Privacy Policy

Last updated 3 September 2026

Your wine list never leaves your device. Not the names, not the producers, not the vintages, not your tasting notes. There is no account, no sign-in, and no server that holds your cellar.

What stays on your device

Everything you enter in the app is stored only in the app's own storage on your phone:

Wine names, producers, vintages, colours, quantities and ratings
Your tasting notes
Any file you import, and any file you export

We cannot read this data. It is not uploaded, backed up to us, or shared with anyone. When you export a CSV file, that file goes wherever you choose to send it, and that is entirely your decision.

What we do collect

To understand which parts of the app people use, we record anonymous usage events. These contain no wine data and nothing that identifies you.

Data	Example	Why
Anonymous identifier	A random string the app creates on first launch, such as `anon-k3f9q2`	So repeat use is not counted as a new person
Feature events	"stats opened", "import applied, 30 items", "bottle saved, colour red"	To see which features matter
Platform	iOS	Basic technical context

The identifier is generated at random inside the app. It is not your Apple ID, not your device's advertising identifier, and not linked to your name, email or phone number. Deleting the app deletes it.

These events are processed by PostHog, on servers in the European Union. See PostHog's privacy policy.

Purchases

My Cellar is a one-time purchase. The payment itself is handled entirely by Apple; we never see your payment details. To recognise that you have paid, and to restore your purchase on a new device, we use RevenueCat, which receives an anonymous purchase identifier and the receipt Apple issues. See RevenueCat's privacy policy.

What we never do

No advertising, and no advertising identifiers
No tracking across other apps or websites
No selling or sharing of data with data brokers
No account, so nothing to leak
No access to your contacts, photos, location or microphone

Children

The app is not directed at children and does not knowingly collect data from them.

Your rights

Because the app holds no account and no personal profile, there is nothing on our side to look up, correct or hand over. To erase the anonymous usage identifier, delete the app. If you would like the usage events associated with a specific identifier removed, write to us with that identifier and we will delete them.

Changes

If this policy changes, the date at the top of this page changes with it.

Contact

Questions about privacy: support@shoked.app