Short version. Sip Vino has two halves and they are treated differently. Your cellar — the bottles you own, what you paid for them and your tasting notes — is stored on your device and is never uploaded to us. The drink-tracking half uses an account and our servers: it stores the drinks you log, the photos you scan, and your profile. We do not sell your data and we do not share it with advertisers. Sip Vino does not use Apple Health. You can delete your account and your data at any time.
1. Who we are
Sip Vino is operated by Delta Metrics LLC ("Delta Metrics", "we", "us"). The data controller for the purposes of the GDPR and similar laws is Delta Metrics LLC, Los Angeles, California, USA. You can reach us at [email protected].
This policy covers Sip Vino. Our other apps collect different data and have their own policies: Sip and Sip Water. Sip Vino shares a single Delta Metrics account with Sip — one sign-in covers both apps, and deleting that account deletes the server-side data held for both.
2. Your cellar stays on your device
The cellar feature is deliberately local-first. The following is written to storage on your phone and is not transmitted to us, not synced to a server, and not readable by us:
- Bottles — producer, wine name, vintage, varietal, region, storage location, quantity and bottle format.
- Money — the price you paid per bottle, the purchase date, and any current value you enter yourself.
- Drink windows — the drink-from and drink-by years you set, where you set them.
- Tasting notes — your star rating, the fruit, acidity, tannin and body values, your written comment, and the date you drank the bottle.
Two consequences you should know about. First, we cannot see your cellar, so we cannot export it, restore it, or hand it to anyone who asks us for it. Second, there is currently no cellar sync and no server-side backup: the data travels only in your own encrypted device backups, and if you delete the app without one, it is gone.
A handful of other features also keep their data locally in the same way, including your personal bar, your hangover entries and your appearance settings.
3. What we collect for the rest of the app
Information you give us
- Account information: phone number or email address, password (hashed), display name, username.
- Profile information you choose to add: full name, profile photo, weight, gender (used to calibrate BAC estimates), height, city, bio.
- Drinks you log: name, type, serving size, ABV, calories, caffeine, hydration, timestamp, optional photo, optional location.
- User content: captions, comments, posts, ratings, messages, friend relationships.
- Subscription state: which Apple in-app product you purchased and whether it is active. Apple processes the payment — we never see your card number.
- Support correspondence: emails and messages you send us.
Information collected automatically
- Device & usage data: device type, OS version, app version, crash reports, and product analytics events.
- IP address, captured by our hosting provider for security and abuse prevention.
- Push notification token, if you grant push permission.
- Location, only if you grant the permission. It is used to find nearby venues and to attach a place to a drink you save. Be aware that when you have granted the permission and the device has a recent location, the app may send that location to our backend when it opens, as part of the nearby-venue feature. Revoking the permission in iOS Settings stops this.
The App also asks for camera access (to photograph drinks) and photo library access (to pick and save drink photos). Both are optional and requested at the moment you use the feature.
4. Why we collect it
- To run the App: authenticate you, save your drinks, compute BAC and calorie totals, sync across your devices.
- To make it better: detect bugs, prioritise features, understand which screens are useful.
- To keep it safe: detect abuse, fraud and violations of our Terms of Use.
- To communicate with you: support replies, security alerts, occasional product announcements (you can opt out anytime).
- To meet our legal obligations.
5. AI drink recognition
When you photograph a drink, the image is sent to our backend (Google Cloud Run, US-West-2) and from there to a third-party AI model (currently OpenAI). The model returns its best guess at the drink's identity and basic facts — name, ABV, serving size, calories. The image and the response are stored on your account and shown only to you, unless you choose to share the drink publicly. We do not use your photos to train AI models.
This feature identifies drinks in general. It is not a wine-label reader, and the cellar does not use it — bottles are added to your cellar by typing, and nothing you enter there is sent to an AI model or to any server.
6. Apple Health
Sip Vino does not use Apple Health. It requests no HealthKit permissions, reads nothing from the Health app and writes nothing to it. If you are looking for the app in this family that does, it is Sip Water.
7. Who we share data with
We share data only with a short list of operational service providers, and only as needed for them to perform their service for us:
- Apple — App Store distribution, push notifications, in-app purchases.
- Google Firebase — authentication, Firestore database, Cloud Storage for photos, push delivery.
- Firebase Crashlytics, Google Analytics for Firebase and Firebase Performance Monitoring — crash diagnostics, app usage events and performance traces. These are included in the app's Firebase integration and collect automatically.
- Google Cloud Run — backend API hosting (region us-west2).
- OpenAI — AI drink-identification model (image and text inputs, no training).
- PostHog — product analytics. Events are associated with your account, and we send your email address, username, display name and account type so support can look up your account.
- Google Places — nearby venue lookup, called from our backend rather than from your device.
We may also disclose information if required by law (for example, a valid subpoena), to defend our legal rights, or to protect users from imminent harm. If we ever sell or merge with another company, your data may transfer with that transaction; we will give you notice and a meaningful chance to delete first.
We do not sell your data and we do not share it with advertisers. We do not run third-party advertising trackers inside the App. None of the providers above receive your cellar, because your cellar never leaves your device.
8. How long we keep it
We keep your account and drink data for as long as your account is active. If you delete your account we delete your account record, your drinks and your user content within 30 days. Backups containing your data are purged on a rolling 90-day cycle. Aggregate, fully anonymised statistics may be retained indefinitely. Your cellar is not subject to any of this, because we never hold it — it is deleted when you delete the app from your device.
9. Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct data that is wrong.
- Delete your account and your data. Instructions are on our account deletion page. Because Sip and Sip Vino share an account, deletion covers both.
- Port your data — email us and we will send you an export.
- Object to certain processing, or restrict it.
- Withdraw consent at any time (for example, revoke location, camera or photo permissions in iOS Settings).
- Lodge a complaint with your local data protection authority.
Email [email protected] to exercise any of these rights. We respond within 30 days. Note that a data access or portability request can only cover the data we actually hold — it cannot include your cellar, which only you have.
For California residents (CCPA / CPRA)
You have the right to know what personal information we collect about you, the right to delete that information, the right to correct inaccuracies, and the right not to be discriminated against for exercising these rights. We do not "sell" or "share" your personal information for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA.
For EU/EEA/UK residents (GDPR)
The legal bases for our processing are: (a) performance of a contract with you (to run the App), (b) legitimate interests (to keep the service safe, prevent fraud and improve the product), (c) consent (for optional things like location, camera and push notifications), and (d) legal obligation. International transfers of your data to the United States are made under Standard Contractual Clauses where required.
10. Children
Sip Vino is not directed to children. We do not knowingly collect personal information from anyone under 21 (or the legal drinking age in your jurisdiction, whichever is higher). If you believe a child has provided us with information, please contact us and we will delete it.
11. Security
We protect your information using industry-standard practices: encryption in transit (HTTPS/TLS), encryption at rest on our database providers, role-based access control on internal tools, two-factor authentication on engineer accounts, and regular review of third-party security disclosures. Your cellar's security is the security of your own device — iOS file protection plus whatever passcode or biometric lock you use. No system is perfectly secure; if we learn of a breach that affects you we will notify you and the relevant authorities as required by law.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will update the "Effective" date at the top and, where appropriate, give you notice in the App or by email. In particular, if a future version adds cellar sync or backup — which would mean your bottles and notes reaching our servers — we will say so here before that version ships. Continued use of the App after changes take effect means you accept them.
13. Contact
Questions, requests or concerns? Email [email protected].
Delta Metrics LLC · Los Angeles, California, USA