Privacy Policy

Updated 28 October 2026. Replaces the policies of 2 October, 16 September, 6 September and 12 June 2026.

This policy is issued by UNHYPED PTE. LTD. (UEN 202633592D), 160 Robinson Road, #14-04 Singapore Business Federation Center, Singapore 068914, the organisation responsible for your personal data under Singapore’s Personal Data Protection Act 2012 and, if you are in the European Union, the European Economic Area or the United Kingdom, the controller of your personal data under the EU and UK General Data Protection Regulation (GDPR). Our Data Protection Officer can be reached at [email protected].

Unhyped helps you discover wine. This policy covers the Unhyped mobile app; our websites unhyped.wine and unhypedwine.com and the merchant storefronts we host on their subdomains; terroirists.com; and our regional sites (burgundata.com, champagnedata.com, rhonedata.com, bordeauxdata.com, napavalleydata.com and vintelligence.dev). It explains what we collect, why, who processes it on our behalf, and your choices. We do not track you across other apps or websites, we show no advertising, and we do not sell your data.

What we collect

Account email & password: when you create an account, to sign you in, sync your saved wines, and send you service emails (account verification and password resets). Your password is stored only as a one-way cryptographic hash: we cannot read it. You can browse and use the sommelier without an account. If you choose Continue with Apple, Apple sends us the name and email you approve (the email may be an Apple relay address) and a unique identifier for your Apple ID; we use them only to create and sign in to your account. Google sign-in on our website works the same way.
Scan photos: when you scan a wine label or list, the photo is sent to our service and then to our third-party AI provider, Anthropic (anthropic.com), whose servers are in the United States, to read the wines from the image. The photo is used only to answer that request; it is not stored against your account or kept by us after the scan. This means your scan photo is processed outside Singapore (see “Overseas processing”).
Questions: what you type or say to the sommelier, and the answer. The text of a question is sent to Anthropic, which writes the answer from our land data.
Voice input: when you ask the sommelier by voice, your speech is transcribed on your device using Apple's speech recognition. The audio is processed locally; it is not sent to us or any third party, and is not stored: only the resulting text becomes your question (handled like any typed question above).
Date of birth: required when you create an account, to confirm you are of legal drinking age (18+). We do not create accounts for anyone younger.
Profile details (optional): if you choose to fill in your profile: your name, phone number, address, country and preferred language. These are optional and never required to use Unhyped. We use them to personalise the product and to pass your name with a wine enquiry you choose to send. If you tick the marketing box we may send you rare finds and event invitations; you can untick it at any time and we record when consent was given or withdrawn.
Location: two separate, optional uses. (1) If you grant location permission, a scan can carry the place it happened so your history is more useful. (2) If you switch on Arrival recognition in the app, your device watches for our partner wine merchants entirely on your phone: that location processing never leaves your device and is never sent to us. Both are off until you enable them, and you can turn them off in your device Settings at any time.
Usage & activity: the searches and questions you run, wines you save, scans you submit, enquiries you send, and the wines shown to you in results. These are recorded as individual events and may also be aggregated for analytics. This happens whether or not you are signed in.
App identifier: the app creates a random identifier the first time it opens and sends it with each request. It is not Apple's device identifier and not an advertising identifier. It keeps your history together on that phone, joins it to your account when you sign in, and helps us keep the service secure.
Technical logs: when you use Unhyped we automatically log your IP address, your device/browser type (user-agent), an approximate location derived from your IP address (country, region, city, postal code area, the approximate coordinates of that area and time zone), and a session identifier. The approximate location is worked out by Cloudflare, the network that carries requests to our servers; your IP address is not sent to any other lookup service. We use this to run and secure the service, to understand where Unhyped is used, and to show the right market, currency and legal notices: never for advertising.
Enquiries to merchants: when you send an order enquiry from a storefront, the details you enter (name, contact, the wines) go to that merchant so they can respond. The merchant handles them under its own responsibility for that purpose.
Website analytics: our websites use Cloudflare Web Analytics, which counts visits without cookies and without identifying you. The Unhyped app uses no advertising or analytics SDKs and requests no advertising identifier.
Contact forms: on our sites, the name, email, company and message you type are sent by our own server to our mailbox and kept there for as long as the enquiry is open.
Newsletters: for The Terroirists letter and our merchant and investor letters, your email address, the date you subscribed, and whether you opened a letter, held until you unsubscribe. Every letter carries a one-click unsubscribe. Subscription uses double opt-in.
Merchant applications: the business, contact and licence details a merchant gives us when applying, kept for the life of the account and two years after.

How we use it

To read wines from your scans, answer your questions, provide recommendations, keep you signed in, sync saved wines across your devices, secure the service against abuse, and improve the product. We do not use your data for advertising, and we request no advertising identifier (IDFA).

AI

Answers in Unhyped are written by an AI model (Anthropic’s Claude) from our land data. We make no decision about you by automated means that has legal or similarly significant effects on you.

Who we share it with (service providers)

We share data only with service providers that process it on our behalf to run Unhyped, under terms that bar them from using it for their own purposes or for advertising:

Anthropic (United States): reads the wines from your scan photo and writes the answers to the questions you type or say, for that request.
Google (United States): finds the name of the place where a scan happened from its coordinates, when you have allowed location; and Google sign-in on our website, if you choose it.
Apple (United States): Sign in with Apple, if you choose it.
Resend (resend.com): delivers our service emails, our newsletters and the messages sent through our contact forms; receives your email address and the message.
Cloudflare, Inc.: hosting, network security and cookieless analytics for our websites; sees the network address of every visitor and works out the approximate location described above.

We use no third-party advertising or tracking SDKs, and the app carries no analytics SDK.

Overseas processing

Our own servers are in Singapore, and most of the providers above are in the United States. Where personal data is transferred overseas, we take steps so that it receives a standard of protection comparable to that required by the Singapore Personal Data Protection Act (PDPA). For personal data from the EU, the EEA and the UK, each provider protects it with the safeguards the GDPR requires: the EU-US Data Privacy Framework (with its UK extension for data from the UK) where the provider is certified under it, and otherwise the European Commission’s standard contractual clauses (with the UK addendum for data from the UK).

Your choices & deletion

You can delete your account at any time: in the app, open Account → Delete account. This deletes your account record, your saved wines, and your active sessions; unlinks your past activity from your account by removing your account identifier from our event and analytics logs; and removes your email address from those logs.

Some non-identifying technical records: such as IP addresses, device/browser type, approximate location (country/city), session identifiers, timestamps, and the text of past questions: are retained in de-identified form for security, fraud prevention, billing and aggregate analytics, and are not linked back to you. You can also email us to request deletion.

Data retention & security

Account and profile: until you delete your account.
Sign-in sessions: until 7 days after they end.
Scan photos: not kept after the scan.
The place of a scan: exact for 30 days, then rounded to about 1 km.
Which wines were shown to people without an account: 90 days, then daily totals only.
Newsletters: until you unsubscribe.
Usage, technical logs and the text of questions: kept to run, secure and improve the service. When you delete your account they are unlinked from you, as described above.

Connections use HTTPS.

Your rights

You can see and correct everything you have given us on your profile page (Profile → Account). You can withdraw marketing consent there at any time. You can ask us for access to, correction of, or deletion of your personal data by email; we respond within the timelines required by the Singapore Personal Data Protection Act. If you are in the EU, the EEA or the UK, the next section sets out your rights there.

If you are in the EU, the EEA or the UK

UNHYPED PTE. LTD. is the controller of your personal data. Our representative in the European Union (GDPR Article 27) is Joseph Matthews, Bakkegårds Alle 1, 6000 Kolding, Denmark. You, and any data protection authority, may write to our representative about anything in this policy, as well as to us. Our representative in the United Kingdom is being appointed and will be named here; until then, if you are in the UK, write to us at [email protected].

What we use your data for, and the legal basis:

Your account (email, password, date of birth, and what Apple or Google sends if you sign in with them): to create and run the account you ask for. Basis: contract. Confirming that you are 18 or over is also our legitimate interest in keeping a wine service for adults.
Scans and questions (the photo, the text of your question and the answer): to answer you. Basis: contract.
The place of a scan: only if you allow location on your phone. Basis: consent, which you can withdraw in your phone’s Settings at any time.
Optional profile details: to personalise the app. Basis: contract. Marketing emails and newsletters: basis: consent, which you can withdraw at any time.
Usage and activity, technical logs, the app identifier and the approximate place worked out from your IP address: to run, secure and improve the service, keep your history together and show the version and notices for your country. Basis: our legitimate interests in these purposes, which we have weighed against your interests and rights. You can object at any time.
Contact forms: to reply to you. Basis: legitimate interest.

What you must give us. An account needs an email address and a password (or Sign in with Apple) and your date of birth; without them we cannot create one. Everything else is optional.

Your rights. You can ask for a copy of your personal data, have it corrected or deleted, restrict or object to its use (including anything we do on the basis of legitimate interests), and receive it in a portable format. Where we rely on consent you can withdraw it at any time, without affecting what we did before. Delete your account in the app (Account → Delete account) or write to [email protected]. We answer within one month.

Complaints. You can complain to the data protection authority where you live or work, or where you think the problem happened: in France, the CNIL (cnil.fr); in the UK, the Information Commissioner’s Office (ico.org.uk). We would welcome the chance to put things right first.

Changes to this policy

If we change what we collect or how we use it, we will update this page and its effective date before the change takes effect. Material changes will be flagged in the app.

Children

Unhyped is intended for users of legal drinking age (18+).

Contact

Questions, access or correction requests, or anything for our Data Protection Officer: [email protected], or by post to UNHYPED PTE. LTD., 160 Robinson Road, #14-04 Singapore Business Federation Center, Singapore 068914. We respond within 30 days.