Your notes stay yours.

What we collect

• Account details such as your email address and authentication records.
• Optional profile details, saved places, wine preferences, and newsletter choices.
• Wine tasting notes, restaurant visits, ratings, comments, prices, search history, and chat history that you choose to save.
• Label photos, voice recordings, and transcripts when you use Tipsy Note features.
• Feedback details and limited technical information needed to operate and secure the service.
• When Google Analytics is enabled, page paths and named product actions such as saving a note or using search — never tasting notes, chat text, photos, emails, or search queries.

How we use it

We use this information to provide your account, save your private journal, improve recommendations, operate merchant features, answer support requests, prevent abuse, and maintain the service. Records and media are private by default. A record is included in public community views only when you explicitly choose to share it.

AI and service providers

If you use label scanning, voice transcription, Pairing Stylist, AI recommendations, or WSET conversion, the relevant text, image, audio, or preference data is sent to Gemini through our server, with Mistral available as a text fallback when configured. Supabase provides authentication, database, and private file storage. Vercel hosts the web application. Google Analytics (when a measurement ID is configured) receives page paths and named product events so we can see which screens and actions are used; advertising features and Google Signals stay off, and notes, chat, photos, and emails are not sent. Free-tier provider terms and data-use policies can change, so do not submit information you do not want processed by the selected provider. We configure these providers with server-only credentials, access controls, and private storage policies, and require processors to protect data on our behalf.

City weather

The home weather report defaults to Hong Kong. If you choose, you can set a city such as Tokyo or Seoul — not a street address, and not GPS. We ask on first visit and whenever you use this control. “Use my city” reads a city hint from the hosting platform (for example Vercel’s city header). Tipsy Club does not store your IP for this feature. Your yes/no choice and city name stay on this device in local storage. The host still sees connection metadata as part of serving the page.

Cookies and sessions

The current beta uses the Supabase browser session to keep you signed in and sends access tokens to protected API routes. We do not put tasting notes, profile details, or chat contents in cookies. When Google Analytics is enabled, the browser may store first-party analytics cookies such as _ga so we can tell returning visits apart. Those cookies are used for product analytics, not advertising, and advertising features stay off. Your browser may retain the authentication session until you sign out or it expires.

Sharing, retention, and control

In this beta, profile, tasting, dining, purchase, search, and chat records are kept while your account remains active and are removed when you delete the account. Accounts inactive for 24 months may be reviewed for deletion after notice. Support records are kept for up to 24 months after closure, server security logs for up to 30 days, and rate-limit counters for up to 2 days. Provider backups may retain encrypted copies for their configured backup window. You can correct your profile, export account data from the profile area, or request permanent account deletion. Public content that you intentionally shared may need a short propagation period to disappear from caches or backups.

Security and questions

We use HTTPS, Supabase row-level security, owner-scoped private storage, signed media URLs, server-only secrets, rate limits, and access logging. No online service can promise zero risk, so please do not save information that you would not want processed by the features you choose.

For an access, correction, deletion, or privacy question, submit a report through Feedback. See the beta terms for service conditions.