Português

Privacy Policy — Garrafa Certa

Last updated: October 16, 2026

This Privacy Policy describes how the Garrafa Certa app ("app", "we") handles information related to your use of it. By using the app, you agree to the practices described here. If this English version and the Portuguese version differ, the Portuguese version prevails.

---

Summary

• Your cellar (wines, shelves, photos, notes) is stored only on your device. We do not keep this data on any server.
• The app does not require an account or sign-in.
• In the free version and with Lifetime Premium, the app works offline and nothing from your cellar leaves the device.
• The AI features of Premium IA (subscription) use the internet: only when you use one of them does the app send our cloud service what that request needs (for example, the label photo or a summary of your cellar). The request is answered and discarded; we do not keep your cellar, your photos or your conversations. Details in section 3.
• The free version shows ads (Google AdMob), which may collect device identifiers as described below.
• Premium and Premium IA purchases are processed by Apple, Google and RevenueCat; we have no access to your card details.

---

1. Information the app stores on your device

The data you enter is stored locally, in the app's own storage:

• Wine details (name, vintage, country, region, grapes, rating, alcohol, price, personal notes, quantity, drinking windows) and shelves;
• Price checks obtained with Premium IA (price range, stores and date);
• Photos of the wines you add;
• App preferences (theme, language, cellar currency and Premium purchase status).

This information is not sent to us or to third parties, except what is sent at your request in the Premium IA features (section 3). It stays on the device until you delete it in the app or uninstall the app.

Backup: the app lets you export a backup file (.json) of your cellar. This file is created at your request and shared by you, to the destination you choose (email, personal cloud, etc.). You are responsible for where you store it. We do not receive this file.

Automatic backup: with this option on (the default), the app keeps up to two recent copies of your cellar, with photos, on the device itself, plus a copy before importing, restoring or deleting data. On Android 10 or later, the most recent copy is also saved to the device's Downloads/GarrafaCerta folder. None of this is sent to us. You can turn the option off on the Backup screen.

System backup: the app's data is included in your device's own backup, if you use it — iCloud on iPhone; on Android, Google backup includes wines, shelves and preferences, without photos. This backup is made by Apple or Google, in your account, under their rules; we have no access to it.

2. Permissions

The app may ask for access to:

• Camera — to take a photo of a wine or its label;
• Photos / Gallery — to choose an existing image.

These permissions are used only when you use the feature. Wine photos stay on the device.

In the Lifetime Premium autofill assistant, the label photo is read on the device itself, using the system's text recognition and intelligence features (on iPhone, Apple Vision and Apple Intelligence; on Android, Google ML Kit and Gemini Nano, running on the device). The image and the text read are not sent to any server, ours or third parties'.

With Premium IA, the label is read in the cloud, as described in section 3. Without internet, the app falls back to on-device reading.

3. Premium IA (cloud AI features)

Premium IA features — cloud label reading (including several wines in one photo), pairing, sommelier, price checks and producer details — need the internet. Only in these features, and only when you use them, does the app send our cloud service (hosted on Cloudflare) the data that request needs:

• Label reading: the photo of the front and/or back label, or the photo of the shelf, reduced by the app before sending;
• Pairing and sommelier: what you wrote or chose (dish, occasion, question and the messages of the current conversation) and a summary of your cellar with each wine's name, vintage, type, country, region, grapes, price, quantity and drinking stage. Photos, personal notes and shelves are not sent;
• Price checks and producer details: the wine's name, vintage, country, region and grapes;
• In all of them: the app language and the market of your cellar currency (Brazil or US), to answer in your language and check prices at the right retailers; and the app's anonymous RevenueCat identifier (the same "Support ID" shown on the About screen), used to confirm the subscription and count the month's usage. It does not contain your name, email or phone number.

Our service forwards the request to Google Gemini (Google's API, paid tier), which generates the answer; price checks also use Google Search. Under the paid API terms, Google does not use this content to improve or train its models. Google's policy: https://policies.google.com/privacy · API terms: https://ai.google.dev/gemini-api/terms

What we keep. We do not keep your cellar, your photos, your conversations or your price checks: the request is used to generate the answer and then discarded. Only the following remain:

• An anonymous cache of results, not linked to you, to answer identical requests faster: a label reading, for up to 30 days, identified by a fingerprint (hash) of the image — the image itself is not kept; a wine's price check, for 7 days, identified by name, vintage and grapes.
• For each anonymous identifier: the subscription status (for a few minutes) and the monthly usage counter for each feature, to apply the plan's limits.
• The service's technical logs (date and time, feature called, errors and connection data such as the IP address), kept by Cloudflare for a few days for diagnostics and abuse prevention.

Without a Premium IA subscription, none of this happens: the free version and Lifetime Premium send no data to our service.

Answers are generated by artificial intelligence and may contain errors — double-check important information such as prices and drinking windows.

4. Ads (free version)

The free version shows ads through Google AdMob. To show ads, Google services may collect and process data such as the device's advertising identifier, IP address, device information and ad interaction data. This data is handled under Google's privacy policy:

• How Google uses data: https://policies.google.com/technologies/partner-sites

Consent and personalization: in regions that require it (including Brazil, under the LGPD, and the European Economic Area/United Kingdom, under the GDPR), we show a consent screen before serving personalized ads. You can choose non-personalized ads. On iOS, we also respect your choice in the App Tracking Transparency prompt.

Buying Premium or subscribing to Premium IA removes ads.

5. In-app purchases (Premium and Premium IA)

The Garrafa Certa Premium purchase (one-time payment) and the Premium IA subscription (monthly or annual, auto-renewing) are processed by the official stores — App Store (Apple) and Google Play (Google) — and managed with the help of RevenueCat, which validates the purchase receipt and determines whether Premium or Premium IA is active.

• We do not collect or store payment data (card number, etc.). This data is handled directly by Apple and Google.
• RevenueCat may receive an anonymous app identifier and receipt/subscription information to validate the purchase and allow restoring it on other devices. Our Premium IA service queries RevenueCat with this identifier to confirm the subscription. RevenueCat's policy: https://www.revenuecat.com/privacy
• The subscription is managed and canceled in your App Store or Google Play account.

6. Data sharing

We do not sell your data and do not share it, except as needed for the third-party services listed above to work (Google AdMob, Google Gemini, Cloudflare, Apple, Google Play, RevenueCat), each under its own privacy policy.

7. Retention and deletion

• Your cellar data stays on the device while the app is installed.
• You can delete wines and shelves at any time in the app.
• Uninstalling the app removes local data (including photos and internal automatic copies). On Android, the copy in Downloads/GarrafaCerta remains until you delete it.
• Backups you exported yourself remain under your control, wherever you saved them.
• With Premium IA, what stays on our service follows the periods in section 3. To delete the usage counter linked to your identifier, email the contact address with the "Support ID" shown on the app's About screen.

8. Security

We take reasonable measures to protect information. Premium IA requests travel encrypted (HTTPS). Since your cellar data stays on your device, its security also depends on the device's own protections (screen lock, system encryption, etc.).

9. Children's privacy

Garrafa Certa is about alcoholic beverages and is not intended for anyone under 18 (or the legal drinking age where you live, if higher). We do not knowingly collect data from children.

10. Your rights (LGPD / GDPR)

Depending on where you live, you may have rights such as accessing, correcting or deleting your data and withdrawing consent. Since we do not keep your cellar data on our servers, most of these rights are exercised directly in the app (edit/delete) or with the third-party services listed. For questions, contact us at the email below.

You can manage your advertising identifier in your device settings (Android: "Ads"; iOS: "Privacy & Security" → "Tracking").

11. International transfers

Third-party services (Google, Cloudflare, Apple, RevenueCat) may process data on servers located in other countries. By using the app, you acknowledge this processing under those providers' policies.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows the current version. Relevant changes may be announced in the app itself or on the page where this policy is published.

13. Contact

Questions about this Privacy Policy or your data:

Email: alexjfalcao@gmail.com