This Privacy Policy explains how Sakesho PTE LTD ("we", "us", "our"), the company behind the SakeYō app, collects, uses, discloses and protects your personal data when you use the SakeYō mobile application and related services (the "Service"). We handle personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and other applicable laws.
By creating an account or using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.
Who can use SakeYō
SakeYō relates to alcoholic beverages and is intended only for users who are of legal drinking age in their country of residence. The Service is not directed to children, and we do not knowingly collect personal data from anyone under the legal drinking age.
Information we collect
Account and authentication
- Email address — used to create and sign in to your account, verify your email, and send password-reset and service-related messages.
- Password — handled securely by our authentication provider (Supabase). It is encrypted and is not visible to us.
- Display name — a name shown on your profile. If you do not provide one, we may derive a basic display name from your email address.
- Third-party sign-in (optional) — if you choose to sign in with a provider such as Apple, Google or Facebook, that provider shares basic profile information (such as your name and email) with us in accordance with their own policies.
Your taste profile
When you take the taste-preference quiz, we collect your answers — your experience level and your preferences across flavour and style dimensions (for example dryness, acidity, body, and aroma). We use these to personalise your sake recommendations, and we update your profile as you rate and log sakes over time.
Age verification
Because SakeYō is for adults of legal drinking age, when you create an account we ask for your date of birth and country and confirm you meet the legal drinking age for that country before you can use the app. Providing your date of birth and country is required — we cannot grant access without it. We use your date of birth to confirm you are of legal drinking age and, if you wish, to send you a birthday greeting and reward in the app. You can view or change these details at any time in your account settings (Account → Your details).
Optional profile details
You may also optionally tell us your gender and state/region. These details are optional, default to undisclosed, and are never required to use any feature. We use them, together with your date of birth and country, to understand sake taste trends across our community (in aggregate) and to tailor your recommendations. You can view, change or remove these details at any time in your account settings (Account → Your details).
Your content
- Diary entries — sake name, brewery, classification, ratings, favourite status, aroma and taste tags, finish, serving temperature, occasion, a free-text location label, tasting notes, the date, vessel type, and any photo you attach.
- Cellar — bottles you add, including bottling and purchase dates, purchase price and shop, bottle volume, storage type, a shelf/location label, notes, and whether you enable a drink-by reminder.
- Ratings, favourites and saved items — bottles you rate or favourite, and articles you save.
- Communications — messages you send us, such as support requests and feedback.
Please note: the "location" you can add to a diary entry is free text that you type (for example "my apartment" or "a bar in Kyoto"). It is not your device's GPS location — see "What we do not collect" below.
Photos and camera
- Diary photos — when you choose to attach a photo to a diary entry, that image is uploaded to and stored on our servers.
- Label scans — when you scan a bottle label, the photo is sent to our servers to identify the sake. To do this we may use trusted processing services that help us recognise labels. If a bottle is not recognised, you may choose to submit the image to help us add it to our catalogue.
Usage and analytics
To operate and improve the Service, we collect information about how you use the app — for example screens you view, searches you run, labels you scan, sakes you rate, and which recommendations you open — together with basic technical information such as app version, device model and operating system. We assign your device a random identifier so we can understand activity before you sign in; once you sign in, this activity is associated with your account. We use this information to measure engagement, analyse sake taste trends (in aggregate), and improve our sake-matching recommendations. We do not use advertising tools, and we do not track you across other companies' apps or websites or build advertising profiles about you.
Referral source
If you open the app from one of our links or marketing campaigns, we may record which campaign or channel referred you, so we understand which efforts bring people to SakeYō. This is not linked to any third-party advertising profile.
Device permissions
- Camera — used only when you choose to scan a bottle label or take a tasting photo.
- Photo library — used only when you choose to attach a photo from your library to a diary entry.
- Motion sensors — the camera screen reads the accelerometer on-device to detect when your phone is steady before capturing a label. This is used for the camera experience only and is never transmitted or stored.
- Notifications — if you enable a drink-by reminder, the app schedules a local notification on your device. These reminders are generated on-device; we do not operate a push-notification server. You can turn notifications off at any time in your device settings.
How we use your information
- To create, secure and manage your account and keep you signed in.
- To personalise your recommendations, taste profile and food pairings.
- To store and display your diary, cellar, ratings, saved articles and saved events.
- To identify sakes from the labels you scan.
- To operate, maintain, secure, troubleshoot and improve the Service.
- To respond to your support requests and communicate with you about the Service.
- To understand how the Service is used, measure engagement, and analyse sake taste trends across our community in aggregate.
- To confirm you are of legal drinking age using your date of birth and country, and to use your details (including any optional gender and region) to tailor recommendations and, where you provide a birthday, send a birthday greeting and reward.
- To comply with legal obligations and enforce our terms.
We do not sell your personal data, and we do not use it for third-party advertising or cross-app tracking.
How your information is stored and shared
Your data is stored on our backend infrastructure and shared only with the service providers that help us operate the Service, and only as needed to provide it:
- Supabase — provides our authentication, database and file storage. It holds your account credentials, profile and the content you create.
- Cloud hosting (Vercel and related infrastructure) — hosts our application backend, which stores your taste profile, ratings, diary, cellar and related data, and serves images.
- Label-recognition processing — when you scan a label, the image may be processed by trusted services that help us identify the bottle.
- Product analytics — we use, or may use, a product-analytics provider (such as PostHog) to help us understand how the Service is used so we can improve it. Such providers process usage data on our behalf and do not use it for their own purposes.
- Third-party sign-in providers — if you choose to use them, as described above.
These providers process data on our behalf under agreements that require appropriate safeguards. We may also disclose information where required by law, to enforce our terms, or to protect the rights, safety and security of our users and the Service. Because some providers operate outside Singapore, your data may be transferred to and stored in other countries; where this happens, we take steps to ensure a standard of protection comparable to that required by the PDPA.
What we do not collect
- Precise or GPS location — the app does not request or collect your device location.
- Advertising identifiers (IDFA) — we do not collect them and we do not track you across other apps or websites.
- Advertising or cross-app tracking — we do not embed advertising SDKs and do not build advertising profiles or track you across other companies' apps or websites. (We do collect first-party usage analytics to operate and improve the Service — see "Usage and analytics" above.)
- Contacts, microphone or health data.
Data retention
We keep your personal data for as long as your account is active or as needed to provide the Service. When your account is deleted, we permanently delete or anonymise your personal data within 30 days, except where we are required to retain certain information to meet legal obligations.
Your rights and choices
- Access and correction — you can view and edit much of your information directly in the app, and you may request a copy or correction of your personal data.
- Account and data deletion — you can request deletion of your account and all associated data at any time by emailing support@sakesho.app from your account email address with the subject "Delete my account". We will permanently remove your profile, diary, cellar and saved data within 30 days and confirm by email.
- Withdraw consent — you may withdraw consent to our processing of your personal data, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may mean parts of the Service no longer work.
- Notifications — you can disable reminders at any time in your device settings.
To exercise any of these rights, email support@sakesho.app. We may need to verify your identity before acting on a request.
Security
We use reasonable administrative, technical and physical safeguards designed to protect your personal data against loss, misuse and unauthorised access, including encryption of credentials and secure, token-based sessions. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
Children
The Service is not intended for, and we do not knowingly collect personal data from, anyone below the legal drinking age. If you believe a minor has provided us with personal data, please contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
Contact us
If you have questions about this policy or how we handle your personal data, contact:
Sakesho PTE LTD
Email: support@sakesho.app