Privacy policy

Last updated: 12 November 2026. Decantis is built to work without knowing who you are: the account is optional, and there is no advertising and no profiling.

Who is responsible

WeLove Studios, Lda., tax number (NIF) 513625623, Rua 9, n.º 465, 4500-378 Espinho, Portugal. Contact for anything concerning your data: hello@decantis.wine.

What the app collects and why

• Anonymous device identifier. A random code created at installation, not linked to your name, email or Apple ID. It is used to apply the daily identification limit and to group feedback.
• What you type and the label text. The wine name you type and the label text read on your own device are sent to identify the wine. We keep the identified wine in a wine database, so we can answer faster when someone looks for the same wine. When the camera reads a label, a print of the label crop is sent too: a list of numbers computed on your device, which cannot be turned back into the image and helps us recognise the same label next time.
• Label photos. When you photograph the label, the photo is sent, reduced in size, together with the text read from it, so the wine is identified more accurately. It is used only at that moment and is not stored by us. The app removes location and other metadata before sending.
• Feedback. When you answer "better", "same", "less fruit" or "wrong answer", we keep that answer with the wine and the rules version, to improve the recommendations. No personal data.
• Network address (IP). Used only for the daily limits against abuse: it is turned into a code that cannot be turned back into the address and is not linked to what you ask.
• Shared answers. When you share an answer, we keep the wine and the answer, with nothing about you, so the link works.
• Diagnostics and usage. When the app crashes or freezes, iOS gives it a technical report (the iPhone model, the iOS and app versions and the place in the code where it failed), which the app sends us so we can fix the error. Once a day, the app also sends how many times each feature was used that day (for example, how many labels were read), without the device identifier. None of this includes what you type or your wines.
• Shared table. When you share a table, we keep the wines, the times, the tastings, the 1 to 5 ratings given at the end and the short name each person chooses when joining, so everyone sees the same table. If a guest follows the table on the Lock Screen, we keep the code Apple provides to send them updates, only for as long as the table lasts.
• Shared cellar. When you share your cellar through a link, we keep the bottles you chose to show (name, vintage, stage, type, region, matching dishes and quantity) and the title, and for each person who opens the link, their short name and the bottles they pick. Prices, personal notes and where you bought each bottle are not in the link.
• Blind tasting. When you create or join a blind tasting, we keep the rules, each person's short name, the bottle each one brings, the ratings, the guesses and the votes. Each person's ratings and guesses are only shown to the others at the reveal. Anyone using the cellar or tasting links on the website gets a code in a cookie, which plays the role of the device identifier.
• Account (optional). The whole app works without an account. If you create one, we keep your name, the short name your friends see, your email (when you give it), your profile colour or photo, your language and the devices where you are signed in. Your password is stored in a form even we cannot read, and is checked against known leaks without sending it to anyone (only the first characters of a fingerprint of it). Your photo is cropped, resized and saved without location or other metadata, and only your friends, the people in your groups and people who already have your email in their contacts see it. We use your email only for confirmation codes, password recovery and to tell you your account was deleted.
• Syncing through your account (optional). Only if you turn it on, after the app asks. We keep in your account your cellar (with prices, ratings and comments), recent searches, tables, tastings, the diary and archived blind tastings, so you have them on every device where you sign in and don't lose them when you change phones. They are stored on our server, in the European Union, encrypted, and we don't use them for anything else or show them to anyone. You can stop, or delete everything from the server, in Account; what is on your device stays. If you don't turn it on, this data stays only on your device and in your iCloud.
• AI assistants. When an assistant (ChatGPT, Claude or another) uses the Decantis connector, we receive the name of the wine or dish it sends and the network the request comes from, turned into a code that cannot be traced back to the address, only for the daily limit. We do not receive the rest of the conversation or who is writing it. We keep the requested wines we don't know, linked to no one, to improve the database.
• Sign in with Apple or Google. We receive an identifier for your account and, if you share them, your name and email (with Apple you can hide your email). From Google we also receive your profile photo, which becomes your Decantis photo if you don't have one yet; you can change or remove it. We don't receive your password or anything else from your Apple or Google account.
• Friends and groups. We keep who is friends with whom, friend requests, blocks, groups and their members, and invite links. Others see your name, short name and photo or colour; never your email.
• Contacts. Only if you allow it, to find friends who already have an account. Your contacts never leave your device: the app computes a code from each email address with a key that changes every day, and sends only those codes. We compare them with those of accounts with a confirmed email and keep neither the codes nor your contacts.
• Decantis+. When you subscribe, the app sends us the purchases signed by Apple (the product, the start and end dates and whether there was a refund) and a random code it attaches to your purchases, so we know you subscribe, even without an account. If you sign in to an account, the subscription also applies on the devices where you are signed in. We don't receive your name, email or payment details: those stay with Apple. We also keep how many blind tastings you organised and whether you've used the free wine list.
• News notifications. If you turn them on, we keep the code Apple provides to send you notifications, with the language, the country set in the device's region setting and the app version. When you turn them off, the code is deleted.
• Email (website only). If you ask to be told about the launch, we keep your email for that purpose only. You can ask us to remove it at any time.

The app shows no advertising, does not track your activity in other apps or websites, and does not sell data.

Who processes data on our behalf

• Hosting: the Decantis server, in a data centre in Germany (European Union). Account emails are sent from this server.
• Sign in with Apple or Google: Apple and Google confirm who you are when you choose to sign in with them, under their own privacy policies.
• Wine identification: the text and the label photo are processed by the Anthropic API (United States), which provides the artificial intelligence model. Under Anthropic's commercial terms, data sent through the API is not used to train its models. Transfers outside the European Union follow the safeguards set out in the GDPR.

How long

Technical identification logs: 12 months. App error reports: 6 months. Daily usage totals: no limit, as they are only numbers, linked to no one. Daily limit codes: 2 days. Shared answers: as long as the link exists, or until you ask for removal. Shared tables: 7 days after they end, or 3 days without changes. Shared cellars: until the end of the period you chose (1 to 30 days), or sooner if you stop sharing. Blind tastings: 60 days after the last change. Decantis+: while the subscription lasts and up to 2 years after it ends. Notification code: until you turn news off, or 6 months without opening the app. Account: for as long as you keep it; when you delete it, your name, email, photo, sign-in methods, sessions, friends and groups are deleted at once, leaving only an empty row so your friends' past tastings can say "Former member". Sessions: 90 days without use. Email codes: 15 minutes. Email accounts never confirmed: 24 hours. Feedback: for as long as it helps improve the rules, with no personal data. Waiting list email: until launch or until you ask for removal. Data synced through your account: while syncing is on; it is deleted when you delete it in Account or delete the account, and a record of each thing you delete is kept for 90 days so your other devices delete it too. Data stored on your device (history): until you delete the app or use "Delete data" in settings.

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability. If you have an account, you can see and correct your data in the app, under Account, and delete the account there, under Account > Delete account. Without an account we don't know who you are: to exercise these rights over app data please include the anonymous identifier shown in Settings > About. Write to hello@decantis.wine. You may also lodge a complaint with the Portuguese data protection authority, CNPD (cnpd.pt), or the authority in your country.

Changes

If this policy changes, the date at the top is updated and, if the change is relevant, we let you know in the app.