Privacy Policy
Last updated: August 2026
Your privacy is important to us. This policy explains how we collect, use, and protect your data.
1. Information We Collect
We collect the following types of information: • Account Information: Email address, password (hashed), and display name. • Profile Data: Date of birth (for age verification), country, beverage preferences, and taste profile. • User Content: Reviews, ratings, photos, tasting notes, and cellar items you create. • Usage Data: Interactions within the App, search queries, and feature usage patterns. • Device Information: Device type, operating system version, and unique device identifiers. • Photos: Images you upload (drink labels, profile pictures, review photos).
2. How We Use Your Information
We use your information to: • Provide personalized beverage recommendations based on your taste profile • Display your cellar, wishlist, and reviews • Verify your age for legal compliance • Improve our recommendation algorithms and App functionality • Send service-related communications (account verification, security alerts) • Process content reports and enforce our Terms of Service • Comply with legal obligations Some of this processing is automated: identifying a beverage from a photo, generating recommendations from your taste profile, and screening reviews before they are published are all performed by automated systems rather than a person. We do not sell your personal data to third parties.
3. Data Sharing and Disclosure
We may share your information with: • AI providers: when you scan a label, the photo is sent to a large language model to identify the bottle. The same providers process your taste preferences to build recommendations, the text you type into search, and the text and display name of a review before it is published. BacoInVeritas runs on Base44, which routes these calls to OpenAI and Anthropic. Both operate in the United States. • Open Food Facts: we send the barcode of a bottle you scan, and sometimes its brand and name as search terms, to this open product database. We send nothing that identifies you. • TheCocktailDB: cocktail recipe lookups. No personal data is sent. • Base44 (a Wix company): hosting, storage and authentication. Base44 in turn relies on MongoDB for data storage, Supabase for media hosting — this is where photos you upload are kept — Render for servers, Google Cloud for analytics, SendGrid for email and Datadog for logging. All of these operate in the United States; Wix.com Ltd. operates from Israel, which means your data may be transferred outside your country. We do not sell your personal data and we do not share it with advertisers. The App contains no advertising and no third-party analytics or tracking SDKs.
4. Data Retention and Deletion
Your data is retained for as long as your account is active. When you delete your account: • All cellar items, reviews, wishlist, and preferences are permanently deleted • Deleted items are temporarily stored in "Recently Deleted" for 30 days, allowing you to restore them if needed • After 30 days, all data is permanently removed and cannot be recovered • Account verification data (email, hashed password) is removed immediately You can request data deletion at any time from Settings > Delete Account.
5. Data Security
We implement industry-standard security measures: • All data is encrypted at rest and in transit (HTTPS/TLS) • Passwords are hashed using industry-standard algorithms (never stored in plain text) • Row-level security ensures users can only access and modify their own data • Authentication sessions are protected and expire automatically While we strive to protect your data, no method of transmission over the Internet is 100% secure.
6. Your Privacy Rights
You have the right to: • Access: View all data associated with your account • Modify: Update your profile, preferences, and content at any time • Delete: Permanently delete your account and all data from Settings • Export: Request a copy of your data through the in-app Contact Us page (Settings > Help & Support > Contact Us) • Block Users: Prevent specific users from interacting with your content • Report Content: Flag inappropriate content for review To exercise any of these rights, use the in-app settings or the in-app Contact Us page.
7. Children's Privacy
BacoInVeritas is not intended for anyone under the legal drinking age (18 or 21 depending on jurisdiction). We require date of birth verification upon first launch. If we discover that we have collected personal information from someone under the legal drinking age, we will immediately delete that information and terminate the account. To report underage users, use the in-app Report feature or the in-app Contact Us page.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be communicated through the App. Continued use of the App after changes constitutes acceptance of the updated policy. The "Last Updated" date at the top of this page indicates when the policy was last revised.
9. Affiliate Links and External Stores
The App links out to independent, external stores to help you find a beverage. BacoInVeritas does not sell alcohol directly and does not process any store payments. When you buy through one of these links, we may receive an affiliate commission — this does not affect the price you pay. We are not responsible for the privacy practices, prices, or availability of these external stores; please review their own privacy policies before making a purchase.
10. Contact Us
If you have questions or concerns about this Privacy Policy or your data, contact us through the in-app Contact Us page (Settings > Help & Support > Contact Us). © 2026 BacoInVeritas. All rights reserved.
