Legal

Privacy Policy

Version 1.0 · Published June 27, 2026 · Applies to the Sorbo mobile app (iOS and Android)

This Privacy Policy describes how Sorbo collects, uses, and protects your personal data when you use the Sorbo mobile app and related services.

Please read it in full. It is short and written in plain language.

1. Data Controller

The controller responsible for processing your data is:

2. What data we collect

2.1 Data you provide when signing up

Sorbo uses Google Sign-In or Apple Sign-In to create your account. We receive only:

• Your name (as it appears on your Google or Apple account)
• Your email address
• A unique identifier associated with your Google or Apple account

We do not receive your password, phone number, profile photo, or any other data from your Google or Apple account unless you have explicitly shared it.

2.2 Data you generate while using the app

All content you create inside Sorbo belongs to you. We process it solely to provide the service:

• Tasting notes: wine name, winery, vintage, type, region, grape variety, score, sensation radar, selected aromas, personal notes, and label photo (optional)
• Palate profile: statistical aggregate calculated locally from your saved tastings
• Table Mode rooms: room created, access code, and scores entered during the session
• Import history: count of imported wines (number only, not the CSV content)

2.3 Technical and usage data

Like any mobile app, Sorbo may generate technical logs including device type, OS version, app version, and anonymous session identifiers. These are used solely to detect and fix errors.

2.4 Subscription data

If you subscribe to the Premium plan, payment is handled directly by Apple (App Store) or Google (Google Play). Sorbo does not receive or store your payment card details. Through RevenueCat, we do receive the active or inactive status of your subscription to unlock Premium features.

3. How we use your data

• Service delivery: creating and maintaining your account, saving your tastings, calculating your palate profile, and enabling access to Premium features.
• AI-powered features (Premium plan): when you photograph a label, scan a restaurant wine list, or request the Palate Trainer analysis, the image or aggregated data is sent to the Anthropic API for processing. Your full tasting history is never sent.
• Table Mode: room data (scores, wine being tasted) is synchronised in real time among participants via Firebase Realtime Database and deleted when the room is closed.
• Support: if you email us at info@sorbo-app.com, we use your email address to reply.
• Service improvement: anonymous technical data to detect errors and improve the experience.

We do not use your data for advertising. We do not sell it to third parties. We do not build profiles for purposes other than delivering the service.

4. Third-party services that process your data

To deliver the service, Sorbo uses the following providers. All of them act as data processors and handle your data only on our instructions.

5. Legal basis for processing

The processing of your data is based on the following grounds under the General Data Protection Regulation (GDPR):

• Performance of a contract (Art. 6(1)(b) GDPR): we process your account and tasting data to deliver the service you have requested.
• Legitimate interests (Art. 6(1)(f) GDPR): anonymous technical data for security and service improvement.
• Consent (Art. 6(1)(a) GDPR): for optional features that involve sending data to the Anthropic API (menu scanning, label reading, Palate Trainer), which are activated by explicit user request.

6. Age verification

7. Your rights

Under the GDPR, you have the following rights regarding your data:

• Access: request a copy of the data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: delete your account and all your data. You can do this directly in the app under Profile → Delete account, or by writing to us.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Restriction: request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, write to us at info@sorbo-app.com. We will respond within 30 days.

You also have the right to lodge a complaint with the competent supervisory authority. If you reside in the European Union, you may contact the data protection authority in your country of residence.

8. Retention

We retain your data for as long as your account remains active. If you delete your account, your data will be erased within 30 days of the request, unless we are legally required to retain it for longer (for example, payment-related fiscal records).

Table Mode room data (scores, wine tasted) is automatically deleted when the room is closed.

9. Security

We apply reasonable technical and organisational measures to protect your data: all communications are encrypted using TLS, database access is protected by Firebase security rules, and API keys for third-party services are never stored in the client app code.

10. Changes to this policy

We may update this policy to reflect changes in the service or applicable law. If the changes are significant, we will notify you within the app or by email. The version date always appears in the header of this document.

11. Contact

For any privacy-related question or to exercise your rights, write to us at:

info@sorbo-app.com