Somma - Wine Pairing AI

1. Introduction

Somma ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (the "Service").

2. Information We Collect

Information You Provide

Account Information: Name, email address, and authentication credentials when you create an account
Photos: Images of meals and wine lists that you upload for analysis
Saved Pairings: Wine and food combinations you choose to save
User Preferences: Settings and preferences you configure in the app
Payment Information: Payment details processed securely through third-party payment processors

Automatically Collected Information

Usage Data: Information about how you interact with the Service, including features used and time spent
Device Information: Device type, operating system, unique device identifiers, and mobile network information
Location Data: Approximate location based on IP address (with your consent, we may collect precise location data)
Camera Access: Access to your device camera to capture photos (only when you actively use the photo feature)

3. How We Use Your Information

We use the collected information to:

Provide AI-powered wine pairing recommendations
Analyze meal and wine list photos to deliver the Service
Maintain and improve the Service functionality and user experience
Manage your account and subscription
Send you important updates, notifications, and promotional communications (with your consent)
Respond to your inquiries and provide customer support
Detect and prevent fraud, abuse, and security issues
Comply with legal obligations
Conduct analytics and research to improve our AI models

4. How We Share Your Information

We may share your information with:

Service Providers: Third-party companies that help us provide the Service, including AI/ML processing, cloud storage, analytics, and payment processing
Other Users: When you choose to share pairings with friends (only information you explicitly choose to share)
Legal Compliance: When required by law, court order, or government request
Business Transfers: In connection with a merger, acquisition, or sale of assets
With Your Consent: When you explicitly authorize us to share information

We do not sell your personal information to third parties.

5. AI and Photo Processing

Photos you upload are processed using AI services (including OpenAI and other machine learning providers) to identify meals and analyze wine lists. These photos are transmitted securely and are used solely to provide recommendations. We may retain photos to improve our AI models, but we anonymize data used for training purposes.

6. Data Storage and Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest. Your data is stored on secure cloud servers (Cloudflare R2 and other cloud infrastructure). However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

You have the right to:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your account and associated data
Opt-Out: Unsubscribe from marketing communications at any time
Data Portability: Request your data in a portable format
Withdraw Consent: Withdraw consent for processing where we rely on consent

To exercise these rights, please contact us through the app settings or our support channels.

8. Children's Privacy

Our Service is not intended for individuals under the legal drinking age. We do not knowingly collect personal information from anyone under the legal drinking age. If we discover that we have collected information from such individuals, we will promptly delete it.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Retention Period

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. When you delete your account, we will delete or anonymize your information within 90 days, except where we are required to retain it for legal or regulatory purposes.

11. Third-Party Services

Our Service uses third-party services including:

OpenAI for AI-powered analysis
Cloudflare R2 for image storage
Clerk for authentication
Analytics and performance monitoring services

These services have their own privacy policies, and we encourage you to review them.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information (note: we do not sell personal information).

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us through the app or via our website support channels.