BottleVault privacy policy

What we process

We process an account identifier and email, vault memberships, inventory data and changes needed for synchronisation. Private images are encrypted at rest and opened through short-lived links.

When you choose to use your current location, the device location is used only at that moment to suggest a vault address. Raw coordinates are not stored or synchronised; only the address you approve is saved.

AI and purchases

Only content you choose when tapping analyse is sent to the AI service. Apple or Google and our service verify purchases and credit balances; we do not store payment-card details.

Your choices

You can edit or delete vault content in the app and request access, correction or deletion of account data by email.

Delete account

Request deletion from the email address linked to the account. We may require appropriate verification before deleting account data.

Purposes, providers and retention

We use data to provide accounts, offline and real-time sync, shared vaults and invitations, AI analysis, purchases, support, fraud prevention, security and diagnostics. Data may include name, an address per vault, inventory and notes, images, membership and invitation data, reports and blocks, purchase and credit history, app interactions, diagnostic logs, and device or security identifiers.

Service processors include AWS for Cognito, API, database and S3, OpenAI only for content you submit to analysis, and Apple or Google for purchases and app or device integrity. Invited members can view content in their shared vault; data may be disclosed when required by law or security. Data is retained while an account or content is active and then for limited backup, security, fraud, accounting or legal periods. The service is for adults aged 18 or older. Updated 28 July 2026.