Bottle&Ink

Privacy policy

Private by design.
Clear by default.

Effective 12 September 2026

This policy explains how Bottle&Ink processes personal data. The controller is Dynamx GmbH (FN 478649x), Münzfeld 3, 4810 Gschwandt, Austria. Contact us at support@bottleandink.com.

Data we process

  • Device account data: a random installation identifier, a one-way protected device secret, device platform, session identifiers, and account timestamps. No email or password is required for the in-app device account.
  • Your cellar content: wine records, quantities, favorites, personal ratings, tasting status, your verbatim notes, and chat messages. When you use assisted tasting-language features, their separate interpretation is also stored without replacing your original words.
  • Photos and source data: label photos you choose to upload, plus source links and factual wine metadata used to build a record.
  • Voice input: audio you choose to record for transcription and the resulting text. The recording is used only to transcribe your words into the selected field; the audio file is not saved in your journal or posted as a chat message.
  • Service data: request identifiers, quota counters, error details, and limited network/security data needed to operate and protect the service.

Why we use it

We process this data to create and sync your private wine journal, respond to your requests, identify and describe wines, maintain inventory, provide export and deletion, prevent abuse, troubleshoot failures, and comply with law. These purposes rely on performing the service you request, our legitimate interests in operating a secure service, and legal obligations where applicable. Photo and microphone access are optional and used only when you choose the corresponding feature.

Optional tasting locations

You can save a date and a freely chosen place name with each tasting. Only tapping Current location requests foreground location access and captures your location. If you save it, the journal stores coordinates, accuracy, capture time and the available locality. Your device's location and geocoding services may process coordinates to provide that locality. There is no background location tracking. You can deny access, enter a custom place or save without a location.

Saved dates and places are part of your private journal and are visible to members you explicitly invite. Suggestions for custom places are matched on your device using your previous entries; typing does not send a place-search request to an external service. You can remove a saved place by editing the tasting. Places are included in journal export and deleted with the wine or account. Disabling capture stops future captures; it does not remove places you have already saved.

Service providers and assisted research

Bottle&Ink runs on Cloudflare services, including Workers, D1, R2, Queues, and Durable Objects. Cloudflare processes data on our behalf to host, store, secure, and deliver the service. Private photo objects are stored under account-scoped keys and are never served without account authentication.

Expo’s EAS Update acts as a service provider and processes data on our behalf to deliver compatible app updates. When the app checks for or downloads JavaScript and asset updates, Expo may receive a separate random EAS client identifier for the app installation, device platform, app runtime version and release channel, update and asset requests, update adoption information, and limited fatal-error or crash information after a failed launch. This processing is used to deliver, secure, and monitor app updates, not for advertising or cross-app tracking.

When you use assisted identification, research, tasting-language, or voice transcription features, the wine text, conversation context, selected label images, or temporary voice recording needed for that request are sent directly from our backend to OpenAI. Voice recordings are discarded after the transcription request and are not stored in your journal; only the text placed into the selected field may be saved. We request that each API response is not stored as application state by OpenAI. OpenAI may still retain limited data for abuse monitoring under its applicable API policies unless stronger account controls apply. Public web sources consulted for a wine may receive ordinary connection data such as an IP address. We do not use your private journal content to train our own advertising model.

Sharing, tracking, and sales

Within the Bottle&Ink app, we do not sell personal data, show third-party advertising, or track you across other companies’ apps or websites. We disclose data only to processors needed to provide the service, when you direct us to, or where law requires it.

Website advertising measurement

On our advertising landing pages, we count page loads and requests to open the App Store or Google Play. Our own database keeps only daily totals by campaign, language, store and button position. It does not keep visitor identifiers, IP addresses, full referrers, ad-click identifiers or your journal content for these counters. These aggregate measurements support our legitimate interest in understanding whether our advertising is useful. Cloudflare processes the network information needed to serve and protect the website.

If you choose to allow ad measurement, we also load Google's advertising tag to measure store-button clicks attributed to an ad. Google may receive your IP address, browser and page information, ad-click information, and the store-click event, and may set advertising measurement cookies. We request a 90-day lifetime for our Google measurement cookies. This optional processing relies on your consent. We do not enable personalized advertising, remarketing, or enhanced conversions using contact details. We do not load the Google tag before consent or if you decline. A store-button click is not an app installation.

We remember your consent choice in your browser for 90 days so that we can respect it. You can change or withdraw it using Ad measurement choices on the advertising landing page. Withdrawing consent stops future Google measurement on that page; it does not undo processing already performed with your consent. Google explains its processing and international transfers in its privacy policy.

Our store links contain a shared campaign code, not a visitor identifier, so Apple or Google can report campaign downloads under their own reporting rules. These codes do not give us a link to your private in-app account. Store and Google reports may be delayed, aggregated, consent-limited, or withheld at low volumes.

Storage, transfers, and retention

Your account content is kept until you delete the account. Sessions expire, while device and account records remain so the app can remember you. Operational and security records are kept only as long as reasonably necessary for security, reliability, and legal obligations. Cloudflare’s private object storage is configured for its EU jurisdiction. Some processors may handle data outside the EEA under applicable transfer safeguards.

To maintain app reliability, we process account-linked technical error details and app/device information under our legitimate interests in operating the service. Reports exclude journal content and credentials. Pending reports expire on your device after 7 days; received reports are kept for 30 days and removed by daily cleanup.

Your choices and rights

You can export a machine-readable copy of your cellar in the app under Settings → Export cellar. You can permanently delete the account, wine records, messages, and private uploads under Settings → Delete account. If the app is no longer installed, use our external deletion request page.

Depending on applicable law, you may also request access, correction, restriction, objection, portability, or erasure, and you may complain to the Austrian Data Protection Authority. Email support@bottleandink.com so we can help verify and fulfil the request.

Children and alcohol-related content

Bottle&Ink is intended for adults of legal drinking age and is not directed to children. It is a journaling tool; it does not sell alcohol.

Changes

We may update this policy as the service changes. The effective date above identifies the current version. Material changes will be communicated in the app or on this page where appropriate.