Privacy policy

Private by design.
Clear by default.

Effective 12 August 2026

This policy explains how Bottle&Ink processes personal data. The controller is Dynamx GmbH (FN 478649x), Münzfeld 3, 4810 Gschwandt, Austria. Contact us at oliver@dynamx.io.

Data we process

• Device account data: a random installation identifier, a one-way protected device secret, device platform, session identifiers, and account timestamps. No email or password is required for the in-app device account.
• Your cellar content: wine records, quantities, favorites, personal ratings, tasting status, your verbatim notes, and chat messages. When you use assisted tasting-language features, their separate interpretation is also stored without replacing your original words.
• Photos and source data: label photos you choose to upload, plus source links and factual wine metadata used to build a record.
• Voice input: audio you choose to record for transcription and the resulting text. The recording is used only to transcribe your words into the selected field; the audio file is not saved in your journal or posted as a chat message.
• Service data: request identifiers, quota counters, error details, and limited network/security data needed to operate and protect the service.

Why we use it

We process this data to create and sync your private wine journal, respond to your requests, identify and describe wines, maintain inventory, provide export and deletion, prevent abuse, troubleshoot failures, and comply with law. These purposes rely on performing the service you request, our legitimate interests in operating a secure service, and legal obligations where applicable. Photo and microphone access are optional and used only when you choose the corresponding feature.

Service providers and assisted research

Bottle&Ink runs on Cloudflare services, including Workers, D1, R2, Queues, and Durable Objects. Cloudflare processes data on our behalf to host, store, secure, and deliver the service. Private photo objects are stored under account-scoped keys and are never served without account authentication.

Expo’s EAS Update acts as a service provider and processes data on our behalf to deliver compatible app updates. When the app checks for or downloads JavaScript and asset updates, Expo may receive a separate random EAS client identifier for the app installation, device platform, app runtime version and release channel, update and asset requests, update adoption information, and limited fatal-error or crash information after a failed launch. This processing is used to deliver, secure, and monitor app updates, not for advertising or cross-app tracking.

When you use assisted identification, research, tasting-language, or voice transcription features, the wine text, conversation context, selected label images, or temporary voice recording needed for that request are sent directly from our backend to OpenAI. Voice recordings are discarded after the transcription request and are not stored in your journal; only the text placed into the selected field may be saved. We request that each API response is not stored as application state by OpenAI. OpenAI may still retain limited data for abuse monitoring under its applicable API policies unless stronger account controls apply. Public web sources consulted for a wine may receive ordinary connection data such as an IP address. We do not use your private journal content to train our own advertising model.

Sharing, tracking, and sales

We do not sell personal data, show third-party advertising, or track you across other companies’ apps or websites. We disclose data only to processors needed to provide the service, when you direct us to, or where law requires it.

Storage, transfers, and retention

Your account content is kept until you delete the account. Sessions expire, while device and account records remain so the app can remember you. Operational and security records are kept only as long as reasonably necessary for security, reliability, and legal obligations. Cloudflare’s private object storage is configured for its EU jurisdiction. Some processors may handle data outside the EEA under applicable transfer safeguards.

Your choices and rights

You can export a machine-readable copy of your cellar in the app under Settings → Export cellar. You can permanently delete the account, wine records, messages, and private uploads under Settings → Delete account. If the app is no longer installed, use our external deletion request page.

Depending on applicable law, you may also request access, correction, restriction, objection, portability, or erasure, and you may complain to the Austrian Data Protection Authority. Email oliver@dynamx.io so we can help verify and fulfil the request.

Children and alcohol-related content

Bottle&Ink is intended for adults of legal drinking age and is not directed to children. It is a journaling tool; it does not sell alcohol.

Changes

We may update this policy as the service changes. The effective date above identifies the current version. Material changes will be communicated in the app or on this page where appropriate.