Last updated: 17 October 2026
Your wine journal is yours. No ads, no analytics, no tracking, and we don't sell anything about you.
The short version
The controller under the EU General Data Protection Regulation (GDPR) is The Lucas Agency GmbH, Germany. Full address and register details are in the legal notice. For anything about your data, write to support@santewine.app.
You can keep a journal without signing in. Your wines, tastings, notes, photos, collections and settings are then stored only on your phone, in the app's own storage. We receive none of it.
When you search the wine catalogue (a public list of wine names, LWIN by Liv-ex), the text you type is sent to our server to find matching wines. It is used for that search and not stored.
Reading wine lists and checking shop prices need an account (see sections 6 and 7).
You can sign in in two ways:
For your account we store your email address, your name (if given), an internal user ID, and the times of sign-up and sign-in.
When you are signed in, your journal is backed up to our database so it is the same on all your devices. This includes:
Photos are resized and saved again on your phone before they are uploaded, and are stored in private storage that only your account can read.
To make sync reliable, every change you make is recorded so the same change is never applied twice. These records hold only a fingerprint of the change (a hash) and whether it worked, not its content, and are deleted after 30 days.
The "Who with" and "Place" fields are free text. If you name other people there, please keep in mind that it is stored in your journal as you typed it.
You can invite people to a shared collection with a link that works once and for seven days. Members of a collection see your profile name and the wines, ratings, notes and photos you choose to add to it. Members can keep copies on their own devices.
You can leave a collection, remove what you added, block a member or report an entry. Reports (the entry and the reason you give) are kept so we can review them. If you delete your account, reports you made are kept without your user ID.
If you photograph a wine list, a shop shelf or a few bottles, the photo is sent to our server and from there to Google's Gemini API, which reads the wines and prices on it. Your account details are not sent to Google.
We do not store the photo. We store a fingerprint of it (a hash, from which the photo cannot be rebuilt) and the list of wines that was read, linked to your account. This lets us show the same result again without paying twice and enforce the daily limit. It is deleted after 30 days, or earlier if you delete your account.
Please photograph the list or the bottles, not the people around them.
When you snap or choose a label photo in "Log a wine", it is sent the same way to Google's Gemini API, which reads the producer, name, vintage and other details printed on it. Your account details are not sent to Google. We store a fingerprint of the photo and what was read, linked to your account, for 45 days, so the same photo isn't read twice and the monthly limit can be enforced. The photo itself is kept only as part of your journal, if you save the wine with it.
When you tap "Check shop price", our server sends the wine's name, producer, vintage and the shopping country to Serper, which searches Google Shopping, and to OpenAI, which picks the offers that match the wine. If nothing is found, our server may also run a plain web search and open shop pages to read the price. None of these services receive your name, email, account ID or IP address.
Prices found are stored for up to a week (a "nothing found" for three days) and are shown to anyone who asks about the same wine. They are not linked to you. To apply the daily limit we record that your account made a check and when; that record is deleted after two days.
Like any online service, our database provider records technical data for each request, such as IP address, time and the address requested, to keep the service secure and working. This website is hosted by Vercel, which records the same kind of data when you visit it. Neither is used to build a profile of you.
When you use the contact form or write to support@santewine.app, we get your email address, your name if you give it, and your message, and use them only to answer you. Form messages are sent to our inbox through Resend. We keep the conversation as long as needed to deal with your request.
| Service | What for | What they get | Where |
|---|---|---|---|
| Supabase Inc. | Database, sign-in, photo storage, sign-in emails, our server functions | Your account and synced journal | Data stored in Frankfurt, Germany (EU). Supabase is a US company. |
| Google LLC (Gemini API) | Reading photos of wine lists, bottles and labels | The photo | USA |
| OpenAI | Matching shop offers to a wine | Wine name, producer, vintage, country and shop offers. No personal data. | USA |
| Serper | Google Shopping and web search for prices | Wine name, producer, vintage, country. No personal data. | Not stated by Serper (no personal data is sent) |
| Resend (Plus Five Five, Inc.) | Sending sign-in emails and contact form messages | Your email address; for the contact form also your name and message | Sent from the EU (Ireland). Resend is a US company. |
| Microsoft (Outlook) | Our support inbox | Emails and contact form messages you send us | EU / USA |
| Apple | Sign in with Apple, App Store | Apple handles your Apple ID under its own privacy policy | USA / Ireland |
| Vercel Inc. | Hosting this website | Visitors' IP address and request data | USA / EU |
Where a provider outside the EU or EEA receives personal data, the transfer is protected by the EU-US Data Privacy Framework or by the EU Standard Contractual Clauses.
| Processing | Legal basis (GDPR) |
|---|---|
| Account, sign-in, journal sync, shared collections, reading wine lists, shop price checks | Art. 6(1)(b): needed to provide the features you use |
| Answering the contact form and emails | Art. 6(1)(b) or (f): answering your request |
| Daily limits, security logs, reports and blocking in shared collections | Art. 6(1)(f): our legitimate interest in a safe service that stays affordable |
| Keeping reports after an account is deleted | Art. 6(1)(f): handling reports about content |
Copies that other members already saved on their own devices, and exports you made, are outside our control.
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format (the in-app export does this). Write to support@santewine.app and we will answer within one month.
You can also complain to a data protection authority, for example the one where you live or the one responsible for us.
Santé is about wine and is meant for people of legal drinking age in their country. It is not directed at children, and we do not knowingly collect data from them.
If this policy changes, we update this page and the date at the top. If a change affects how existing data is used, we will tell you in the app.