cave.Privacy Policy
Cave is a place to keep track of your wine and share it with friends. This page explains what we collect, who can see it, which companies help us run Cave, and how to delete everything. In short: we don't sell your data, we don't run ads, and your cellar is visible only to people you accept as friends.
What we collect
- Account details: your email address, password (stored only as a secure hash), first and last name, username, display name, birthday and an optional profile photo.
- What you add to Cave: bottles in your cellar, wines you've opened (Uncorked), your wishlist, ratings, tasting notes, flavor profiles, prices, winery visits (including any photos attached to them), group tastings, comments, likes and conversations with the Somm.
- Photos you scan: pictures of wine labels and restaurant wine lists. We send them to our AI provider to read them. We don't keep the photo itself. We store what was read from a label so the same photo doesn't need to be processed twice.
- Friends and activity: who you're friends with, friend requests, people you tag in tastings and visits, and the notifications that go with them.
- Usage of AI features: a record of when you use a scan or the Somm, so we can apply daily limits. It doesn't include the content.
- Technical data: our hosting and database providers keep standard logs, such as IP address, browser type and request times, for security and reliability.
We don't use advertising or analytics trackers. Cave uses your browser's local storage to keep you signed in and to remember an invite link while you finish signing up.
Who can see what
| Information | Who can see it |
|---|---|
| Username, display name, profile photo | Any signed-in Cave user. This is how people find and add you. |
| Cellar, Uncorked, wishlist, winery visits, Passport, activity and palate | You and people you've accepted as friends |
| Email, first and last name, birthday | Only you. Other users can find you by searching your first or last name, but your name is never shown to them. |
| Somm conversations | Only you |
| Group tastings | People in that tasting |
Friends can use the Somm's Gift mode, which reads your palate, cellar and wishlist to suggest a bottle for you. Removing someone as a friend ends their access.
Companies that help run Cave
We share data with these service providers only so they can run Cave for us:
- Supabase: database, sign-in and account emails.
- Netlify: hosting the website and app.
- Anthropic: the AI behind label scanning, the wine list reader and the Somm. When you use these features we send the photo or your question, along with the context the feature needs, such as your cellar, recent tastings and palate (or a friend's, in Gift mode). Under Anthropic's commercial terms, this data isn't used to train their models.
- Google: the winery search when you log a visit. What you type is sent to Google Places.
- Resend: delivering emails, such as account confirmations and password resets.
We don't sell or rent your personal information. We don't share it for advertising. We'll disclose information only if the law requires it, or if we need to protect people's safety or Cave itself.
How long we keep it
We keep your information while your account is open. When you delete your account, your profile, cellar, Uncorked, wishlist, visits, Somm chats, friendships and comments are erased immediately. Two kinds of shared records are handled differently. If you shared a bottle with a friend, their own Uncorked copy stays with them. If you added a wine to someone else's group tasting, it stays in their tasting. Provider logs expire on those providers' own schedules.
Your choices and rights
- See and edit: everything you've added is in the app, and you can change your profile at any time.
- Delete: Profile → Delete my account erases your account.
- Get a copy or ask a question: email hello@caveapp.io. Depending on where you live, you may have more rights over your data, and we'll honor any request we're legally required to.
Age requirement
Cave is only for people 21 and older. We ask for your birthday at sign-up and don't allow younger users. If we learn that an account belongs to someone under 21, we'll delete it.
Security
Data is encrypted in transit. Database rules limit each account to the information it's allowed to see. No system is perfectly secure. If something goes wrong that affects your information, we'll tell you.
Where data is processed
Cave is run from the United States. Our providers may process data in the US and in other countries where they operate.
Changes
If we change this policy in a way that matters, we'll update the date above and let you know in the app before the change takes effect.
Contact
Questions or requests: hello@caveapp.io