Decant 隱私政策
生效日期：2026-07-11
Decant 是一款品飲記錄與品飲教育 App。本政策說明我們蒐集哪些資料、為什麼蒐集、與誰分享，以及你如何隨時刪除全部資料。我們只蒐集提供服務所必要的內容，且絕不將你的資料用於跨 App 或跨網站的廣告追蹤。
1. 我們蒐集哪些資料
下列為 Decant 蒐集的每一類資料。「連結到你」代表該資料與你的帳號身分（我們的使用者 ID）相關聯。我們僅蒐集提供服務所必要的項目。
- 電子郵件 — 用於無密碼一次性驗證碼登入；使用 Sign in with Apple 時由 Apple 提供（可能為私密轉發信箱）。用途：帳號與登入。連結到你：是。
- 姓名 — 若你選擇透過 Sign in with Apple 分享，作為顯示名稱，可為空白。用途：個人化。連結到你：是。
- 使用者 ID — 帳號的專屬識別碼；使用 Sign in with Apple 時，會在裝置安全儲存區保留 Apple 授權碼，供你刪除帳號時撤銷存取。用途：帳號、登入、刪除。連結到你：是。
- 購買紀錄 — 訂閱狀態（是否購買／續訂／取消進階方案、試用起始）。付款本身由 Apple 處理，我們不接觸信用卡資料。用途：進階功能權利。連結到你：是。
- 品飲內容 — 你輸入的品飲感想與筆記、0–5 評分、風味標籤，以及你的酒窖與品飲紀錄（含自訂酒款欄位如名稱／產區／酒精濃度）。用途：核心功能與個人化。連結到你：是。
- 年齡與地區聲明 — 你自我聲明「已達合法飲酒年齡」的確認、所選地區（台灣／香港／美國）與時間戳記。不蒐集出生日期。地區依裝置語系判定，非 GPS 定位。用途：法定年齡驗證。連結到你：是。
- 使用數據 — App 內互動事件（例如開啟 App、記錄一次品飲、瀏覽付費頁、開始訂閱、課程／測驗進度）與其屬性。用途：分析。連結到你：是。
- 診斷資料 — 當機報告與效能追蹤，用於維持 App 穩定。不與你的個人身分綁定。用途：穩定性。連結到你：否。
2. 我們不蒐集哪些資料
我們不蒐集：出生日期、精確或概略的 GPS 定位、通訊錄、健康／健身資料、廣告識別碼（IDFA）或任何廣告 SDK、信用卡資料、密碼、電話號碼、瀏覽紀錄，或金融帳戶資訊。
3. 我們不做廣告追蹤
Decant 不會跨其他公司的 App 或網站追蹤你，也不使用廣告識別碼（IDFA）、廣告聯播網或歸因 SDK。因此本 App 不會顯示 App 追蹤透明度（ATT）請求。上述每一項資料在 Apple 的 App 隱私標籤中皆標示為「未用於追蹤」。
4. 品飲筆記整理與味覺解讀
當你選擇「整理成一則品飲筆記」或請求較深入的味覺解讀時，你輸入的品飲文字（連同相關評分與酒款細節）會傳送給我們的處理服務供應商 Anthropic，以整理成結構化筆記或味覺描述。這是我們最敏感的對外流程，因為其中包含你親自撰寫的文字。所有此類處理皆在伺服器端進行，App 內不含任何相關金鑰。
此功能僅在你主動點選時才會傳送資料；未使用時，你的筆記只儲存在你的帳號中。
5. 資料處理服務供應商
我們不販售你的資料。為提供服務，以下簽約的處理者代我們處理資料；已傳送至這些供應商的資料，另受各該供應商自身的隱私政策規範：
- Supabase — 帳號、資料庫、檔案儲存（主要儲存）。
- Apple — 使用 Apple 登入。
- Anthropic — 品飲筆記與味覺解讀引擎（伺服器端）。
- RevenueCat — 訂閱管理。
- PostHog — 產品使用分析（第一方）。
- Sentry — 當機與效能診斷。
6. 刪除你的帳號與資料
你可以隨時永久刪除帳號：開啟 App 並前往「設定 → 刪除帳號」。此操作會永久移除你的個人檔案、酒窖、品飲紀錄、筆記、味覺檔案、使用／額度紀錄與學習進度，並在適用情況下撤銷你的 Apple 登入授權。
先前已傳送至我們處理者的資料（分析、當機診斷、訂閱管理，以及品飲筆記供應商），將依各該供應商自身的政策保留或刪除。
7. 年齡限制
Decant 是與酒精相關的 App，僅供所在地區已達合法飲酒年齡者使用（台灣、香港 18 歲以上，美國 21 歲以上）。首次啟動時須進行年齡確認。本 App 並非針對兒童設計，我們不會在知情下蒐集兒童的個人資料。
9. 本政策的變更
若本政策有重大變更，我們會更新本頁的生效日期，並在適當情況下於 App 內通知你。繼續使用本 App 即表示你接受更新後的政策。
10. 適用範圍
Decant 適用台灣《個人資料保護法》與香港《個人資料（私隱）條例》（PDPO）；美國使用者亦適用相關隱私規範。
Decant Privacy Policy
Effective: 2026-07-11
Decant is a wine-tasting journal and wine-education app. This policy explains what we collect, why, who we share it with, and how you can delete all of it at any time. We collect only what the service needs, and we never use your data for cross-app or cross-site advertising tracking.
1. What we collect
The list below covers every category of data Decant collects. “Linked to you” means the data is associated with your account identity (our user ID). We collect only what the service needs.
- Email address — for passwordless one-time-code sign-in; provided by Apple when you use Sign in with Apple (may be a private relay address). Purpose: account & auth. Linked to you: Yes.
- Name — your display name, if you choose to share it via Sign in with Apple; may be empty. Purpose: personalization. Linked to you: Yes.
- User identifier — a unique account identifier; with Sign in with Apple, an Apple authorization code is kept in the device secure store to revoke access when you delete your account. Purpose: auth, sign-in, deletion. Linked to you: Yes.
- Purchase history — subscription state (whether you bought / renewed / cancelled premium, trial start). Payment itself is handled by Apple; we never see card data. Purpose: entitlement. Linked to you: Yes.
- Tasting content — your typed tasting impressions and notes, 0–5 ratings, flavor tags, and your cellar & tasting log (including custom-drink fields such as name/region/ABV). Purpose: core features & personalization. Linked to you: Yes.
- Age & region attestation — your self-attested “of legal drinking age” confirmation, chosen region (TW/HK/US), and a timestamp. No date of birth is collected. Region derives from device locale, not GPS. Purpose: legal age gate. Linked to you: Yes.
- Usage data — in-app interaction events (e.g. app open, logging a tasting, viewing the paywall, starting a subscription, lesson/quiz progress) and their properties. Purpose: analytics. Linked to you: Yes.
- Diagnostics — crash reports and performance traces to keep the app stable. Not tied to your personal identity. Purpose: stability. Linked to you: No.
2. What we do not collect
We do not collect: date of birth, precise or coarse GPS location, contacts, health/fitness data, advertising identifiers (IDFA) or any ad SDK, payment-card data, passwords, phone number, browsing history, or financial-account information.
3. No advertising tracking
Decant does not track you across apps or websites owned by other companies, and uses no advertising identifier (IDFA), ad networks, or attribution SDKs. As a result the app shows no App Tracking Transparency (ATT) prompt. Every item above is declared “Not used for Tracking” in Apple’s App Privacy label.
4. Tasting-note tidying & palate read
When you choose to “tidy this into a tasting note” or request a deeper palate read, the tasting text you typed (with the related rating and drink details) is sent to our processing provider Anthropic to organize it into a structured note or palate description. This is our most sensitive external flow because it contains text you authored. All such processing happens server-side; no related key ships in the app.
This runs only when you tap it. When you don’t use it, your notes stay only in your account.
5. Service providers
We do not sell your data. To run the service, the following contracted processors handle data on our behalf; data transmitted to them is additionally governed by each provider’s own privacy policy:
- Supabase — auth, database, file storage (primary store).
- Apple — Sign in with Apple.
- Anthropic — tasting-note & palate engine (server-side).
- RevenueCat — subscription management.
- PostHog — first-party product analytics.
- Sentry — crash & performance diagnostics.
6. Delete your account & data
You can permanently delete your account at any time: open the app and go to Settings → Delete Account. This permanently removes your profile, cellar, tastings, notes, palate profile, usage/quota records, and learning progress, and revokes your Sign in with Apple token where applicable.
Data previously transmitted to our processors (analytics, crash diagnostics, subscription management, and the tasting-note provider) is retained or deleted under those providers’ own policies.
7. Age restriction
Decant is an alcohol-related app intended only for people of legal drinking age in their region (18+ in TW/HK, 21+ in the US). An age confirmation is required on first launch. The app is not directed at children, and we do not knowingly collect personal data from children.
8. Your rights & contact
You have the right to access, correct, or delete your personal data. Deletion can be done directly in the app (Section 6). For any privacy question or request, contact us:
Email: jaychou911014@gmail.com
Or visit our support page: decant-legal.vercel.app/support
9. Changes to this policy
If we make material changes, we will update the effective date on this page and, where appropriate, notify you in the app. Continued use of the app means you accept the updated policy.
10. Scope
Decant is subject to Taiwan's Personal Data Protection Act and Hong Kong's Personal Data (Privacy) Ordinance (PDPO); users in the United States are also covered by applicable privacy regulations.