and pricing data. Because this data is no longer connected to your identity — and cannot be re-associated with you — it is not personal information, and we retain it to keep the shared wine database accurate.
9. Security
Data in transit is encrypted via TLS. Scan session data is stored in Google Cloud Firestore with access controls. Photos are transmitted over encrypted connections and stored in Google Cloud Storage with access controls.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be noted with a revised effective date. Continued use of the app after changes constitutes acceptance of the updated policy.
11. Contact
Questions about this policy or your data:
support@winemenu.ai