Privacy Policy — Wine Cellar & Tasting Notes

Effective 27 September 2026

Wine Cellar & Tasting Notes ("the app") is published by DIGITAL SHIJIL LLC ("we"). This policy explains what happens to information when you use the app. The canonical copy of this policy is at https://apps.digitalshijil.com/wine-cellar/privacy/

In brief

• There is no account, no sign-in and no server of ours. Your wines, bottles, racks, tasting notes, opening history and label photos are stored only on your phone.
• We never receive your cellar data and have no way to see it.
• The app looks nothing up online: there is no wine database, no price feed and no label recognition. It does not sell or deliver alcohol.
• The app contains no advertising SDK, and we added no SDK of our own for usage tracking or crash reporting.
• Two Google components inside the app send Google their own diagnostic information: Google Play Billing (for the Pro purchase) and the Google code scanner (for barcode lookup). Both are described below and declared in the app's Google Play Data safety section.

What stays on your phone

Everything you type is kept in the app's private storage on your device: producers, wine names, vintages, regions, countries, grapes, styles, bottle sizes, alcohol levels, purchase dates, places and prices, your own value estimates, drinking windows, barcodes, notes, label photos, racks and bins and which bottle sits in which slot, tasting notes and scores, and the date, occasion and rack of every bottle you open.

The app does not send this information to us or to anyone else. It leaves your phone only when you move it yourself:

• Export all my data writes one JSON file to a place you choose;
• the cellar inventory (PDF or CSV) and the tasting notebook (PDF) go through Android's share sheet to the app and person you choose;
• a Pro backup writes one file to a place you choose;
• Android's own device backup, if you have it switched on, may include the app's database, settings and label photos in your personal Google backup and in device-to-device transfer.

Label photos

A label photo comes either from the Android photo picker, which hands the app only the photo you pick, or from your camera app, which writes the photo into one file the app provides. The app keeps a smaller copy in its private storage, removes the photo's location and camera details, and never uploads it. The app requests no photo-library, storage or camera permission.

Barcode lookup (Google code scanner)

Scanning uses the Google code scanner, a module provided by Google Play services. The camera screen runs inside Google Play services, not inside this app; the app has no camera permission, never receives the camera image and receives only the decoded number. The number is then looked up in your own cellar on your phone and nowhere else.

Google Play services downloads the scanner module when it is needed. Like other ML Kit features, it sends Google diagnostic and usage information so Google can maintain it: device information (such as manufacturer, model and operating system version), app information (such as package name and version), device or other identifiers, performance metrics, API configuration, event types and error codes. It does not send the images or the codes you scan. Google describes this at https://developers.google.com/ml-kit/android-data-disclosure

The Pro purchase (Google Play Billing)

Pro is a one-time purchase through Google Play. Google Play handles the payment; we never see your card or payment details. The app receives a purchase token and the product ID, uses them to unlock Pro on this phone, and asks Google Play what you own each time it starts, so Pro comes back on a new phone.

The Google Play Billing library in the app sends Google its own diagnostic information about the billing service, such as app and library versions, device and operating system information and error codes. Google's privacy policy applies: https://policies.google.com/privacy

Review prompt

After your tenth tasting note the app may ask Google Play to show its standard rating prompt, once. Google Play decides whether it appears; the app is not told whether or how you rated it.

What is collected, as declared on Google Play

Because the two Google components above send data from the app, the Data safety section declares:

• App info and performance > Diagnostics: collected, not shared, required
• Device or other IDs: collected, not shared, required

Both are sent to Google, encrypted in transit, for the components' diagnostics. We do not receive them. Nothing else is collected: no name, email, phone number, location, contacts, messages, financial information, advertising ID or cellar data.

Deleting your data

Settings > Delete all data removes every wine, bottle, rack, note, photo and setting from your phone and returns the app to how it was when installed. Uninstalling the app does the same. Diagnostics already sent to Google are held by Google under its own policy; we cannot see or delete them.

Age

The app is a record-keeping tool for adults of legal drinking age. It is not directed at children and does not knowingly collect information from anyone.

Changes

If the app's behaviour changes in a way that affects this policy, the policy is updated at the address above before the new version is released, with a new effective date.

Contact

DIGITAL SHIJIL LLC — contact@digitalshijil.com