Kav privacy policy, wine cellar app

Last updated: 7 September 2026

The short version: your cellar lives on your iPhone. With an account, it is copied to a French server. Your bottle photographs go to providers to be read and retouched. There is no advertising, no tracker, no resale.

The essentials

With no account, Kav works and nothing leaves your iPhone.
With an account, your cellar syncs to a server located in Paris.
No analytics tooling ships inside Kav: no tracker, no usage statistics, no advertising identifier.
Peak alerts are entirely local: your iPhone schedules them, and no notification token is sent to me.
Your data is never sold, rented or traded.
You delete your account yourself, from inside the app.

Who is responsible

Teddy Verneuil, sole trader
14 bis rue Magellan, 56860 Séné, France
SIRET 792 687 576 00043
Contact: [email protected]

Data controller within the meaning of the General Data Protection Regulation (GDPR).

What stays on your iPhone

Kav keeps its database on the device. It holds your cellars, your bays and bins, your bottles and their quantities, your vintages, your personal notes, your purchase prices and dates, the history of what you have drunk, the images of your bottles, and a local diagnostic log of at most five hundred events, which you can read from Settings. That log is never sent to me.

What goes to a server

If you have an account, the following syncs: your account identifier and email address, your cellars, bays and bins, your bottle lots and the movements attached to them (adding, tasting, transferring), your vintages, and the technical record of those changes so two devices stay in agreement.

Alongside that sit usage counters, how many scans, studio photos and market prices you have used, needed to apply your plan's caps, and a log of calls to providers, which exists to watch spending.

Your photographs, in detail

This is the most sensitive processing, so it gets the most detail.

When you photograph a label, the photo is sent to an artificial intelligence service that reads it to extract the producer, the wine name, the vintage and the appellation. It is then stored on the server, and sent to a second service that produces a studio photo from it. Finally the original photo and the produced image are compared by a third call, to check they show the same bottle.

One important point about storage. These images sit in a storage space whose addresses are publicly reachable by anyone who knows them. Those addresses contain random identifiers and are neither listable nor guessable in practice, but they are not password protected: that is what lets the checking services fetch both images to compare them. Keep it in mind if your photo shows anything other than the bottle, a hand, a room, a document.

Your original photo is visible only to you and disappears with your account. The studio photo, on the other hand, may join the shared catalogue and remain there after your account is deleted, detached from you. Write to me if you want it taken down.

What Kav does not do

No advertising. No tracker and no analytics SDK, there is none in the app, which is not an intention but a verifiable fact. No resale or sharing for commercial purposes. No profiling. No automated decision producing legal effects concerning you. No geolocation. No access to your contacts. Access to the camera and photo library serves only what you use it for.

The services called

What for	Who	What they receive
Database, account, storage	Supabase Inc.	Everything described above
Label reading and image checking	OpenRouter, Inc. (United States)	The bottle photograph, without your identity
Studio photo	kie.ai	The bottle photograph, without your identity
Wine record, market prices, critic scores	Wine Labs	The name of the wine searched for, never your identity or your cellar
Sign-in, purchases	Apple	Per Apple's own terms. I see neither your payment method nor your real Apple ID

None of these services receives your cellar, your personal notes or your purchase prices.

Why, and on what basis

Performance of the contract (art. 6.1.b): the account, syncing, label recognition, studio photos, market prices and scores, the subscription, and the usage counters that apply the caps.
Legitimate interest (art. 6.1.f): the log of calls to providers, which makes it possible to watch spending and prevent abuse.
Legal obligation (art. 6.1.c): keeping the records attached to subscriptions, which Apple manages.

Peak alerts rely on the notification permission you grant iOS, revocable at any time in your iPhone settings. They involve no transmission at all.

For how long

Your account and your cellar: for as long as the account exists.
On account deletion: the account, the cellar and your original photographs are erased immediately. The log of provider calls is detached from you and kept without an identifier, for cost tracking.
Studio photos already added to the shared catalogue: kept, with no link to you, for as long as the service exists.
Wine records you created: kept in the shared catalogue, with no link to you. They serve to recognise the same bottle for someone else.
What is on your iPhone: disappears when you uninstall the app.

Where it is hosted

The database, authentication and storage are with Supabase Inc., Paris region (France, European Union). The artificial intelligence services called to read and retouch photos are located outside the European Union, notably in the United States: those transfers are covered by the European Commission's standard contractual clauses. Distribution of the app and payments fall to Apple Distribution International Ltd., Cork, Ireland.

Your rights

You have a right of access, rectification, erasure, restriction, objection and portability over your data.

Erasure: Settings, then Delete my account. Immediate and permanent.
Portability: Settings, then Export to CSV, which contains your whole cellar.
Rectification: you edit your records directly in the app.
Other rights: write to [email protected], I answer within thirty days.

You may also lodge a complaint with the French data protection authority, the CNIL.

Security

Everything travels over HTTPS. The server applies row-level access rules: your cellar is readable only by you. Session tokens sit in the iOS keychain. Provider keys live only on the server, the app does not know them and never calls those providers directly. In the event of a data breach presenting a risk to your rights, I notify the CNIL within seventy-two hours and inform you if the risk is high.

An honest caveat: as explained above, images placed in the storage space are reachable by anyone who knows their address.

Children

Kav is aimed at an adult audience and is not intended for under-15s. I do not knowingly collect a child's data. If it were reported to me, the account would be deleted.

Changes

This policy may change. The date at the top of the page marks the latest version, and any notable change is flagged inside the app.