Privacy Policy

This policy describes how Tire-Bouchon (tire-bouchon.app), an AI-assisted wine cellar management application, collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (“Informatique et Libertés”).

1. Data controller

The controller of personal data collected on tire-bouchon.app is ADVIJU INVESTISSEMENT, a simplified joint-stock company (SAS) registered with the Paris Trade and Companies Register under number 919 110 387, whose registered office is at 22 rue Durantin, 75018 Paris, France. The publisher’s full details appear in the legal notice (in French).

Contact: contact@tire-bouchon.app

2. Data we collect

We limit collection to the data necessary for the service to work:

• Account data: email address, username and preferences, created at sign-up (via Supabase Auth).
• Your cellar content: bottles, vintages, locations, wishlists and tasting notes that you enter.
• Scan photographs: the label images you take to add a wine are analysed in order to identify and enrich the entry (see section 5). They may be kept as the wine’s image in your cellar.
• Social data: friendships and visibility settings, if you use the features between friends (see section 6).
• Technical and usage data: IP address, device and browser type, pages viewed and interactions, collected for audience measurement and product improvement (see section 4).

We do not collect any bank or card details ourselves. Where applicable, any payment is handled by a specialised provider and we never store your card data.

3. Purposes and legal bases

Your data is processed for the following purposes:

• Providing the service (account, cellar management, scanning, peak maturity alerts) — legal basis: performance of the contract.
• Account-related communications (security, password reset, friend requests) — legal basis: performance of the contract / legitimate interest.
• Audience measurement and product improvement (analytics, session recording) — legal basis: legitimate interest, which you may object to (see sections 4 and 8).
• Optional communications (newsletter, where applicable) — legal basis: your consent, which may be withdrawn at any time.

We never sell or rent your data. No data is shared for advertising purposes.

4. Audience measurement and session recording

To understand how the application is used and to fix problems, we use PostHog and Microsoft Clarity, which collect pages viewed, clicks and interactions, and may record how your session unfolds (session replay, heatmaps) for debugging purposes. Sensitive fields such as passwords are masked in these recordings.

As these trackers are not strictly necessary, they are only set after you have given consent, collected through the cookie banner. You may refuse without any consequence for your access to the service, or change your mind at any time by contacting us.

5. Processing by artificial intelligence

When you scan a label or add a wine that is not in our database, the corresponding image and/or text is sent to AI providers in order to identify the wine, generate its entry and process the image:

• OpenAI — image analysis and text generation
• Google (Gemini API) — image analysis and text generation
• Replicate — image processing (background removal)

This processing is strictly necessary for the scanning feature. The images sent are not used by us to train third-party models. As these providers are located outside the European Union, transfers are governed as described in section 7.

6. Sharing between users

The social features (friends, shared cellar) only reveal your data to other users according to the visibility settings that you define. As long as you do not add a friend and do not change those settings, your cellar and your notes remain private.

7. Processors and transfers outside the EU

We use the following processors to provide the service:

Where data is transferred outside the European Union, the transfer is governed by the appropriate safeguards provided for by the GDPR (European Commission standard contractual clauses or equivalent mechanisms). Each processor acts under its own privacy policy and solely on our instructions.

8. Hosting and security

Your account and cellar data is stored by Supabase on servers located in the European Union (eu-west region, Paris). The website is hosted by Vercel. Communications are encrypted using HTTPS (TLS), authentication relies on secure tokens, and access to data is partitioned per user through row-level security policies in the database.

9. Retention periods

• Account and cellar data: kept for as long as your account is active.
• Scan photographs: kept as the wine’s image for as long as the entry exists in your cellar.
• Audience measurement data: kept for a limited period for analysis, then aggregated or deleted.
• Session cookies: limited to the duration of the session or the stated validity period.

You may delete your account at any time, from the application (Settings › Delete my account) as well as from the website (Settings › Account). Deletion is immediate and permanent.

The following are then deleted: your account and identity (email address, username, phone number, profile picture), your cellars, storage areas and bottles, your tastings and notes, your favourites, wishlists and lists, your messages and your friendships.

The following are kept but anonymised, that is, permanently detached from your identity: the wine entries you created, the label photographs that have become the public image of a cuvée in the catalogue, and the corrections you proposed that were applied. These items no longer identify you in any way and therefore no longer constitute personal data within the meaning of the GDPR.

Why this distinction. These contributions are added to a shared database: other users’ cellars rely on the entries you created, and deleting them would destroy other people’s content. This strictly anonymous retention is based on the publisher’s legitimate interest in maintaining the integrity of the shared database.

10. Cookies

Tire-Bouchon uses two categories of cookies (or equivalent technologies):

• Strictly necessary cookies: authentication (session) and interface preferences (theme, language). Essential to the service, they do not require your consent.
• Audience measurement cookies: set by PostHog and Microsoft Clarity (see section 4) only after you have given consent, in order to analyse usage and improve the service.

We use no advertising cookies and no social network tracking pixels (Google Ads, Meta Pixel, and so on).

11. Minors

Tire-Bouchon concerns alcoholic products and is aimed exclusively at adults. The service is not intended for minors and we do not knowingly collect their data. Excessive drinking is harmful to health. Please drink responsibly.

12. Your rights (GDPR)

In accordance with the General Data Protection Regulation and the French Data Protection Act, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: delete your data and your account, directly from the application or the website (see section 9 for what is deleted and what is anonymised)
• Right to portability: export your data in a structured format
• Right to object: object to processing based on legitimate interest
• Right to restriction: restrict the processing of your data
• Withdrawal of consent: at any time, for processing that relies on it

To exercise these rights, contact us at contact@tire-bouchon.app. We reply within a maximum of 30 days.

13. Changes

This privacy policy may be updated. In the event of a substantial change, you will be informed by email or through an in-app notification, and the “last updated” date above will be revised.

14. Contact and complaints

For any question relating to the protection of your data: contact@tire-bouchon.app

You may also lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), the French supervisory authority.