Privacy Policy
Artisan Wine Maker
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Artisan Wine Maker stores the wine batches, recipes, ingredients, fermentation readings, planned events, tasting descriptions, scores, shopping items and selected photos that you enter. These records, pending changes and a pending cloud-deletion marker are stored in SwiftData on your device and are automatically copied to our PostgreSQL backend when connectivity is available. A random installation secret is stored in the device Keychain; the server stores its SHA-256 digest and an installation identifier to separate your records. Your optional winemaker name, unit preference and reminder preference stay on the device. The system photo picker gives the app access only to photos you select. Selected images are resized and encoded as JPEG without retaining the original photo metadata. Hosting receives network information, such as request time, IP address, endpoint and response status, when you use the API or public policy pages. We do not request location, contacts, advertising identifiers or user accounts.
How we use information
Records and photos provide your batch journal, fermentation charts, recipes, tasting comparison, pantry calculations and shopping list. The installation key authorizes your private cloud copy and synchronizes changes using modification timestamps. Device preferences customize the journal. Opt-in local notifications remind you about readings and planned events; reminder text may include your batch or event name. Network and limited operational error information support service operation, security, troubleshooting and availability. No analytics, advertising, payment or email-delivery SDK is included.
Service providers and sharing
The application backend and PostgreSQL database are hosted on Railway, which processes network requests and infrastructure information to operate the service. The application logs request identifiers and error classifications rather than journal payloads or installation secrets. Railway may retain infrastructure and request logs under its hosting practices; we do not assert a fixed retention period for those logs. There are no advertising, analytics, social sign-in or messaging recipients. When you export JSON, the copy is saved to the destination you select through the system Files interface and may be handled by a storage provider you choose. Photos and notifications also use Apple system services on your device.
Data retention
Local records remain until you delete them or remove the app, subject to your device and backup settings. The cloud copy remains associated with the installation until a successful deletion request. Deleting an individual record creates a synchronization tombstone so older changes cannot restore it; tombstones and their remaining journal fields remain until installation deletion. There is no automatic expiry of active installation records. No application-managed backup schedule has been configured. Device or infrastructure backup copies, if present, follow the applicable provider lifecycle; an application deletion request does not directly erase those copies. We do not promise an unverified backup or infrastructure-log retention duration.
Deleting your information
Settings provides Delete All Data. It removes the local journal, optional winemaker name and scheduled notifications, and requests deletion of the installation and all of its records from the server. While offline, the deletion request remains pending and is retried when the app can connect. The old key is cleared after server deletion succeeds or is already revoked. A later journal starts with a new installation key. Exported JSON copies, system backups and any copies you shared are outside this deletion action and must be removed separately. Individual record deletion is synchronized as a tombstone. Removing the app alone does not send a server deletion request, so use Delete All Data first when possible. We cannot retrieve a cloud copy after its installation secret has been lost.
Permissions and your choices
Photo attachment uses the system photo picker and does not require access to your entire photo library. You can stop choosing photos or remove an attachment from its record. Local notifications are requested only when you enable reminders in Settings; turn reminders off in the app or withdraw notification permission in iOS Settings to stop future reminders. Notification denial does not prevent journal use. The app does not use the camera, microphone, geographic maps or location permissions.
Your privacy rights
You can view and edit your journal, export it as JSON, remove individual entries and request deletion of the installation through Settings. For privacy questions or applicable access, correction or deletion rights, contact Bram801Mowbray@icloud.com. This address is a public privacy contact; the app has no email sending or support form. Applicable rights depend on your location. Because there are no accounts and we do not know your identity, we may need enough information to verify control of the relevant installation; do not send your installation secret in email. Losing the secret prevents identification and recovery of its private cloud data.
Security
The client uses HTTPS for the public API and stores the installation secret in Keychain with a device-only accessibility setting. The server keeps only a digest of that secret and checks it on private operations. Database operations are scoped to the authorized installation and synchronization writes use transactions. Input size limits and request limits reduce accidental and abusive load. Database credentials are held in Railway environment configuration and are not embedded in the app. These measures reduce risk but cannot guarantee absolute security; protect your unlocked device and exported files.
Children’s privacy
Artisan Wine Maker is intended for adults of legal drinking age who maintain a home winemaking journal. It is not directed to children, and we do not knowingly seek information from children. If you believe a child has provided data, contact the privacy address so the circumstances and available deletion options can be assessed.
Changes to this policy
We may update this policy when application features, processing or hosting practices change. The current policy is available from Settings and at this public privacy page, with its effective date. Material processing changes will be reflected in the policy and, where appropriate, communicated within the app. Please review the policy when updating the application.