Privacy Policy

1. Who is responsible

The independent developer of Cellar ("Cellar", "we", "us") is responsible for the personal data described in this policy. Contact: devjakobsen@gmail.com.

This policy applies to the Cellar mobile app and this website.

2. Information kept on your device

Cellar is local-first and does not require an account. Wine details, label text, photos, notes, ratings, prices, drinking history, racks and recent searches are stored locally on your device. On-device label recognition uses Apple Vision; Cellar does not upload label photos for recognition.

When you choose Export, Cellar creates a backup containing your cellar data and photos. You decide where that file is stored or shared. Importing a backup replaces the cellar on that device.

3. Optional Firebase diagnostics

Analytics and crash reporting are on by default so the app can be improved from how it is actually used. You can turn anonymous diagnostics off at any time under Settings → Privacy → Share anonymous diagnostics, and turning them off stops all further collection.

Firebase Analytics

If you opt in, Cellar records generic app interactions such as screen and navigation events, button or control identifiers, page changes, zoom and other gesture types, app lifecycle state, subscription status, and anonymous totals for racks, wines and bottles. Firebase may also process app version, device and operating-system information, approximate geography, session information and an app-installation identifier.

Cellar never adds wine names, producer names, notes, search text, photo captions, photos or file paths to Analytics events. Cellar has no advertising, does not request the Apple advertising identifier, and disables advertising-personalisation signals.

Firebase Crashlytics

If you opt in, Crashlytics may receive crash stack traces, technical error details, app version, operating system, device model and state, installation or session identifiers, and generic in-app action breadcrumbs leading up to a crash. Those breadcrumbs follow the same content restrictions described above.

Turning diagnostics off stops new collection by the app and removes unsent crash reports waiting on the device. Data already received may remain until the retention periods below expire.

4. Purchases and subscriptions

Cellar Pro purchases are processed by Apple through the App Store. Apple handles your Apple Account and payment details. Cellar receives product, transaction, price, currency and entitlement status needed to complete the purchase, unlock Pro, restore access and prevent duplicate subscription notifications. Cellar does not receive your card or bank details. See Apple’s Privacy Policy.

5. Feedback, sharing and support

When you send a developer message, answer an in-app feedback or sharing prompt, or complete a new subscription, Cellar sends the answer or message to a developer-controlled, Slack-compatible HTTPS endpoint. It includes app version, bundle identifier, country/locale, operating system and device model, approximate collection totals, subscription status and the time sent. A new-subscription event also includes the city from the device’s configured time zone. Cellar does not request precise location or GPS access for this. It does not include bottle names, notes, searches or photos.

When you use “Send to a friend,” iOS opens its share sheet. You choose the recipient and service; their handling of the shared App Store link is governed by their own policies.

6. This website

This website is served through Firebase Hosting. Google may process request information such as IP address, browser/device information, requested URL and timestamps to deliver and protect the service.

Google Analytics 4 is optional and is not loaded until you choose Accept analytics. If you accept, the website records page views and outbound App Store clicks, including the page URL and title, browser and device information, language, approximate geography and the campaign code attached to the App Store link. It does not receive wine names, notes, searches, photos or any other cellar contents.

Your analytics choice is stored locally in this browser. You can change it at any time through Analytics settings in the footer. Declining or withdrawing consent prevents further website analytics and removes the website’s Google Analytics cookies from this browser. The website has no advertising and disables Google advertising signals and advertising personalisation.

7. Why information is processed

• Your consent for Firebase Analytics and Crashlytics in the app, and for Google Analytics 4 on the website. You may withdraw app consent in Settings and website consent through Analytics settings in the footer.
• Performing your request or contract to process App Store entitlements, exports/imports, feedback and support messages.
• Legitimate interests in securely serving this website, preventing abuse and responding to support, where those interests do not override your rights.

Where local law uses different legal grounds, we process information only as permitted by that law.

8. Service providers and transfers

Information may be processed by Google Firebase for opted-in diagnostics, optional website analytics and website hosting, by Apple for App Store purchases and platform services, and by the developer’s feedback endpoint provider when you send feedback or a related event. We do not sell personal data and do not share it for third-party advertising.

These providers may process data in countries outside your own. Where required, transfers use recognised safeguards such as adequacy decisions or standard contractual clauses. See Firebase Privacy and Security for more about Google’s practices.

9. Retention

• Local cellar data remains until you delete it, replace it with an import, or remove the app. Copies you export remain wherever you placed them.
• Firebase and website Analytics event-level data is configured for a two-month retention period; aggregated reporting may remain longer.
• Firebase Crashlytics crash data is retained for 90 days before its deletion process begins.
• Feedback and support records are normally kept for up to 12 months, or longer when needed to handle an open request, protect the service or comply with law.
• Firebase Hosting request data is retained by Google for a limited operational period, which may be several months.

10. Your choices and rights

You can disable app diagnostics in Settings, change website analytics consent through Analytics settings in the footer, delete individual cellar items, delete the app’s local data by removing the app, and control exported backups through the service where you stored them.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, and withdraw consent. Email devjakobsen@gmail.com to make a request. We may need reasonable information to identify the relevant diagnostics or support record. You may also complain to your local data-protection authority.

11. Children

Cellar is not directed to children under 13, or under the higher minimum age required for consent to digital services where they live. We do not knowingly collect personal data from children.

12. Security and changes

We use reasonable technical and organisational safeguards, including local storage, HTTPS for network requests and limited diagnostic fields. No system can be guaranteed completely secure.

We may update this policy when Cellar or legal requirements change. The effective date above will change, and material changes will be communicated in the app or by another appropriate method.

13. Contact

Questions or privacy requests: devjakobsen@gmail.com.