Privacy Policy

1. Information We Collect

• Account information. You sign in with your Google or Apple account. We receive your email address and, if you choose to share it, your name or display name. We never receive or store your sign-in provider password.
• Age confirmation. Invoak is for adults of legal drinking age. During onboarding you confirm your age range, and we record that confirmation for compliance purposes. We do not collect your date of birth.
• Wine activity. The wines you log, rate, journal, bookmark, or add to a cellar, and the wineries you mark as visited — including tasting notes, occasions, food pairings, and any purchase prices or quantities you choose to enter.
• Taste profile.From your ratings, notes, and interactions we derive a multi-dimensional taste (“palate”) profile — for example your tannin, acidity, sweetness, oak, body, and regional style preferences — which powers your personalized recommendations.
• Photos. When you scan a wine label with the camera or select an image from your photo library, the image is sent to our servers to identify the wine. Processed label images may be kept in our shared wine catalogue; we do not use your photos for any other purpose.
• Voice input.If you use speech-to-text, your speech is transcribed on your device by your platform’s speech-recognition service; only the resulting text is sent to us. We never receive your audio.
• Conversations. Your messages with the AI sommelier and its replies are stored as conversation history so the sommelier can remember context. Simple requests may be handled by a small model that runs entirely on your device.
• Approximate location (optional). With your permission, we use your location to personalize recommendations for the venue you are at, to organize your conversations, and to detect winery visits. Your precise GPS coordinates never leave your device: the app converts them on-device to an approximate area of roughly 150 meters before anything is sent to us. You can turn location access off at any time in your device settings.
• Friends and sharing. The friend connections you make and the wines, notes, cellars, and taste-profile details you choose to share with them.
• Purchases. Premium subscriptions are billed by the Apple App Store or Google Play. We and our subscription-management provider receive your subscription status and transaction identifiers — never your payment card details.
• Device, usage, and diagnostics. Crash reports, performance measurements, and app-usage analytics; routine server logs (IP address, timestamps, requested endpoints); and device-integrity signals (Apple App Attest, Google Play Integrity, Cloudflare Turnstile) used to block bots and abuse.

2. How We Use Information

We use this information to:

• provide the Service — recommendations, label scanning, the AI sommelier, journal, cellar, and social features;
• personalize the Service by building and continuously updating your taste profile;
• process subscriptions and manage your account;
• keep the Service safe — enforce the age requirement, prevent fraud and abuse, and diagnose crashes and performance problems;
• send service messages about your account or important changes; and
• comply with legal obligations.

We do not sell personal information, and we do not use your information for third-party advertising. We may share aggregated or de-identified statistics that cannot reasonably be used to identify you.

3. AI Processing

Label images and sommelier conversations are processed by artificial-intelligence models. Most of this processing runs on infrastructure we operate ourselves. Some requests are processed by Anthropic (Claude models) acting as our service provider; Anthropic does not use data submitted through its API to train its models. Your personal information is not used to train third-party AI models.

4. How We Share Information

• Service providers, only as needed to run the Service and under contractual confidentiality: Apple and Google (sign-in and billing), RevenueCat (subscription management), Anthropic (AI processing), Google Firebase (analytics, crash, and performance reporting), and Cloudflare (network security and content delivery).
• Friends you connect with — only the content and profile details you choose to share.
• Wine retailers, if and when in-app wine purchasing is offered: the order details needed to fulfill a purchase you make.
• Legal reasons — when required by law, or to protect the rights, safety, or property of Invoak users, Distilled Intellect, or others.
• Business transfers — if we are involved in a merger, acquisition, or asset sale, your information may be transferred with notice to you.

5. Data Retention

• Your journal, cellar, taste profile, and account data are kept until you delete them or your account.
• Conversation history: full message text is retained for 90 days on the free tier and 1 year on Premium; compact session summaries and semantic indexes are retained so the sommelier keeps its memory.
• Age-confirmation records are retained for compliance.
• Server logs are retained for no longer than ninety (90) days.
• You can delete your account in the app (Settings → Account) or at how to close your account. Deletion removes your personal information except what we are legally required to keep.

6. Your Choices and Rights

• Permissions. Camera, microphone, photo library, and location access are controlled in your device settings; the app works without them, minus those features.
• Access and correction. You can view and edit your profile, journal, and cellar in the app.
• Deletion. You can delete individual entries or your entire account in the app.
• Requests. For access, export, correction, or deletion requests, contact privacy@distilledintellect.ai.

7. European Users (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on these legal bases: performance of our contract with you (providing and personalizing the Service — personalization is its core feature), our legitimate interests (security, abuse prevention, diagnostics), your consent (optional permissions such as location), and legal obligations (age compliance). You have the rights of access, rectification, erasure, restriction, portability, and objection, the right to withdraw consent at any time, and the right to lodge a complaint with your supervisory authority.

8. California Residents

The CCPA/CPRA give California residents the rights to know, access, delete, and correct personal information and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we will not discriminate against you for exercising your rights. Contact us at privacy@distilledintellect.ai.

9. Children

The Service is intended only for adults of legal drinking age (21 in the United States). We do not knowingly collect personal information from anyone under the legal drinking age, and never from children under 13. If you believe a minor has provided us with personal information, contact us so we can delete it.

10. Security

We protect your information with encryption in transit, access controls, and pseudonymization — your conversation history and location data are keyed to an internal identifier stored separately from your contact details. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

11. International Transfers

We process information in the United States. If you use the Service from elsewhere, your information will be transferred to and processed in the United States, and where required we apply appropriate safeguards for such transfers.

12. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Effective” date above and, for material changes, notify you in the app and, where required, ask you to review and accept the updated Policy.

13. Contact

Questions about this Policy or our privacy practices can be sent to privacy@distilledintellect.ai.