Privacy Policy

Cork is operated by the operator of corkapp.io, based in Switzerland. If you have questions about your data, contact us at emil@corkapp.io.

• Account data: email address and password (or Google account ID if you sign in with Google).
• Wine data: wines, tastings, notes, and cellar information you add to Cork.
• Photos: label images you upload for AI scanning. These are stored with your account and can be deleted at any time.
• Usage data: anonymous analytics (page views, feature usage) to help us improve Cork. We use PostHog, which is EU-hosted.
• Payment data: if you subscribe to Plus or Pro, Stripe processes your payment. We never see or store your card details.

We use your data to:

• Provide and improve Cork's features.
• Process payments for paid plans.
• Send transactional emails (password resets, account updates).
• Understand how Cork is used so we can make it better.

We do not sell your data. We do not show ads. We do not share your data with third parties for marketing purposes.

• Contract: processing your account and wine data is necessary to provide the service you signed up for.
• Legitimate interest: anonymous analytics help us improve Cork without impacting your privacy.
• Consent: marketing emails, if we ever send them, will only be sent with your explicit consent.

Your data is stored on Supabase servers in the EU (AWS eu-central-1, Frankfurt). Analytics are processed by PostHog, also EU-hosted. Payments are processed by Stripe.

We keep your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymized analytics data may be retained.

Under GDPR, you have the right to:

• Access your personal data.
• Correct inaccurate data.
• Delete your account and data.
• Export your data (Cork has a built-in PDF export).
• Object to processing based on legitimate interest.
• Withdraw consent at any time for consent-based processing.

To exercise any of these rights, email emil@corkapp.io. We will respond within 30 days.

Cork uses essential cookies for authentication and session management. We use PostHog for analytics, which may set cookies. We do not use advertising or tracking cookies.

• Supabase (database, authentication, storage)
• Stripe (payment processing)
• Anthropic (AI label scanning via Claude API)
• PostHog (analytics, EU-hosted)
• Resend (transactional emails)
• Google (optional sign-in via OAuth)

We may update this policy from time to time. If we make significant changes, we will notify you by email or through Cork.