Privacy

The short version: what happens in your cellar stays in your cellar.

Your cellar lives on your phone

Bottles, tasting notes, photos, fill levels, prices, and your palate profile are stored on your device. Tasting notes are polished by Apple's on-device intelligence when your hardware supports it — the audio and text never reach our servers or anyone else's.

Improving label reading

There's a setting — off unless you turn it on — that shares anonymous corrections when you fix a bottle the app auto-filled wrong. It sends only what the reader saw and what you changed it to, so we can teach it the bottles people actually own. It never includes the label photo, the price you paid, your name, or which cellar it came from, and the record carries no link back to you.

The House Read

A few Reserve Pro assists can leave your phone, and only when your device can't do the work on-device. If Apple Intelligence is available, the house sommelier's read of your palate is written entirely locally. If it isn't, we compose it on our server using Groq — and we send only the derived summary: your profile name, flavor-family levels, proof band, favorite regions, bottle counts, and your top-rated bottle's name. The same path can structure label OCR text and look up a bottle name you typed; never the label photo, never your tasting notes, never your member name. It isn't used to train anyone's model, and if a call fails the app quietly falls back to what it can do on your phone.

Membership

Private Reserve is members only. On iPhone you sign in with Apple; on Android, when the app is available, you sign in with Google. We store the sign-in provider's user identifier, your email (or Apple's private relay address), and the member name you set. If you join a speakeasy, the verdicts you choose to pin — bottle name, rating, flavor chips, and note — are visible to that room's members and no one else. Delete your account inside the app at any time and it all goes with you; the cellar on your device stays yours. No longer have the app? Request deletion here — that page also lists exactly what deletion removes and what stays.

The waitlist

If you joined the waitlist on this site, we store your email address for launch announcements only. It is never sold, shared, or enriched. Every email we send carries a one-click unsubscribe link that takes effect the moment you use it, and trey@fathomdev.io reaches a human if you'd rather just ask.

Tracking, scoped honestly

The app has no ads, no analytics, no fingerprinting, and no data brokers — we don't know what's on your shelf, and we like it that way. This website uses two measurement tools: the Meta pixel, to see whether our ads work, and Vercel Analytics, a cookieless page-view counter that identifies no one. Neither sees anything from the app, and joining the waitlist shares only the fact that a signup happened — never your cellar.

Drink responsibly

Private Reserve is a journal for people of legal drinking age. It does not provide health guidance, and nothing in the app should be read as encouragement to drink more — if anything, the oxidation guardian just wants you to enjoy what you already opened.

Questions

trey@fathomdev.io — a human reads it.

Last updated July 2026 · Fathom Dev