Privacy Policy

Last updated: 8 July 2026 · Effective: [launch date]

Savvi is a wine-companion service operated by [legal entity name] (“Savvi”, “we”, “us”), a company registered in Hong Kong with its address at [registered address]. This policy explains what personal data we collect through the Savvi iOS app and the Savvi web experience (together, the “Service”), how we use it, who we share it with, and the choices you have. We handle personal data in accordance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”).

Savvi is intended for adults of legal drinking age. You must be 18 or older to use the Service. We do not knowingly collect personal data from anyone under 18; if we learn we have, we will delete it.

1. Data we collect

Data you give us

Account details — email address and password, or the identifier provided when you sign in with Apple or Google; your name (if provided); your age (optional, used only to confirm you are of legal drinking age and to improve recommendations).
Taste data — your answers to the taste quiz, your palate profile, wines you like or pass on, wines you order, and venues you save.
Photos — pictures of wine labels or menus you take or upload. Label photos are stored in your private storage space; menu photos are processed to extract the wine list and are not linked to your identity beyond the request itself. If you attach a bank-transfer screenshot to confirm a payment, it is stored in your private storage space and viewed only to verify that payment.
Order & delivery details — when you buy a wine case: recipient name, delivery address, contact phone number, order contents, and order status. Shared with the fulfilling importer and courier solely to deliver your order.
Support correspondence — anything you send us at the contact address below.

Data collected automatically

Location (optional) — with your permission, your device location is used to show wine bars and restaurants near you and compute distances. Location is used at request time; we do not build a history of your movements.
Usage and technical data — API request counts per account (for rate limiting and abuse prevention), timestamps, and basic diagnostic information.
Web trial storage — the web experience stores your session and preferences in your browser (local storage). If you try Savvi on the web without creating an account, we create an anonymous account to hold your palate profile; it becomes a full account only if you choose to save it with an email or Google sign-in.

Data we do not collect

We never see or store your card details — card payments are processed entirely by Stripe. We do not collect contacts, health data, or advertising identifiers, and we do not sell personal data or show ads.

2. How we use your data

To operate the Service: authenticate you, keep your session signed in, and sync your data across devices.
To generate personal wine recommendations: your palate profile and ratings are combined with a venue's wine list to score and explain picks.
To read wine labels and menus you photograph, using AI image analysis.
To improve recommendation quality, prevent abuse, and keep the Service secure.
To respond to your support requests and comply with legal obligations.

We do not use your personal data to train AI models, and we do not use it for direct marketing. If that ever changes for direct marketing, we will ask for your consent first as required by the PDPO.

3. AI processing

Recommendations and label reading are powered by a third-party large-language-model provider. When you request picks or snap a label, the relevant inputs (the venue's wine list, an anonymised summary of your taste preferences, and/or the photo you submitted) are sent to that provider for processing and returned to us. These requests are not accompanied by your name or email address. General wine information (facts, images) is prepared in advance and stored on our servers, so most of what you see involves no live AI call at all.

4. Who we share data with

Recipient	Purpose	What they receive
Supabase (cloud platform)	Hosting, authentication, database, file storage	All Service data, encrypted in transit and at rest. Hosted in [Supabase project region].
AI model provider ([provider name])	Recommendations, label & menu reading	Wine lists, anonymised taste summaries, submitted photos
Apple / Google	Optional sign-in	Standard sign-in exchange under their own privacy policies
Google Maps Platform	Finding venues near you	Search coordinates for venue lookups (not your identity)
Stripe	Card payments for wine-case orders	Payment amount and order reference; your card details go to Stripe directly and never touch our servers
Importer & courier (per order)	Fulfilling and delivering your wine case	Recipient name, delivery address, phone, order contents

These providers act as our data processors and may store data outside Hong Kong. We do not share your personal data with venues, advertisers, or data brokers. We may disclose data if required by law or to protect the rights and safety of users and the Service.

5. Retention

Account and taste data — kept while your account exists; deleted when you delete your account.
Order records — kept for 7 years as required for Hong Kong tax and accounting purposes, even after account deletion (with personal details minimised where possible).
Anonymous web-trial accounts — kept so your profile survives the session; if never claimed, they are periodically purged after [e.g. 90 days] of inactivity.
Usage logs — kept up to 12 months for security and abuse prevention.
Backups — deleted data may persist in encrypted backups for up to [e.g. 30 days] before being overwritten.

6. Your rights and choices

Access & correction — under the PDPO you may request a copy of your personal data and correction of inaccuracies. Contact us at the address below; we respond within 40 days as the PDPO requires.
Delete your account — in the app: Profile → Delete account. This permanently removes your account, taste data, ratings, and uploaded photos from our systems.
Location — optional; disable it any time in iOS Settings. Nearby features simply stop working.
Camera & photos — used only when you actively snap or upload; revocable in iOS Settings.

7. Security

Data is encrypted in transit (TLS) and at rest. Access to user data is restricted by row-level security so each account can read only its own records. Session tokens on your device are stored in the iOS Keychain. No system is perfectly secure, but we notify affected users and the Privacy Commissioner where required if a material breach occurs.

8. Third-party content

Wine facts and imagery shown in the Service are informational. Venue details are drawn from the venues themselves and public sources; menu prices can change and are not guaranteed. Savvi provides recommendations for enjoyment, not health advice. Please drink responsibly.

9. Changes to this policy

We will post any changes here and update the date above. For material changes we will notify you in the app or by email before they take effect.

10. Contact

Questions, PDPO access/correction requests, or complaints:
[hello@sorso.app]
[legal entity name], [registered address]

You may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong (pcpd.org.hk).