Last Updated: August 11, 2026
This Privacy Policy describes how the owners, developers, and support staff of Decant ("Decant", "we", "us", or "our") collect, use, disclose, and protect your personal information when you use the Decant application, website, and related services (collectively, the "Platform").
By accessing or using the Platform, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with this Privacy Policy, you should not access or use the Platform.
This Privacy Policy is incorporated into and forms part of our Terms of Service.
1. Information We Collect
1.1 Information You Provide to Us
We collect information that you voluntarily provide when you use the Platform, including:
(a) Account Information: When you create an account, we collect your name, email address, date of birth or age confirmation, username, password, and any other information you provide during registration.
(b) Profile Information: Information you choose to add to your profile, such as a profile photograph, bio, location, wine preferences, and social media links.
(c) User Content: Wine reviews, ratings, tasting notes, photographs, comments, lists, cellar entries, and any other content you submit, post, or share on the Platform.
(d) Social Interactions: Information generated through your social activity on the Platform, including users you follow, content you like or share, and messages you send through the Platform.
(e) Payment Information: If you subscribe to a paid tier, we collect billing information such as your payment card details, billing address, and transaction history. Payment processing is handled by third-party payment processors, and we do not store your full payment card number on our servers.
(f) Communications: Information you provide when you contact us for support, submit feedback, or respond to surveys.
(g) Age Verification Information: Information provided to verify that you meet the legal drinking age requirement in your jurisdiction.
1.2 Information Collected Automatically
When you access or use the Platform, we automatically collect certain information, including:
(a) Device Information: Device type, operating system, unique device identifiers, browser type, and language settings.
(b) Usage Information: Pages viewed, features used, search queries, time spent on the Platform, referring URLs, and interaction patterns.
(c) Location Information: General location information derived from your IP address. Decant also stores precise coordinates you choose to attach to an experience or to a bottle you have bought — never in the background, and only at the moment you ask for it. Section 4 describes each case, who else receives the coordinates, and how to turn the feature off.
(d) Log Data: Server logs that record your IP address, access times, pages viewed, app crashes, and other system activity.
1.3 Information from Third Parties
We may receive information about you from third parties, including:
(a) Social Login Providers: If you choose to register or log in using a third-party service (e.g., Google, Apple), we receive your name, email address, and profile information as authorized by you through that service.
(b) Analytics Providers: We may receive aggregated or de-identified analytics data from third-party analytics services.
2. How We Use Your Information
We use the information we collect for the following purposes:
(a) Providing and Operating the Platform: To create and manage your account, deliver the features and functionality of the Platform, process transactions, and provide customer support.
(b) Personalization: To personalize your experience, including wine recommendations, content suggestions, and social connections based on your preferences and activity.
(c) Communications: To send you service-related notifications, account updates, security alerts, and, where you have opted in, promotional communications about the Platform. You may opt out of promotional communications at any time.
(d) Safety and Security: To detect, investigate, and prevent fraud, unauthorized access, and other illegal or harmful activities, and to enforce our Terms of Service.
(e) Analytics and Improvement: To understand how users interact with the Platform, analyze trends, and improve the Platform's features, functionality, and user experience.
(f) Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
(g) Age Verification: To verify that users meet the minimum age requirements for the Platform and for the lawful discussion and purchase of alcoholic beverages.
(h) Artificial Intelligence Features: To identify wines from photographs you take, to recognise the subjects of photographs you upload, and to answer your My Somm questions from the wines in your cellar. Section 3.3 sets out what is sent, and to whom.
(i) Location Features: To place your bottles and experiences on a map, to look up the name of a place from its coordinates, and to record where an experience happened or where a bottle was bought. Section 4 sets this out in full.
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
3.1 Public Profile and User Content
Certain information is visible to other users of the Platform by default, including your username, profile photograph, bio, wine reviews, ratings, and social activity. You can control the visibility of certain profile elements through your privacy settings.
3.2 Service Providers
We share information with third-party service providers who perform services on our behalf. Except where stated otherwise below, these providers act on our instructions, are contractually obligated to use your information only to provide services to us, and may not use it for their own purposes.
The providers who receive personal information today are:
(a) Supabase — hosts our database, authentication, and file storage. Supabase holds your account details, your cellar, your experiences, and the photographs you upload.
(b) Microsoft Azure — hosts and delivers the Decant web application. Azure receives your IP address and standard web request logs when you load the site.
(c) Anthropic — provides the artificial intelligence behind wine label scanning, photo recognition, and My Somm. Section 3.3 describes exactly what is sent.
(d) Apple — distributes the iOS app, delivers notifications, and converts an experience's coordinates into a place name. See Section 4.5.
(e) The OpenStreetMap Foundation — supplies place-name lookup and map images on the web. Unlike the providers above, the Foundation is an independent organisation rather than a supplier acting on our instructions, and handles what it receives under its own privacy policy. See Section 4.5.
We do not currently use an advertising network, and no advertising or ad-targeting provider receives your personal information. If that changes, we will update this Privacy Policy and tell you before any such sharing begins.
3.3 Artificial Intelligence Features
Several Decant features send your content to Anthropic, which operates the Claude models, so that it can be interpreted and a result returned. This happens only when you use the feature concerned:
(a) Scanning a wine label. When you photograph a bottle in the iOS app, the photographs you captured — the front label, and the back label when you take one — are sent from your device to Anthropic, together with any text your device read from the image, so the wine can be identified.
(b) Recognising what is in a photograph. When a photograph you have uploaded is analysed to identify the wines and subjects in it, that photograph is sent from our servers to Anthropic.
(c) My Somm. When you ask My Somm a question, your question, any occasion or guest details you supply with it, and a list of the wines in your cellar are sent to Anthropic so a recommendation can be made from bottles you actually own.
Anthropic processes this content to return a result to you. It does not receive your name, email address, or account credentials, and we do not permit it to use your content to train its models. Anthropic's own terms govern its handling of what it receives.
3.4 Buyer-Seller Connections
If you use Platform features that connect buyers and sellers, limited information necessary to facilitate the connection may be shared between the parties. Decant does not participate in, recommend, or bear responsibility for any resulting transactions. Any information shared in the course of a transaction between users is subject to the privacy practices of those users and any applicable third-party sellers.
3.5 Legal Requirements
We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to:
(a) Comply with applicable law or respond to valid legal process;
(b) Protect the rights, property, or safety of Decant, our users, or the public;
(c) Detect, prevent, or address fraud, security, or technical issues; or
(d) Enforce our Terms of Service.
3.6 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
3.7 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so.
4. Location Information
Decant uses location in three ways, and never in the background. We do not track you, we do not build a picture of your movements, and nothing described here happens while the app is closed.
4.1 The location on your profile
You can type a location on your profile — a city, a region, whatever you choose. It is free text you write yourself, we do not verify it, and it is visible to anyone who can see your profile. You can clear it at any time in your account settings.
4.2 Where an experience happened
When you record a tasting or a dinner in the iOS app, you can attach where it took place. Decant asks your device for your position at that moment — once, only when you ask — and looks up a place name for it through Apple's mapping service. We store the place name and the coordinates on that experience.
Read this before you share one. An experience is private unless you change it. The iOS app does not currently offer an audience control: every experience it records stays private to you. Where the audience can be set, choosing followers or public takes the location with it: people who can see that experience can see where it happened and when. A public experience is visible to anyone, including people without a Decant account. If that is not what you want, remove the location before you change the visibility, or leave the experience private.
4.3 Where you bought a bottle
In the add- or edit-bottle screen on the web app, you can type where you bought a bottle, and you can press Use my location to attach the coordinates of where you are standing. Pressing that button is the only way Decant reads your position here. Typing a shop's name never reveals where you are, and recording a bottle you bought years ago never attaches today's position unless you press the button.
A purchase location is visible only to you. It is not included in a shared list, a share link, an experience, or anything another member can see. It appears on your own purchase map and in your data export, and nowhere else.
4.4 Turning it off
Settings → Location tagging removes the Use my location button. With it off, Decant makes no location request of any kind. Coordinates you attached previously stay on those bottles until you clear them — Clear pin on any bottle removes them, and deleting the bottle, the experience, or your account removes them with it.
This setting does not affect the purchase map, which loads map images from OpenStreetMap whenever you open it. See Section 4.5.
4.5 Who else receives your location
- Apple, when the iOS app turns an experience's coordinates into a place name, under Apple's own privacy terms.
- The OpenStreetMap Foundation, when you press Use my location on the web: your coordinates and IP address go to their Nominatim service to find a place name. We send a contact address for Decant so they can reach us about our use of the service; we send nothing that identifies you.
- The OpenStreetMap Foundation again, whenever you open the purchase map: the map images come from their tile service, and loading them tells that service your IP address and which part of the world you are looking at. Because the map opens framed on your own pins, that indicates roughly where you buy wine. This happens every time you open the map, including when Location tagging is off, because it is how the map is drawn rather than something we collect. If you would rather not, do not open the purchase map.
The OpenStreetMap Foundation is an independent organisation, not a supplier acting on our instructions, and handles what it receives under its own privacy policy.
4.6 How long we keep it
For as long as the bottle or experience it belongs to exists. Deleting that item, or your account, deletes the location with it. Your data export includes every location we hold for you.
4.7 If you are in California
Precise geolocation is sensitive personal information. We use it only to place your own bottles and experiences on a map and to look up place names. We do not sell it, we do not share it for advertising, and we do not use it to infer anything about you. You can limit our use of it at any time by turning off Location tagging, clearing your pins, and removing locations from your experiences.
5. Cookies and Tracking Technologies
5.1 What We Use
We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your use of the Platform. These technologies help us:
(a) Remember your preferences and settings;
(b) Authenticate your identity and maintain your session;
(c) Analyze Platform usage and performance;
(d) Deliver relevant content; and
(e) Measure the effectiveness of communications.
5.2 Types of Cookies
(a) Essential Cookies: Required for the Platform to function properly. These cannot be disabled.
(b) Functional Cookies: Remember your preferences and settings to enhance your experience.
(c) Analytics Cookies: Help us understand how users interact with the Platform so we can improve it.
(d) Marketing Cookies: Used to deliver relevant promotional content. These are only set with your consent.
5.3 Your Cookie Choices
You can manage your cookie preferences through your browser settings or through the cookie consent mechanism provided on the Platform. Disabling certain cookies may affect the functionality of the Platform.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the Platform's services. We may also retain your information as necessary to:
(a) Comply with legal obligations;
(b) Resolve disputes;
(c) Enforce our agreements; and
(d) Protect our legitimate interests.
When your account is deleted, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law. Certain User Content that has been shared publicly or interacted with by other users may persist in anonymized form.
7. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
(a) Encryption of data in transit and at rest;
(b) Access controls limiting personnel access to personal information;
(c) Regular security assessments and monitoring; and
(d) Secure data storage practices.
However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
8. Your Privacy Rights
8.1 All Users
Regardless of your location, you have the right to:
(a) Access your personal information held by us;
(b) Correct inaccurate or incomplete personal information;
(c) Delete your account and associated personal information, subject to legal retention requirements;
(d) Withdraw consent for processing where consent is the legal basis;
(e) Opt out of promotional communications at any time; and
(f) Export your data in a portable format where technically feasible.
To exercise any of these rights, contact us using the information provided in Section 14.
8.2 Canadian Users
If you are a resident of Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, if you reside in Alberta, the Personal Information Protection Act (PIPA), including:
(a) The right to know what personal information we hold about you and how it is used;
(b) The right to challenge the accuracy and completeness of your personal information;
(c) The right to withdraw consent for the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions; and
(d) The right to file a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.
8.3 United States Users
If you are a resident of a US state with applicable privacy legislation (including but not limited to California, Virginia, Colorado, Connecticut, and Utah), you may have additional rights, including:
(a) The right to know what personal information is collected and how it is used;
(b) The right to request deletion of your personal information;
(c) The right to opt out of the sale of your personal information (we do not sell personal information);
(d) The right to non-discrimination for exercising your privacy rights; and
(e) The right to correct inaccurate personal information; and
(f) The right to limit the use and disclosure of sensitive personal information. Under California law, the precise coordinates you attach to an experience or to a bottle are sensitive personal information. We use them only to place your own bottles and experiences on a map and to look up place names, we never sell them or share them for advertising, and you can limit our use of them directly — see Section 4.7.
We will respond to verified requests within the timeframes required by applicable law.
9. Children and Minors
The Platform is not intended for use by individuals under the legal drinking age in their jurisdiction. We do not knowingly collect personal information from individuals under the legal drinking age.
If we become aware that we have collected personal information from an individual under the legal drinking age, we will take steps to delete that information promptly. If you believe that we have inadvertently collected information from a minor, please contact us immediately using the information provided in Section 14.
10. International Data Transfers
The Platform is operated from Canada. Your personal information may be transferred to, stored, and processed in Canada and the United States, where data protection laws may differ from those in your jurisdiction.
By using the Platform, you consent to the transfer of your personal information to Canada and the United States. We take reasonable steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it, including:
(a) Implementing appropriate contractual safeguards with service providers;
(b) Complying with applicable cross-border data transfer requirements; and
(c) Applying consistent security measures regardless of where data is processed.
One recipient is an exception we cannot resolve by contract. The OpenStreetMap Foundation, which supplies the web app's place-name lookup and map images (Section 4.5), is a volunteer-run organisation registered in England and Wales whose infrastructure is donated and geographically distributed. We therefore cannot tell you which country serves a given map or place-name request. What it receives is limited to an IP address, a coordinate, or the area of the map you are viewing — never your name, your account, or your cellar.
11. Third-Party Links and Services
The Platform may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through the Platform.
We are not responsible for the privacy practices or content of third-party services.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Platform, or applicable law. If we make material changes, we will notify you by:
(a) Posting the updated Privacy Policy on the Platform;
(b) Updating the "Last Updated" date at the top of this policy; and
(c) Sending you a notification through the Platform or via email for significant changes.
Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated policy.
13. Accountability
Decant is responsible for personal information in its possession or custody, including information that has been transferred to third parties for processing. We have designated a privacy contact responsible for our compliance with this Privacy Policy and applicable privacy legislation.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
Decant Support support@mydecant.app
If you are located in Canada and are not satisfied with our response to your privacy concern, you may contact:
Office of the Privacy Commissioner of Canada 30 Victoria Street Gatineau, Quebec K1A 1H3 1-800-282-1376 www.priv.gc.ca
Office of the Information and Privacy Commissioner of Alberta 9925 109 Street NW, Suite 410 Edmonton, Alberta T5K 2J8 780-422-6860 www.oipc.ab.ca
If you are located in the United States, you may contact your state's attorney general or applicable regulatory body.
By using the Decant platform, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy.