Privacy Policy

Last updated: 20 October 2026

1. Who we are

Cuvera is a wine education and food-pairing app for iPhone. It is published by Tristan Le Saout, acting in a personal capacity and not through a company. Cuvera is currently developed and operated from Paris, France. Tristan Le Saout is the data controller for your personal data.

Correspondence address (postal correspondence only)
411 SS4, PO Box 37089
Al Saadiyat Island, Hidd Al Saadiyat
Abu Dhabi, United Arab Emirates

Email — support@cuvera.app

2. What Cuvera does

Cuvera helps adults choose, understand and remember wine. It suggests pairings between food and wine, explains why they work, helps you keep a wine collection, guides tastings, and answers questions through an AI sommelier called Camille. Cuvera does not sell alcohol and has no shop, marketplace or social network.

3. Data we collect and why

Account data. Your email address and a hashed password when you sign up with email. If you use Sign in with Apple, we receive the email address Apple gives us — which may be a private relay address if you choose Hide My Email — and your name only if you choose to share it on first authorisation. Your account has an internal user ID. We use this to create and secure your account.

Content you create. Your wine collection (name, producer, vintage, region, grape, colour, quantity, notes), tasting logs and notes, and guided tasting and palate sessions. This is stored so the app can show it back to you. Each record is scoped to your account and is not readable by other users.

Spreadsheet imports. When you import wines from a spreadsheet, Cuvera stores the file name and the original rows of the file with your account, alongside the details you confirm, so you can review and finish the import. The file itself is read on your device.

Dishes and pairings. The dish or food you search for is sent to our AI provider to suggest wines. When you open a food-and-wine pairing, Cuvera saves the dish and the suggested wine with your account, so it can remind you about the meal and later ask whether you had it.

Camille and other AI requests. Cooking hints, the details of wines you add or ask about, and the messages you send to Camille are sent to our AI provider to produce an answer (see section 5). Cuvera does not store your Camille conversations; they exist only while the screen is open.

Wine label photos. When you tap to scan a label, the photo is sent to our AI provider to identify the wine. Cuvera does not store the photo. Only the structured wine details are saved, and only if you choose to add that wine to your collection. Our AI provider may keep the photo for a limited time (see section 5).

Approximate location (optional). If you allow it, Cuvera reads your location while the app is in use and turns it into your city, region and country. iOS's built-in geocoding service sends the coordinates to Apple to do this; they are never sent to or stored by Cuvera. We store only the city, region and country — or the city you type yourself instead. Today this does not change any recommendation: we use it to understand where the Cuvera community is growing and to plan future local features. You can change or clear it in Settings → Wine area, or withdraw the permission in iOS Settings.

Preferences and app activity. Your chosen language, stored on the device and with your account so the app and our emails are in the right language. To make the app work, we also keep a few records of how you use it with your account: whether you have finished onboarding and which tips you have seen, your progress in a guided tasting, how often a reminder has been shown, and hourly counts of AI requests used to apply usage limits.

Server and security logs. When the app talks to our servers, our hosting provider Supabase automatically records technical logs: your IP address, device type (user agent), the account making the request, the request, its result and any error. Sign-in events are logged for security in the same way. While you are signed in, the record of your sign-in session — including the IP address and device type it was started from — is also kept with your account until you sign out or the session ends. We use these logs and records to keep the service secure, prevent abuse and fix problems.

Notifications (optional). Reminders are scheduled on your device: a reminder the same evening for a meal you planned, a next-day question about a pairing, and occasional ideas from your collection — for example when a bottle may be entering its estimated drinking window. The record of which ideas were sent stays on your device. Collection ideas can be turned off separately in Settings. Cuvera uses no push tokens and no notification server.

Bottle images. To display a bottle image, Cuvera looks the wine up through a third-party image source and caches the result on our servers so the same wine does not need looking up again. This uses only the wine's name and producer. No photo of yours is ever used.

4. What we do not collect

No analytics or advertising SDK, no crash-reporting SDK, no contacts, no browsing history, no health or financial data. Beyond the app activity and server logs described above, we do not build usage profiles. Cuvera does not track you across other apps or websites and does not sell or share your data for advertising.

5. AI processing

AI features are processed by OpenAI on Cuvera's behalf, through Cuvera's own servers — the app never talks to OpenAI directly. Each request contains only what that answer needs: for example the dish, the wine, your message to Camille or the label photo. Cuvera does not ask OpenAI to store requests or answers for later retrieval. OpenAI may keep the content of requests, including label photos, for up to 30 days to detect abuse, and longer only where the law requires it. Your data is not used to train AI models. AI output is generated and can be wrong or incomplete; it is labelled in the app as AI-generated and is educational, not professional advice.

6. Service providers

• Supabase — hosting, authentication, database, storage, and technical and security logs. Our project is hosted in the European Union (Ireland, eu-west-1).
• OpenAI — AI text and image understanding. Processing may take place in the United States; see section 7.
• Resend — transactional email only: account confirmation and password reset, sent from auth@cuvera.app.
• Apple — Sign in with Apple, if you use it, and the iOS location services that turn a location into a place name, if you allow location.
• GitHub — hosts the cuvera.app website (these pages and the email confirmation page). GitHub logs visitors' IP addresses for security purposes. The website uses no cookies and no analytics.

7. International transfers

Your account and content are stored in the European Union. When you use an AI feature, the text or label photo needed for that request is processed by OpenAI. Under OpenAI's standard data processing terms, which apply to our use of its API, data from the European Economic Area and Switzerland is handled by OpenAI Ireland Ltd.; where OpenAI transfers it outside those countries, including to the United States, it relies on the European Commission's Standard Contractual Clauses or an adequacy decision. Our email provider, Resend, processes your email address and account emails mainly in the United States; its standard data processing terms, which apply to our account, incorporate the Standard Contractual Clauses. GitHub, which hosts the cuvera.app website, is based in the United States.

8. Legal bases

• Performance of a contract — running your account and providing the features you ask for.
• Consent — optional location and optional notifications, each withdrawable at any time.
• Legitimate interests — keeping the service secure and preventing abuse, including request rate limits and server and security logs.

9. How long we keep it

• Your account and the content stored with it — collection, tastings, spreadsheet imports, saved pairings, wine area, preferences and app activity — are kept until you delete your account, or until you clear them in the app where it offers that.
• Technical and security logs in Supabase's logging service are kept for 7 days on our current plan. Sign-in session records (section 3) are kept while the session lasts.
• Database backups are taken daily and kept for 7 days, so deleted data can remain in a backup for up to that long.
• AI requests, including label photos, may be kept by OpenAI for up to 30 days (section 5). Cuvera itself never stores label photos or Camille messages.
• Account emails and their delivery logs are kept by Resend for 30 days on our current plan.

10. Deleting your account

You can delete your account at any time in the app: Settings → Account → Delete Account. This permanently deletes your account and the personal data stored with it: your collection, tastings and tasting sessions, spreadsheet imports (including the original rows), saved pairings, wine area, preferences, app activity and sign-in records. If you signed in with Apple, deleting your account does not currently remove Cuvera from your Apple Account automatically. You can remove it yourself at any time: on your iPhone, open Settings → your name → Sign in with Apple, choose Cuvera and follow the steps to stop using Sign in with Apple. Copies in our providers' short-lived logs and in database backups (section 9) are not deleted early; they expire on their normal schedule. The shared bottle-image cache, which holds only a wine's name, producer and image link and is not linked to any account, is kept.

11. Your rights

Subject to applicable law you may request access to your data, correction, deletion, restriction, objection, and portability. The fastest route to deletion is in the app. For anything else write to support@cuvera.app. If you are in the EU or EEA, you also have the right to lodge a complaint with the supervisory authority of your country of residence, your place of work, or the place where you believe an infringement occurred. The European Data Protection Board publishes the list of national authorities; in France, for example, this is the CNIL (Commission nationale de l'informatique et des libertés).

12. Children and age

Cuvera is intended for adults who are of legal drinking age in their country. It is rated 18+ and is not directed at children. We do not knowingly collect data from minors.

13. Security

Data is encrypted in transit. Database rows are isolated per user by row-level security, so one account cannot read another's data. Server credentials and AI provider keys are held only on the server and are never included in the app.

14. Changes

If we change this policy we will update this page and the date above.

15. Contact

Tristan Le Saout
411 SS4, PO Box 37089
Al Saadiyat Island, Hidd Al Saadiyat
Abu Dhabi, United Arab Emirates
support@cuvera.app