Last updated: 3 August 2026
The short version. Vinia has no user accounts and asks for no email address or password in the app. Before the first AI-powered scan, Vinia explains what information will be sent, identifies OpenRouter and Google Vertex AI, and asks for your permission. If you allow it, the app sends the menu photo you scan, your profile and taste preferences, and details you provide about your meal to produce personalized recommendations. Server records are grouped using a random, pseudonymous installation identifier created on your device. We don't show ads, track you across other companies' apps or websites, or sell your data.
Vinia - AI Wine Assistant (the "app" or "Vinia") is a wine-recommendation app for iPhone. This Privacy Policy explains how the app and the Vinia website process information, why we process it, who receives it, how long it is kept, and the choices you have. In this policy, "we", "us", and "our" refer to the operator and data controller, Niklas Weller, based in St. Gallen, Switzerland. If you have any questions, contact us at hello@viniawine.com.
Vinia offers an auto-renewing subscription. Purchases are processed by Apple and managed with RevenueCat, our subscription provider. We receive your subscription status (for example, whether your subscription is active or in a trial), purchase history, and a RevenueCat-generated pseudonymous identifier. We do not receive or store your payment card details — those are handled by Apple under Apple's own terms.
Where the EU/EEA or UK GDPR applies, we process data as necessary to provide the app and subscriptions you request and perform our contract with you; based on our legitimate interests in operating, securing, troubleshooting, and improving Vinia; to comply with legal obligations; and, where required, with your consent. You can withdraw consent at any time, but this does not affect processing that occurred before withdrawal. Swiss data-protection law applies independently where relevant.
We rely on your consent before sending profile information, menu photos, meal context, or recommendation answers to OpenRouter and Google Vertex AI. Choosing "Not now" cancels the scan before that information is sent. You can withdraw permission under Me → Privacy & AI; after withdrawal, Vinia will ask again before any new AI-powered scan. Withdrawal does not undo processing that already occurred.
We do not sell your personal information. We share data only with the service providers and platforms that make the app and website work:
We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the service.
We require service providers that process personal data for Vinia to protect it under contractual and technical safeguards that provide the same or an equivalent level of protection as described in this policy and applicable data-protection law.
Vinia relies on OpenRouter and Google Vertex AI to interpret your menu photos and recommend a wine. The app asks for permission immediately before the first scan that would use these services. When you allow the scan or request the next recommendation step, the relevant photo, profile, meal and taste context, table notes, and session answers are transmitted through OpenRouter to Google Vertex AI for processing.
Vinia has enabled OpenRouter's private Input & Output Logging. This means complete prompts and model responses are retained in Vinia's private OpenRouter logs and are accessible only to authorized account administrators. We use these logs to monitor costs, debug failures, and evaluate response quality. We have not enabled OpenRouter to use prompts or responses for model training, analytics, or product improvement. The Google Vertex AI provider route is configured for zero data retention at the model-provider layer, and Google does not use the inputs or outputs to train or fine-tune AI models without permission.
Wine-journal notes are stored in Supabase but are not sent to the AI recommendation providers. Please avoid including sensitive personal information or images of people in menu photos and table notes.
Your saved profile and wine journal are stored on your device. A journal entry remains there until you delete that entry in the app or remove the app. Deleting a journal entry in the app deletes only the local copy shown on that device. It does not delete journal-event records that were previously sent to Supabase. Those server records form an append-only operational archive of the wine, rating, and note data submitted when the entry was created or edited.
Extracted menu-scan records and journal events currently have no fixed automatic expiry and are retained while reasonably needed to operate, secure, and improve the service, unless they are deleted following a verified request or must be kept for a legal reason. Vinia does not intentionally save the original menu-photo files in its application database after processing, although infrastructure and AI providers may temporarily retain request data under their own retention settings and policies. Technical logs, backups, subscription records, and support emails are retained under the relevant provider schedules or as long as reasonably necessary for their purpose.
Prompts and responses saved through OpenRouter's private Input & Output Logging are retained for at least three months and may be kept longer unless deletion is requested. Vinia retains them only while reasonably needed for cost monitoring, debugging, and response-quality evaluation. You may ask us to delete associated retained logs by contacting hello@viniawine.com and providing the installation identifier shown in the app.
Data is encrypted in transit using HTTPS. Access to our database is restricted: the app can only append journal events and cannot read, update, or delete server records, and the scan records are accessible only to our server-side systems. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.
Depending on where you live (for example, under the EU/EEA GDPR, the Swiss FADP, or the California CCPA/CPRA), you may have rights to access, correct, delete, or restrict the processing of your personal data, and to object to certain processing.
You may also have rights to data portability, to withdraw consent, and to complain to a competent data-protection authority, including the Swiss Federal Data Protection and Information Commissioner where applicable. We will respond to verified requests within the timeframe required by applicable law. Some information may be retained where required by law or in restricted backups until those backups are overwritten.
Vinia is about wine and is intended only for people who have reached the legal drinking age in their jurisdiction. It is not directed to children. Apple displays the App Store age rating applicable to each country or region, so the displayed rating may vary; earlier operating-system versions may also show Apple's legacy 17+ rating with regional exceptions. We do not knowingly collect personal information from anyone under the legal drinking age in their jurisdiction. If you believe a minor has provided us information, contact us and we will delete it.
Our service providers may process and store data in countries other than your own, including the United States. Where required, we use recognized transfer mechanisms and contractual or other safeguards intended to provide an appropriate level of data protection.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes may be communicated in the app or on this page.
Questions, requests, or concerns? Email hello@viniawine.com.