Privacy Policy — WineMaker

App: WineMaker (Android — package com.winemaker.app)
Last updated: March 28, 2026

Version française · Subscription · Account deletion

1. Introduction

This policy describes how WineMaker (“the app”) processes personal data when you use it.

Data controller:
Tommy Gélinas

Privacy contact:
tgelinas@concepts3dg.com

By using the app, you agree to the practices below where required by law and subject to your choices (account, permissions, system settings).


2. Data we collect and how

2.1 Account and sign-in

2.2 Information you enter in the app

Depending on platform and subscription (see §2.11), data you save (recipes, production, inventory, calendar, profile, marketplace where applicable) is handled as follows:

Marketplace publishing on mobile may require an active subscription, depending on version and region.

2.3 Notifications

2.4 Ads (Google AdMob)

If ads are shown (unless you have purchased a “remove ads” option where available), Google may process ad-related data, including an advertising ID and technical or interaction data, under Google’s / AdMob policies and your device and Google account ad settings.

2.5 In-app purchases and subscriptions (Google Play)

Purchases and subscriptions use Google Play Billing; Google handles payment, billing, and lifecycle. We do not receive full card details; the app receives entitlement status to enable cloud sync, ad removal where applicable, etc. See §2.11.

2.6 Security and integrity (Firebase App Check)

The app may use Firebase App Check to reduce abuse and protect Google backends tied to the project.

2.7 Voice dictation

If you use voice dictation, audio or transcription may be processed by the device’s speech recognition services (e.g. Google on Android, Apple on iOS), depending on your device and settings. That processing is governed by the OS vendor and, where applicable, Google or Apple.

2.8 Data stored only on your device

Besides SQLite for winemaking data without cloud sync (or after local migration — §2.11), preferences (theme, reminders) use SharedPreferences, not synced unless stated.

2.9 Analytics (Firebase Analytics)

The app uses Google Analytics for Firebase for aggregated usage statistics (screen flows where routes are named, optional custom events, etc.). An Analytics user identifier may be linked to your Firebase UID (a technical ID, not your email). Google processes this data under its Privacy Policy. You can adjust personalized ads and related controls in your device and Google account settings.

2.10 Crash reporting (Firebase Crashlytics)

The app uses Firebase Crashlytics (Google) to receive crash reports and some unhandled errors on Android and iOS to improve stability. Reports may include stack traces, device type, app version, and, if you are signed in, the same technical user ID (Firebase UID) as for Analytics. In development builds, sending to Crashlytics is usually turned off to reduce noise. Google processes this data under its privacy policy. Declare Crashlytics in Google Play’s Data safety form (often under “diagnostics” / “crash logs”).

2.11 Subscription policy (Google Play)

Supplements §2.2, §2.4, and §2.5 for paid offers on Google Play.


3. Purposes of processing

We use data to:


4. Legal bases (including GDPR / UK GDPR)

Depending on the situation:


5. Recipients and processors

Data hosted in Firebase / Google Cloud is processed by Google Ireland Limited (or another Google entity depending on your region) as a processor or separate controller for specific services—see Google’s documentation.

Google Play, Google Payments, and AdMob also process data as controllers or joint controllers under their own policies.

We do not sell your personal data in the usual sense of “data sales.”


6. Transfers outside the European Economic Area

Google may process data in countries outside the EEA using safeguards allowed under applicable law (standard contractual clauses, adequacy decisions, etc.). See Google’s Privacy Policy.


7. Retention


8. Security

We use reasonable technical and organizational measures (authentication, server-side access rules, encryption in transit via HTTPS/TLS for Google services, etc.). No system is risk-free.


9. Your rights

Where GDPR, UK GDPR, or similar laws apply, you may have rights of access, rectification, erasure, restriction, objection, portability, and to withdraw consent where consent is the legal basis.

To exercise your rights: contact us at the email in section 1. You may also lodge a complaint with your local data protection authority (e.g. CNIL in France, www.cnil.fr; ICO in the UK, ico.org.uk).

Account deletion: In the Android app, open SettingsAccount and dataDelete account and data. This permanently deletes your Firebase Authentication account, your profile document in Firestore, recipes, production batches, inventory, and calendar events in Firestore, marketplace evaluations and replies tied to your account, local SQLite copies of those user documents, cancels local production reminders, and removes the push token from your Firestore profile when applicable. Firebase may ask you to reconfirm with password or Google. Not the same as canceling a subscription (§2.11). The web app does not offer this flow—email us (section 1). See account deletion.


10. Children

WineMaker is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe your child has provided data, contact us so we can delete it.


11. Changes

We may update this policy to reflect app or legal changes. The “Last updated” date at the top will be revised. For material changes, we may notify you in-app or by email when possible.


12. Useful links


This document is provided to support compliance efforts. It is not legal advice. Have it reviewed by a qualified professional if you operate in highly regulated sectors.