Decant Privacy Policy

Effective：2026-07-11

Decant is a wine-tasting journal and wine-education app. This policy explains what we collect, why, who we share it with, and how you can delete all of it at any time. We collect only what the service needs, and we never use your data for cross-app or cross-site advertising tracking.

1. What we collect

The list below covers every category of data Decant collects. “Linked to you” means the data is associated with your account identity (our user ID). We collect only what the service needs.

  • Email address — for passwordless one-time-code sign-in; provided by Apple when you use Sign in with Apple (may be a private relay address). Purpose: account & auth. Linked to you: Yes.
  • Name — your display name, if you choose to share it via Sign in with Apple; may be empty. Purpose: personalization. Linked to you: Yes.
  • User identifier — a unique account identifier; with Sign in with Apple, an Apple authorization code is kept in the device secure store to revoke access when you delete your account. Purpose: auth, sign-in, deletion. Linked to you: Yes.
  • Purchase history — subscription state (whether you bought / renewed / cancelled premium, trial start). Payment itself is handled by Apple; we never see card data. Purpose: entitlement. Linked to you: Yes.
  • Tasting content — your typed tasting impressions and notes, 0–5 ratings, flavor tags, and your cellar & tasting log (including custom-drink fields such as name/region/ABV). Purpose: core features & personalization. Linked to you: Yes.
  • Age & region attestation — your self-attested “of legal drinking age” confirmation, chosen region (TW/HK/US), and a timestamp. No date of birth is collected. Region derives from device locale, not GPS. Purpose: legal age gate. Linked to you: Yes.
  • Usage data — in-app interaction events (e.g. app open, logging a tasting, viewing the paywall, starting a subscription, lesson/quiz progress) and their properties. Purpose: analytics. Linked to you: Yes.
  • Diagnostics — crash reports and performance traces to keep the app stable. Not tied to your personal identity. Purpose: stability. Linked to you: No.

2. What we do not collect

We do not collect: date of birth, precise or coarse GPS location, contacts, health/fitness data, advertising identifiers (IDFA) or any ad SDK, payment-card data, passwords, phone number, browsing history, or financial-account information.

3. No advertising tracking

Decant does not track you across apps or websites owned by other companies, and uses no advertising identifier (IDFA), ad networks, or attribution SDKs. As a result the app shows no App Tracking Transparency (ATT) prompt. Every item above is declared “Not used for Tracking” in Apple’s App Privacy label.

4. Tasting-note tidying & palate read

When you choose to “tidy this into a tasting note” or request a deeper palate read, the tasting text you typed (with the related rating and drink details) is sent to our processing provider Anthropic to organize it into a structured note or palate description. This is our most sensitive external flow because it contains text you authored. All such processing happens server-side; no related key ships in the app.

This runs only when you tap it. When you don’t use it, your notes stay only in your account.

5. Service providers

We do not sell your data. To run the service, the following contracted processors handle data on our behalf; data transmitted to them is additionally governed by each provider’s own privacy policy:

  • Supabase — auth, database, file storage (primary store).
  • Apple — Sign in with Apple.
  • Anthropic — tasting-note & palate engine (server-side).
  • RevenueCat — subscription management.
  • PostHog — first-party product analytics.
  • Sentry — crash & performance diagnostics.

6. Delete your account & data

You can permanently delete your account at any time: open the app and go to Settings → Delete Account. This permanently removes your profile, cellar, tastings, notes, palate profile, usage/quota records, and learning progress, and revokes your Sign in with Apple token where applicable.

Data previously transmitted to our processors (analytics, crash diagnostics, subscription management, and the tasting-note provider) is retained or deleted under those providers’ own policies.

7. Age restriction

Decant is an alcohol-related app intended only for people of legal drinking age in their region (18+ in TW/HK, 21+ in the US). An age confirmation is required on first launch. The app is not directed at children, and we do not knowingly collect personal data from children.

8. Your rights & contact

You have the right to access, correct, or delete your personal data. Deletion can be done directly in the app (Section 6). For any privacy question or request, contact us:

Email: jaychou911014@gmail.com

Or visit our support page: foundr.ventures/decant/support

9. Changes to this policy

If we make material changes, we will update the effective date on this page and, where appropriate, notify you in the app. Continued use of the app means you accept the updated policy.

10. Scope

Decant is subject to Taiwan's Personal Data Protection Act and Hong Kong's Personal Data (Privacy) Ordinance (PDPO); users in the United States are also covered by applicable privacy regulations.