Privacy Policy
Last updated: November 2026
Your privacy is important to us. This Privacy Policy explains how WineMail ("we", "us", or "our") collects, uses, and protects your information when you use our services.
Who Can Use WineMail
WineMail is invite-only. You sign in with Google, and only invited accounts can use the app.
Information We Collect
- Account Information: When you sign in with Google we receive your name and email address; we keep only your email address. Signing in does not give us access to your email.
- Gmail (optional): If you choose to connect Gmail, we get read-only access and fetch messages only from the wine merchants you add. Connecting Gmail is available only to accounts we have approved.
- Forwarded email (optional): If your account has a personal WineMail forwarding address, we receive the messages you forward or send to it.
- Your wine records: Cellar inventory, tasting diary entries, merchants, favorites, the wine offers we extract from your email, and order records from receipts you upload (the file name and the bottles we found).
- Uploads: Photos, PDFs (such as receipts or order confirmations), and videos you submit.
- Diagnostic logs: Technical logs for reliability and cost control. Logs of AI requests record your email address, the feature used, and an estimated cost, not the content sent. Other logs may include email sender addresses and subject lines, but not message bodies.
How We Use Information
- Extract wine offers from merchant emails and show them to you.
- Provide features like your cellar, diary, rankings, recommendations, and favorites.
- Maintain security, prevent abuse, and keep each person's AI use within a daily limit.
AI Processing
Some features send the content involved to third-party AI providers to produce a result: for example, an email you ask us to analyze, a label photo, a PDF, or a video. Depending on the feature, that may be OpenAI, OpenRouter (which routes requests to models from providers such as Google, Moonshot, Alibaba (Qwen), OpenAI, and Anthropic), fal.ai (image generation and editing), or Google Gemini. We also use Google search to find bottle images by wine name. These providers handle data under their own terms.
Where Data Is Stored
- Supabase (database): your wine records, saved merchant emails and the offers extracted from them, and your forwarding address details.
- Amazon S3 (file storage): photos you upload and images we generate, plus a temporary copy of a video while it is analyzed.
- Redis (session and cache store): sign-in sessions and connection tokens for the mobile app and AI assistants, cached analysis results, usage counters, and, if you connected Gmail, the token that lets us read it.
- fal.ai: images you upload to the Image Lab are stored with fal.ai so they can be edited.
- Fly.io (hosting): runs the app. Uploaded files pass through its servers; receipts and photos you import are deleted after processing, but Image Lab videos currently stay on the server.
Uploaded and generated images are stored at public links. Links to photos you upload include a random code, so they are hard to guess, but anyone who has a link can view the image.
Each person's records are kept separate, and you see only your own. Wine descriptions and images that WineMail generates for a wine are shared by everyone who has that wine; they describe the wine, not you.
Cookies
We use one cookie to keep you signed in.
Third-Party Services
Besides the storage and AI providers above, we use Google for sign-in and, if you connect it, Gmail. Personal forwarding addresses are run by Resend, which receives forwarded messages on our behalf. If you connect an AI assistant (such as Claude or ChatGPT) to WineMail, that assistant can read the WineMail data you allow, under its provider's terms.
Your Choices
- You can use WineMail without connecting Gmail.
- You can revoke Gmail access at any time from your Google Account settings. WineMail then stops reading your email.
- You can delete diary entries (including their photos), inventory items, merchants, and favorites in the app.
- For anything else, including deleting your account and all your data, or turning off your forwarding address, contact us.
Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect personal data from children.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page.
Contact Us
Questions about this policy? Contact us at support@winemail.app.