Pourly. ← Back to the wine list

05

Privacy.

The short version: this site collects your email if you hand it over and counts its visits, without cookies and without knowing who you are. The app keeps your photos on your phone, sends only the text it reads and your taste to our server so a sommelier model can pick a bottle, and stores nothing about you anywhere but on your phone. Purchases go through Apple. No cookies, no advertising, no data broker on the side.

Controller
Tedium Ventures UG (haftungsbeschränkt)
Winsstrasse 62
10405 Berlin
Germany
Email: pourly@tedium.ventures
Hosting & server logs
This site is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you visit, Netlify automatically processes technical data in server logs: your IP address, date and time of the request, the requested resource, and your browser's user agent. This is necessary to deliver the site and keep it secure; the legal basis is our legitimate interest in the reliable, secure provision of this website (Art. 6 (1) (f) GDPR). Netlify processes this data on our behalf under a data processing agreement (Art. 28 GDPR) and deletes log data after a short period. Where data is transferred to the United States, the transfer is safeguarded by the EU–U.S. Data Privacy Framework and/or EU standard contractual clauses.
Visitor statistics
We use Netlify Web Analytics to see how many people visit this site, which pages they open, which sites send them here and which countries visits come from. Netlify compiles these figures on its own servers from the server logs described above. No script runs in your browser and no cookie is set. Visitors are counted by IP address; what we see is totals for the past 30 days, never an individual visitor, and nothing in it identifies you. The legal basis is our legitimate interest in knowing whether the site is found and read (Art. 6 (1) (f) GDPR). Netlify processes the data on our behalf under the data processing agreement named above.
Closed beta
If you sign up for the closed beta, we process the email address you enter in order to send you an invite and occasional updates about the launch. The legal basis is your consent (Art. 6 (1) (a) GDPR). The form is delivered through Netlify Forms: your address and the technical data of your submission (IP address, date and time) are received and stored by our hosting provider Netlify, Inc. (see Hosting & server logs), which processes them on our behalf under a data processing agreement (Art. 28 GDPR). We use the address for nothing else and pass it to no other service. You can withdraw your consent at any time (reply to any email we send, or write to us), and we will delete your address. Your email address is not sold, rented, or passed to anyone else.
The Pourly app
The sections that follow describe the iOS app. The app has no accounts and no sign-in, so nothing in it is tied to your name or email. It contains no analytics, advertising or tracking software. What it processes, it processes to do the one thing you ask of it: read a wine list and recommend a bottle. The legal basis for all of it is the performance of that service at your request (Art. 6 (1) (b) GDPR).
Your permission
Before the app sends anything, it shows you what is sent and to whom, and asks you to agree. Nothing leaves your phone until you do. You can withdraw the permission at any time in Profile, under "What leaves your phone"; from then on the app sends nothing, and cannot recommend until you agree again.
Wine list photos
Photos you take or import in the app are read on your phone, using Apple's on-device text recognition. The photos themselves never leave the device and are not uploaded anywhere. Only the recognised text of the list (wine names, producers, prices) is sent to our server for the next step. The app asks for camera access solely to photograph lists, and never accesses the camera otherwise.
Imported ratings
Instead of describing your taste, you can start your profile from screenshots of a rating app such as Vivino or CellarTracker, or from photos of bottles you keep at home. These images are read on your phone in the same way and are never uploaded. The text recognised in them goes to our server so the sommelier can find the wines and your own ratings in it. That text is whatever the images show: besides wines and ratings it can include, for example, a user name or other people's names, so crop those out first if you would rather they were not sent. The wines you confirm become part of your taste profile on your phone; the server keeps nothing.
Your taste profile, ratings and notes
What you tell the app about your taste, the bottles you order, your ratings and any notes are stored on your phone only. There is no server-side copy and no account behind them. Each time you ask for a recommendation, the app sends your current taste profile, your recent ratings and your notes along with the read list, because the sommelier needs them to pick for you. Each time you rate a bottle or add a note, it sends that together with your profile so the app can show you what it learned. Nothing you type is sent for any other purpose.
Our server and Claude
The reading, the recommendation and the learning are computed by our server, which runs on Cloudflare Workers (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). The server holds no database: it receives a request, forwards it, returns the answer and keeps nothing, apart from the technical data Cloudflare processes to deliver any request (IP address, date and time). To stop scripted abuse, the server accepts at most twenty requests a minute from one IP address; Cloudflare keeps that count for the minute and nothing else. Our server passes the text of the list and your taste profile to the Claude model operated by Anthropic, PBC (548 Market Street, San Francisco, CA 94104, USA), which generates the recommendation and the learning notes. Under Anthropic's commercial terms, data sent through its API is not used to train its models and is retained only for a limited period for abuse detection, then deleted. Both providers process the data on our behalf under data processing agreements (Art. 28 GDPR). Where data is transferred to the United States, the transfer is safeguarded by EU standard contractual clauses and, where the provider is certified, the EU–U.S. Data Privacy Framework. Requests carry no name, email, device identifier or account; the model sees a wine list and a taste, not a person.
Storage and deletion
Everything the app remembers (your profile, your history, your ratings and notes) lives in the app's own storage on your phone and in your iCloud device backup if you have that switched on. Deleting the app deletes all of it. Individual entries can be removed inside the app: notes, learned adjustments and history entries each have their own remove or undo. Because our server stores nothing, there is nothing to delete on our side; data passed to Anthropic is deleted by Anthropic after its retention period.
Notifications
When you close the screen you show your server after "Order this one", the app offers to remind you the next morning to rate the bottle. This is a local notification scheduled on your phone; no push server and no third party is involved, and you can decline the permission without losing anything else.
Purchases
Your first three lists are free. Pourly Unlimited, the subscription for every list after that, is sold through Apple's App Store. Apple processes the payment under its own terms; we receive no payment details and no Apple ID. Whether Unlimited is active, and how many of your free lists you have used, the app checks and counts on your phone. Our server is not involved.
App Store & TestFlight
The app is distributed through Apple's App Store, and test versions through Apple's TestFlight. What Apple processes when you download, update, buy or test the app is governed by Apple's own privacy policy and terms. If you have agreed on your iPhone to share analytics with app developers, Apple passes us crash reports and usage statistics in aggregated or anonymised form. Feedback you send through TestFlight reaches us with the email address of your TestFlight account.
Fonts
The fonts on this site (Newsreader, Spline Sans Mono) are hosted on our own server and delivered together with the rest of the site. No connection to a third-party font provider is made when you visit, and no data is transmitted to one.
Cookies & tracking
This site sets no cookies and uses no tracking pixels and no advertising. Its only statistics are the anonymous visit counts described under Visitor statistics, which need no code in your browser. The palate test on the homepage runs entirely in your browser: your answers are neither sent anywhere nor stored, and they are gone when you close the tab. Sharing or saving your result happens on your device: the share menu, a copied link, or an image of your card drawn in your browser. Nothing goes to us. If you have signed up for the closed beta, your browser remembers that locally so we don't ask you twice; that entry stays on your device and is sent nowhere. Nothing here identifies or profiles you.
Contact by email
If you email us, we process the personal data you provide (your address and the content of your message) to handle the conversation. The legal basis is Art. 6 (1) (b) GDPR where your inquiry relates to entering a business relationship, otherwise our legitimate interest in answering you (Art. 6 (1) (f) GDPR). We keep correspondence only as long as needed for that purpose, unless statutory retention obligations require longer storage.
External links
This site links to external websites, including the App Store and our parent company. Once you are on another site, that site's privacy policy applies.
Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), withdrawal of consent (Art. 7 (3)), and objection to processing based on legitimate interests (Art. 21). To exercise any of these rights, email pourly@tedium.ventures. You also have the right to lodge a complaint with a data protection supervisory authority; the authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI), Alt-Moabit 59–61, 10555 Berlin.
Automated decisions
The app's recommendations are generated automatically from the list you scanned and the taste you described. They are suggestions for what to order and have no legal or similarly significant effect on you (Art. 22 GDPR does not apply); you can ignore them, correct a price, or undo anything the app learned. This website makes no automated decisions and does no profiling.
Last updated: 8 October 2026.

Questions about any of this? pourly@tedium.ventures

Home Imprint Deutsch
© 2026 Tedium Ventures