gotBottle Get the app

Available on iOS and Android

Terms of Use

Privacy Policy

Last updated: September 13, 2026

This policy explains how gotBottle processes information when you use its iOS and Android applications.

Policy summary

This privacy policy explains how gotBottle collects, uses, and protects your personal information when you use our mobile application.

What information we collect:

How we use your information:

What we do NOT share:

Third-party services we use:

Your rights:

You have the right to access, correct, delete, or restrict the processing of your personal data. You can also withdraw consent at any time and lodge complaints with data protection authorities.

Full Policy

Information We Collect

We collect different types of information to provide and improve our services:

Information You Provide Directly

gotBottle does not require a user-facing account or profile. You may provide personal information when you contact us for support. Your bottles, ratings, tasting notes, photos, and saved locations are stored locally on your device unless you choose to export a backup.

Information Collected Automatically

Information Collected with Your Permission

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:

Device permissions for Personal Data access

Depending on the User's specific device, this Application may request certain permissions that allow it to access the User's device Data as described below. By default, these permissions must be granted by the User before the respective information can be accessed. Once the permission has been given, it can be revoked by the User at any time. In order to revoke these permissions, Users may refer to the device settings or contact the Owner for support at the contact details provided in the present document. The exact procedure for controlling app permissions may be dependent on the User's device and software. Please note that the revoking of such permissions might impact the proper functioning of this Application. If User grants any of the permissions listed below, the respective Personal Data may be processed (i.e accessed to, modified or removed) by this Application.

Location permission (on demand)

Used for accessing the User's device location when a location-based feature is requested. The App may receive precise or approximate coordinates depending on the device settings, and may request an address through mapping or geocoding services. Location is not collected for continuous background tracking.

Camera permission

Used for accessing the camera or capturing images from the device.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Analytics

The services in this section help us understand App use, diagnose problems, and maintain reliability.

Google Analytics for Firebase (Google LLC)

Firebase Analytics is an analytics service provided by Google LLC that helps us understand how users interact with our app. To understand Google's use of data, please review Google's Privacy & Terms.

Firebase Analytics processes app usage patterns, user interactions, device and app information, and Firebase technical identifiers. Android subscription analytics may include a pseudonymous Firebase user identifier, product information, a masked purchase-token fragment, and purchase or validation status.

Firebase Analytics and Firebase Crashlytics are enabled to measure usage and diagnose reliability problems. The App does not currently offer an in-app analytics opt-out.

Advertising settings, including iOS tracking settings, do not by themselves disable Firebase Analytics collection. You can stop further App-side collection by uninstalling the App, subject to data already received and retained by the relevant provider.

Data collected: Usage data, app interactions, device and app information, Firebase technical identifiers, and technical performance data.

Place of processing: United States and other Google data centers worldwide - Google Privacy Policy. Google participates in data transfer frameworks including Standard Contractual Clauses and adequacy decisions.

Subscription validation

Android subscriptions are validated through Firebase Authentication and Firebase Cloud Functions using Google Play purchase data. This processing uses a pseudonymous Firebase user identifier, product ID, purchase token, transaction or order information, and subscription entitlement status.

The information is used to confirm purchases, prevent fraud, provide entitlement support, and meet legal obligations. Google Play, Firebase, and Google Cloud process this information under their applicable terms and privacy notices.

Device permissions for Personal Data access

This Application requests certain permissions from Users that allow it to access the User's device Data as described below.

Device permissions for Personal Data access (this Application)

This Application requests certain permissions from Users that allow it to access the User's device Data as summarized here and described within this document.

Personal Data collected: location permission (on demand) and camera permission.

Infrastructure monitoring

This type of service allows this Application to monitor the use and behavior of its components so its performance, operation, maintenance and troubleshooting can be improved.
Which Personal Data are processed depends on the characteristics and mode of implementation of these services, whose function is to filter the activities of this Application.

Firebase Crashlytics (Google LLC)

Firebase Crashlytics is a crash reporting service provided by Google LLC that helps us identify and fix app crashes and stability issues. Crashlytics automatically collects crash reports, including stack traces and device information, when the app encounters an error.

This service helps us improve app reliability by providing detailed crash reports that allow us to identify and resolve issues quickly.

Data collected: Crash logs, stack traces, device model, operating system version, app version, and timestamp of crashes.

Place of processing: United States and other Google data centers worldwide - Google Privacy Policy. Google uses appropriate safeguards for international data transfers.

Google Firebase AI (Google LLC)

Firebase AI Logic using the Vertex AI backend processes text extracted from wine-label photos when you choose AI-powered bottle analysis. This enables the App to provide a suggested wine profile, tasting notes, and recommendations.

Important: The original label photo and your tasting notes are not sent for this request. The OCR text, language and locale information, and service metadata needed to process the request may be sent to the service. Do not use the feature for labels or images containing sensitive personal information.

Data collected: OCR text extracted from wine-label photos, language and locale information, and service metadata needed to process the request.

Place of processing: United States and other Google data centers worldwide - Google Privacy Policy.

Location-based interactions

Non-continuous geolocation (this Application)

This Application may collect and use location data to provide a feature the User requests. If permission is granted, the App may receive precise or approximate coordinates depending on the device settings. Location is obtained on demand, not continuously in the background.
Google Play services, Google Maps Platform, and the device geocoder may process location and address requests on Android. Apple location and mapping services may process those requests on iOS. Permission can be revoked in device settings.

Personal Data collected: geographic position and, where available, a reverse-geocoded address. Saved bottle locations are stored locally on the device.

The rights of Users

Users may exercise certain rights regarding their Data processed by the Owner.

In particular, Users have the right to do the following:

  • Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
  • Object to processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
  • Access their Data. Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
  • Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
  • Restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
  • Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Data from the Owner.
  • Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User's consent, on a contract which the User is part of or on pre-contractual obligations thereof.
  • Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.

Details about the right to object to processing

Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.

We do not use Personal Data for direct marketing or cross-context behavioral advertising.

How to exercise these rights

To exercise a privacy right, email gotbottleapp@gmail.com with the subject line "gotBottle Privacy Request." We may need to verify your request and may need non-sensitive device or App details to locate pseudonymous provider-held data. You can directly delete local App content and backups that you control. We respond within the period required by applicable law.

International Data Transfers

Your personal data may be transferred to and processed in countries other than your country of residence, including the United States where our third-party service providers (Google) operate data centers.

Where required, we rely on appropriate transfer mechanisms offered by the relevant provider, such as contractual safeguards or an adequacy decision. Contact us for information about the safeguards applicable to a particular request.

Additional information about Data collection and processing

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs).

How "Do Not Track" requests are handled

This Application does not support "Do Not Track" requests.
To determine whether any of the third-party services it uses honor the "Do Not Track" requests, please read their privacy policies.

Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last updated" date at the top of this policy
  • Provide notice through the app or other reasonable means
  • For significant changes affecting your rights, obtain your consent where required by law

We encourage you to review this policy periodically. Where consent is required for a material change, we will obtain it as required by law.

Contact us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Legal information

This privacy policy has been prepared to comply with applicable privacy laws and regulations, including:

Children's Privacy

Our App is intended only for people of legal drinking age in their jurisdiction and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided personal information through the App, contact us so that we can review and address the issue.

California Residents

California residents may have rights to know, access, correct, or delete personal information, and to be free from discrimination for exercising those rights. We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are defined by California law. Submit a request using the contact method above.

Scope: This privacy policy applies to the gotBottle mobile application on both iOS and Android platforms and does not cover any third-party websites, applications, or services that may be linked to or integrated with our app.

Data Sharing Summary

To be clear about our data practices: