Sommi App – Privacy Policy

We respect your privacy. Here’s how we handle your data:

📸 Your photos: Used only to read wine labels or menu text. We do not sell or share your photos.
📝 Extracted text & wine info: We use this data to show ratings, improve the app, and build wine catalogs. We may also share aggregated insights (e.g. “most scanned wines”) with partners.
👤 Personal data: Your email and account details are only used to provide the service and keep you updated.
🗑️ Control: You can request deletion of your photos, account, or personal data anytime.
🚫 Age: You must be 16+ to use Sommi.

👉 This is a summary. Please read the full Privacy Policy below for details.

Effective Date: 2025-10-01. Last Updated: 2025-10-01

This Privacy Policy explains how Philip Grefe (hereby referred to as the “Service Provider”) collects, uses, and protects your information when you use the Sommi App (the “Application”).

By using the Application, you agree to the practices described in this Privacy Policy.

1. Information We Collect

When you use the Application, we may collect the following types of information:

Account Information: When registering, you may provide your email address and other optional profile details.
Photos and Uploads: When you take or upload photos of wine bottles, menus, or other content, we process these images to extract text and wine-related information.
Extracted Data: Text and structured information derived from photos (such as wine names, vintages, grape varieties, menu items, or other product details).
Usage Data: Information about how you use the Application (e.g., features used, device type, app version, crash logs).
Technical Data: IP address, operating system, and connection type (collected automatically to improve app stability and performance).

2. How We Use Your Information

We use the collected information for the following purposes:

To provide the Service – processing photos to show wine ratings, details, and links.
To improve the Service – analyzing extracted data to enhance search, recognition, and recommendations.
To build wine-related datasets – creating catalogs, databases, and insights based on extracted wine and menu information.
To share aggregated or anonymized insights – we may share or license aggregated, non-personal data (e.g., “most popular wines in Berlin”) with third parties.
To communicate with you – sending updates, notifications, or responding to support requests.
To comply with legal obligations – e.g., responding to lawful requests or preventing abuse.

👉 We do not sell or distribute your original photos. Only extracted, non-personal information may be used for business purposes.

3. Legal Basis for Processing

We process your data under the following legal bases (as required by the EU General Data Protection Regulation – GDPR):

Consent (Art. 6(1)(a) GDPR): When you upload photos and allow us to process them.
Contractual necessity (Art. 6(1)(b) GDPR): To provide you with the Application and its features.
Legitimate interests (Art. 6(1)(f) GDPR): To improve the Application, analyze trends, and develop new features.
Legal obligation (Art. 6(1)(c) GDPR): When required to comply with applicable law.

4. Data Sharing

We may share your data only in the following circumstances:

Service Providers: With trusted third-party services (e.g., hosting, analytics, AI processing) that help us operate the Application.
Aggregated Insights: With partners or third parties, but only in a way that does not identify you personally.
Legal Compliance: If required by law, regulation, or legal process.

We do not sell your personal data.

5. Data Retention

Photos: Retained only as long as necessary to process and extract information. After processing, photos may be deleted or stored securely for quality improvement (if applicable).
Extracted Data: May be stored indefinitely for cataloging, analytics, or business purposes.
Account Data: Retained as long as you maintain your account, or until you request deletion.

6. Your Rights (EU / GDPR Users)

As a user in the EU, you have the following rights under GDPR:

Access – request a copy of your personal data.
Correction – request correction of inaccurate data.
Deletion – request deletion of your personal data (“right to be forgotten”).
Restriction – request limitation of data processing.
Portability – request transfer of your data in a machine-readable format.
Objection – object to processing based on legitimate interests.
Withdrawal of Consent – where processing is based on consent.

To exercise your rights, contact us at 📧 p.grefe@gmail.com.

7. Data Security

We implement appropriate technical and organizational measures to protect your data. However, no system is 100% secure. You are responsible for securing your device and keeping your login credentials safe.

8. International Data Transfers

Your data may be processed outside the EU (e.g., by service providers such as cloud hosting). In such cases, we ensure adequate safeguards (such as Standard Contractual Clauses) are in place.

9. Children’s Privacy

The Application is not intended for individuals under 16 years of age (or the minimum legal age for consuming or purchasing alcohol in your jurisdiction, if higher). We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, please contact us for deletion.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If material changes are made, you will be notified within the Application or by other appropriate means.

11. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Philip Grefe 📧 p.grefe@gmail.com