Privacy at BIN 27.

Information BIN 27 handles

Account information. BIN 27 uses your email address and account identifier to create or restore an account, connect you to the correct cellar, and protect account access.

Cellar and other user content. This includes bottle records, storage locations, tasting notes, wine preferences, invited party content, and Community profile or safety activity that you choose to create.

Names and party locations. If you plan a wine party, you may enter a host name and an event location, including a physical address. Those details are linked to the host account and shared with people who receive that party's invitation.

Photos or videos. Label images that you capture or select may be used to read wine details and, when you save them, to display the private bottle record in your cellar. You can separately choose a wine photo for a Community post. A Community photo is linked to your profile and note, follows that note's audience, and is reviewed together with shared post text before publication.

Purchase history and other financial information. If you use Market planning, BIN 27 may store the wine, package, purchase status, private appraisal interest, or valuation information that you enter. BIN 27 does not collect payment card details or complete retailer checkout.

Retailer-link activity. When you open an external retailer from BIN 27, the service records the selected offer, click time, and click count with your account. BIN 27 uses this to operate the referral and verify a purchase claim that you choose to submit, not for advertising or cross-app tracking.

Fulfillment state. If you use Market, you may enter a two-letter U.S. state to filter available offers or save a private watch. BIN 27 stores that state with the related account activity. It does not request an address, precise location, or device location for this purpose.

Service and device information. BIN 27 and its infrastructure providers process standard request, security, and diagnostic information needed to deliver the service, prevent abuse, and investigate failures. Local preferences, such as app presentation settings, may remain on your device.

How information is used

Information is used for app functionality: authentication, cellar sync, label recognition, storage and readiness tools, guest access, Community, support, safety, and service security. Cellar content and wine preferences may also personalize bottle organization, recommendations, and other features inside BIN 27.

Where information is processed

BIN 27 keeps some information on your device. Its hosted service uses Cloudflare Worker, D1, and R2 infrastructure for application requests, cellar records, Community records, private label images, and optional Community post photos. Supabase Auth processes account sign-in and the email address and account identifier needed for authentication.

These providers process information for BIN 27 to operate the service. BIN 27 does not let them use your information for BIN 27 advertising.

When information is shared

Private cellar records are available only to authorized cellar members and scoped guests. Community content is shared only with the audience you choose and only after the applicable review. Reports are available to moderation and support personnel who need them for safety work.

BIN 27 may disclose information when required by law or when reasonably necessary to protect users, the service, or another person. If you choose to open an external retailer, that retailer receives the information you provide on its site and standard information from that visit. Its own privacy policy applies to checkout.

Your choices and controls

You can edit or remove cellar records through the available cellar controls. Community controls let you replace or remove a post photo, change an audience, withdraw or delete your tasting notes, block another collector, or leave Community. A cellar owner can revoke a guest link.

A signed-in account holder can request whole-account deletion in the iPhone app from Cellar, Account, Delete account. Once BIN 27 accepts the request, the app signs out, clears its saved account data, blocks further account access, and removes the profile and notes from public Community views. BIN 27 completes deletion within seven days and sends confirmation to the verified account email. Email josealvaradoou@gmail.com for access or correction help, but an email to support does not replace the in-app deletion request.

If the account is the last writable member of a cellar, deletion also removes that cellar's hosted records and saved private label images. A shared cellar remains when another non-deleting member has writable access; when the request is accepted, BIN 27 removes the departing membership and, if that account was the owner, immediately transfers ownership to the longest-standing surviving writable member. Account-specific records are then removed through the deletion process. Public Community profile and note content is redacted when the request is accepted. Shared catalog facts remain because they do not identify an account. Minimal records may remain only when required for security, legal obligations, or an unresolved safety matter.

Retention

Account and cellar information is kept while it is needed to provide the service and protect authorized shared-cellar access. Retention may continue when required for security, dispute resolution, or legal obligations. Private Market watches and retailer-link activity, including a fulfillment state you entered, and parties hosted by your account are removed under the account deletion process described above. A deletion request keeps the verified email only long enough to send completion confirmation, then removes it from the request record. A minimal identity and deletion-scope fence remains for 30 days after completion to reject credentials issued before the deletion request, then scheduled cleanup removes those request snapshots.

In Community, post photos become unavailable when their note is deleted and are scheduled for storage removal; user text is redacted when you delete a note or leave. Unreported tombstones are scheduled for removal after 30 days, resolved reports after 365 days, moderation audit records after 730 days, and orphan release records after 30 days. Minimal records tied to unresolved reports or a moderation removal may remain for the applicable safety hold.

Security

BIN 27 uses encrypted HTTPS connections, scoped credentials, access controls, and private-by-default sharing boundaries. No service can guarantee absolute security. Do not send passwords, access tokens, sign-in links, household PINs, invitation PINs, or payment details to support.

Children and alcohol

BIN 27 is designed for adults who manage wine and is not directed to children under 13. Market referrals in the United States require a user to confirm they are at least 21, and a retailer separately handles age verification, payment, shipping, and delivery. BIN 27 does not sell or ship alcohol.