Effective date: 31 March 2026
GrapeSnap ("we", "the app") is a wine label scanning app developed by Freddie Chambers, a sole trader based in the United Kingdom. This policy explains what data the app collects, how it is used, who it is shared with, and your rights.
Freddie Chambers is the data controller for all personal data processed by GrapeSnap. For any privacy queries, contact freddiecaspian@gmail.com.
| Data | Purpose | Stored where | Retention |
|---|---|---|---|
| Device identifier (anonymous UUID) | Authenticate your device with our server so scans are processed securely. No name, email, or account is required. | iOS Keychain (on your device) and our server cache | Cached on server for up to 35 days, then automatically expires |
| Wine label photos | Sent to our server to identify the wine via AI analysis (see "Third-party services" below) | Your device (permanently). Our server and AI providers (during processing only) | Deleted from our server and AI providers within 60 seconds of processing. Never retained. |
| OCR text (text extracted from the label) | Text is extracted on your device using Apple Vision, then sent to our server to search our wine database for a match | Your device and our server (during processing only) | Not retained after the search completes |
| Location (GPS) | Reverse geocoded on your device to a city and country name, so you can remember where you tasted a wine | Your device only. GPS coordinates and city names are never sent to our server. | Stored locally until you delete the app |
| Tasting notes | Your personal notes about each wine | Your device only | Stored locally until you delete the app |
| Wine data | Name, producer, region, vintage, grape varieties identified from your scan | Your device. Wine metadata may be stored in our database to improve future matches. | Wine metadata stored indefinitely. No user-identifiable information is attached. |
| Scan count | Track the number of scans per device for rate limiting | Our server cache | Automatically expires after 35 days |
When you scan a wine label, the image and extracted text are sent to our backend server. If no match is found in our wine database, your server forwards the image to one of the following AI services for identification:
Wine label images may be sent to OpenAI, L.L.C. for AI-powered wine identification. We have enabled OpenAI's Zero Data Retention (ZDR) mode. This means images and prompts are discarded immediately after processing and are not used to train OpenAI's models. OpenAI Privacy Policy.
Wine label images may be sent to Anthropic PBC as an alternative AI provider for wine identification. Anthropic does not use API data to train its models. Images may be retained for up to 30 days for trust and safety purposes, after which they are deleted. Anthropic Privacy Policy.
These providers act as data processors on our behalf, processing images solely to identify wine labels. They do not receive your device identifier, location, tasting notes, or any other personal data.
Our backend server runs on Railway (hosting) with a PostgreSQL database containing our wine catalogue. Anonymous device identifiers and scan counts are cached via Upstash Redis. Neither service receives personal information beyond the anonymous device UUID.
We process your data under legitimate interest (Article 6(1)(f) UK GDPR) - specifically, the interest in providing you with accurate wine identification when you choose to scan a label. Processing is limited to what is necessary: we only send the wine label image, and only when you actively tap the scan button.
Local data: All local data (wines, photos, tasting notes, location data, preferences) is permanently deleted when you uninstall GrapeSnap from your device.
Server data: Your anonymous device identifier and scan count are cached on our server and automatically expire within 35 days. To request immediate deletion, email freddiecaspian@gmail.com with the subject line "GrapeSnap Data Deletion". We will delete your data within 30 days of receiving the request.
Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the right to:
To exercise any of these rights, email freddiecaspian@gmail.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
If GrapeSnap is available in the European Economic Area, the EU GDPR applies in addition to the UK GDPR, with equivalent rights.
GrapeSnap is rated 17+ due to alcohol-related content. The app is not intended for use by anyone under the age of 17. We do not knowingly collect data from children.
We may update this policy from time to time. Changes will be posted on this page with an updated effective date. Material changes will be highlighted within the app.
For any privacy questions or data requests:
Freddie Chambers
Email: freddiecaspian@gmail.com
© 2026 Freddie Chambers