Maison Apéro Privacy Policy

• Account / identity: your name, email, profile photo, a provider user ID from Google or Apple sign-in, and your public Maison ID. (Source: you / your sign-in provider.)
• Content you create: messages, group posts, public wine reviews & ratings, cellar entries (wines, vintages, notes, storage info), and photos you upload (including wine-label photos). (Source: you.)
• AI interactions: prompts, messages, and label/region photos you submit to the AI characters (Étoile / Méthode). (Source: you, when you use an AI feature.)
• Voice (optional): audio used for speech-to-text or text-to-speech, only when you choose a voice feature. (Source: you.)
• Usage, diagnostics & device: app activity, feature usage, app version, device model/OS, language, crash and performance data, and push token (FCM). (Source: automatic.)
• Approximate location: country, region, and city inferred from your public IP address for regional usage analysis. We do not request GPS coordinates for this purpose. (Source: automatic.)
• Advertising data: the Android Advertising ID (AD_ID), device/ad-interaction data, and ad diagnostics may be processed by Google AdMob when ads are requested. Firebase Analytics Advertising ID collection is disabled on Android.

We do not collect GPS-based precise location, and we do not require a phone number.

• Provide and operate the app (sign-in, messaging, community, reviews, cellar, AI features, and notifications).
• Generate the AI response or wine analysis you request and improve Maison Apéro using minimized or de-identified information where feasible.
• Measure usage, including broad regional usage, diagnose crashes/performance issues, secure the service, and prevent fraud or abuse (including App Check).
• Deliver, measure, and protect advertising through Google AdMob, including personalization only where permitted.
• Produce aggregated or de-identified insights for wine-maker or wine-school collaborations, subject to any required consent.
• Comply with legal obligations and enforce our terms.

We do not sell your personal data.

Legal bases under the EU/UK GDPR may include contract (creating and operating your account and providing requested features), legitimate interests (service security, fraud/abuse prevention, diagnostics, and service improvement), consent where requested (for example, processing that requires advertising consent in your region), and legal obligation where applicable.

Where processing relies on consent, you may withdraw it through the available app/device controls or by contacting us. Withdrawal does not affect processing already lawfully performed. You may also request deletion as described below.

We share data only with service providers acting on our behalf, with collaborators as described below, or where legally required:

• Google Firebase (Authentication, Firestore, Storage, Cloud Messaging, App Check, Analytics, Crashlytics, and Performance Monitoring) — account, hosting, messaging, security, analytics, and diagnostics infrastructure.
• Google Gemini AI — content you submit to AI features is processed to generate the requested response or analysis. We use a configuration intended to prevent your content from being used to train Google’s general-purpose models.
• Google AdMob — advertising delivery, measurement, personalization where permitted, and ad-fraud prevention.
• ip-api.com — lookup of approximate country, region, and city from the public IP address. The service necessarily receives the IP address used for the request; no account credential or user-created content is included in the lookup.
• Apple / Google — sign-in and store-managed subscription status where applicable.
• Wine-maker / school partners — aggregated or de-identified insights only, subject to any required consent.

We may disclose data if required by law. Because the app is not end-to-end encrypted, we can be compelled to disclose content to authorities.

• In transit: app content and Firebase traffic use TLS. The separate IP-based approximate-location lookup sends no account credential or user-created content. At rest: data held in Firebase is protected with AES-256 and Google-managed keys.
• Access is controlled by Firebase Security Rules and IAM (least privilege).
• This is not end-to-end encryption — see the notice at the top.

• Disappearing messages (IGF): time-limited messages are removed according to the selected timer and the app’s server-deletion cadence.
• Account deletion: use Account tab → Settings → Delete Account for immediate deletion, or use our public account/data deletion page if you cannot access the app. Account deletion removes associated active-service data.
• Specific data deletion: you can request deletion of selected data without deleting your account through the same public page.
• Limited retention: messages already delivered to other participants may remain as sent by “Deleted Account” unless the in-app delete-my-messages option is available and selected. A minimal email/Maison ID cooldown record prevents re-registration for 7 days. Reports, inquiries, moderation/audit records, legal records, and encrypted backup copies may be retained only as needed for their stated safety, legal, dispute, or backup purpose. Aggregated non-identifying statistics may remain.
• Processing time: in-app deletion is immediate. Verified web/email requests are processed within 30 days.

Depending on your region (EEA/UK GDPR, California CCPA/CPRA, and others), you may have rights to access, correct, delete, port, restrict, or object to processing, and to withdraw consent where consent is the legal basis. Exercise these rights through our public account/data deletion or contact pages, or email support@atlasassociates.io. You may also complain to your local data-protection authority.

Maison Apéro is an independent identity. Even if you sign in to Maison Apéro and to our other app Arc with the same Google or Apple account, we do not build or keep a mapping that links the two, and we do not correlate your Maison Apéro activity with Arc. For maximum separation, you may use a different account for Maison Apéro.

Maison Apéro is intended for adults of legal drinking age and is not directed to children. We do not knowingly collect data from children under the applicable age.

Your data may be processed in countries other than yours (for example, Google Cloud regions). Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

We will update this policy as needed and revise the “Last updated” date. Material changes that affect data collection will re-prompt consent in the app.