Privacy
Privacy Policy
Effective 28 September 2026 · Version 1.0
Caveau has no account system and no server of its own. Your bottles, tasting notes, photographs and
finished editions stay in the app's private storage on this iPhone. Nothing you record is uploaded,
and nothing is shared with an advertising or analytics company.
01The short version
- We do not ask you to create an account. There is no sign-in.
- We do not run a backend that receives your records. There is nothing to send them to.
- We do not include third-party analytics, advertising or attribution SDKs.
- We do not sell or share personal data, because we never receive any.
02What Caveau stores on your device
Everything below is written to Caveau's own container on this iPhone and is removed when you delete the app or use Delete Account:
- Bottle records: name, region, quantity, storage location, status, the amount and currency you paid, drinking window dates, and your favorite / buy-again flags.
- Tasting notes: the calendar date, time zone, your text, your optional score out of 100, and whether the note is still a draft.
- Photographs you take or choose, copied into the app's private folder.
- Finished edition PDFs, and the frozen snapshot of the records each one was built from.
- Folio balance and the append-only credit ledger, plus StoreKit transaction identifiers used to prevent the same purchase being granted twice.
- Light preferences: whether onboarding is finished, your keeper name, your profile picture and app settings.
03Camera
Caveau asks for camera access only when you tap Take Label Photo, so you can
photograph a bottle or its label. The photo is written into the app's private storage. Caveau does
not read the label, does not recognise the wine and does not send the image anywhere.
04Photo library
Caveau asks for photo library access only when you tap Choose Photo, so you can
pick an image you already have. The image you pick is copied into the app's private storage. Caveau
does not scan or index the rest of your library, and does not upload any image.
05Microphone and speech recognition
Speaking a tasting note is optional. When you tap Speak Tasting Note, Caveau asks
for microphone and speech recognition access and transcribes your voice entirely on this
device — on-device recognition is required, and the audio is never sent to a server.
The transcript is shown to you as a draft first. Nothing is written into your note until you tap
Use This Text. Audio recordings are not saved.
06Notifications
Caveau may ask for notification permission so the app can remind you about your own cellar. If you
decline, the app works exactly the same. Notifications are not used for advertising, and we do not
operate a messaging service that profiles you.
07Tracking permission
Caveau shows the standard iOS tracking prompt so that you are the one who decides whether the
advertising identifier may ever be used. Caveau ships without advertising SDKs and without
third-party analytics, so in this version there is nothing collecting that identifier
either way.
08Purchases
In-app purchases are handled by Apple. To create your purchase, Apple processes
the payment; Caveau only receives the transaction result. Caveau never sees your name, card number
or Apple Account details. The transaction identifier and the resulting Folio balance are stored on
this iPhone so that a purchase is never granted twice.
09Sharing and exporting
Sharing is always started by you. When you use Share PDF or prepare the plain data export,
iOS asks which app should receive the file, and that app's own privacy policy applies from then on.
Caveau does not send the file anywhere itself.
10Children
Caveau is intended for adults recording a personal wine collection. It is not directed at children,
and it does not knowingly collect personal information from anyone — it has no way to collect it.
11Retention and deletion
Your records stay on this iPhone until you remove them. Delete Account in
My Cellar erases the database, the app's photo and edition folders, your profile picture,
your preferences and any remaining Folio balance in one step. Deleting the app removes the whole
container as well. Neither action can be undone, and neither action can be performed on our side,
because we hold no copy.
12Changes to this policy
If a future version of Caveau changes what it stores or adds a capability that needs network
access, this page will be updated before that version ships, and the effective date above will
change with it.
13Questions
For anything about privacy in Caveau, use the App Support link on the Caveau App
Store product page.