Tasting Notebook Privacy Policy

This policy explains how Tasting Notebook (the app also known as Provning) handles information. The data controller is IT24 Develops AB, Vårhemsplatsen 4, 302 37 Halmstad, Sweden. Contact us at info@it24develops.com.

Data on your device

Tastings, notes, photos and saved locations are stored locally on your device. You can delete individual tastings in the app. Local data is removed when you delete it or uninstall the app, subject to backups controlled by your device.

IT24 account and cloud sync

You can sign in or create a shared IT24 account using email, Apple or Google through AWS Cognito. Cognito processes an account identifier and, when supplied by the provider, your email and profile name. When you are signed in, tastings without photos, folders, cellar and wishlist entries are stored in IT24's encrypted AWS database so they can sync between devices. Bottle photos remain on the device and are excluded from account sync.

Shared QR tastings

A host can share a tasting through a QR join code. The service stores the session, participant account identifiers and each participant's ratings so duplicate submissions can be prevented. Other participants receive aggregated results, not the identity attached to an individual rating. A display name may be used for session participation but is not shown with an individual rating. You can remove your Provning cloud data and shared ratings from Settings.

Optional permissions

Camera and photo-library access are used only when you choose to capture or select bottle, dish, wine-list or QR content. Location access is used only when you choose to save a tasting location or view tastings on the map. Notification access is used only for drinking-window reminders you create. You may deny or revoke permissions in your device settings.

AI features

When you explicitly request bottle information, food pairing or wine-list analysis, the images and relevant tasting, taste-profile or cellar context you selected are transmitted over an encrypted connection to api.it24.company. IT24 processes them to provide the analysis and does not persist the image, question or answer content in the app backend. OpenAI processes the content as a service provider to generate the response. API content is not used to train models by default. OpenAI may retain content for up to 30 days for abuse and security monitoring unless longer retention is legally required. Product details may also be sent to Systembolaget's product service when a supported product match is requested.

Maps and technical data

The iOS app uses Apple Maps and the Android app uses Google Maps, together with platform location and geocoding services. These providers may process location, IP address, device or SDK identifiers, map interactions, diagnostics and crash data to deliver, secure and improve their services under their own privacy policies.

Purchases and AI credits

Optional credit packs are processed by Google Play on Android and Apple on iOS. IT24 does not receive your full payment-card number. The app receives purchase status and product information needed to grant credits. Redeemed vouchers are recorded as a cryptographic hash with limited technical information to prevent reuse.

Sharing and legal basis

Information is shared only with service providers required for the feature you select. Processing is based on performing your request, our legitimate interest in providing a secure and reliable app, and your choice or consent for optional permissions where required. We do not sell personal data or use third-party advertising.

Retention, security and international transfers

Online communication is encrypted using HTTPS and cloud records are encrypted at rest. Account data and shared tasting records are kept while needed to provide your account and the sessions you use. IT24's backend does not retain AI images, questions or answers. Limited security logs, purchase records and voucher records are kept only as long as needed for security, troubleshooting, accounting or abuse prevention. Providers may process data outside the EU/EEA using applicable legal safeguards.

Deletion and your rights

You can delete individual local tastings in the app. Settings lets you either delete only your Provning cloud state, participation and shared ratings, or permanently delete the shared IT24 sign-in identity. Deleting the shared identity also removes access to that account in other IT24 apps. For access, correction, restriction, objection or another privacy request, email info@it24develops.com. You may also complain to the Swedish Authority for Privacy Protection or your local data protection authority.

Age and policy changes

The app is intended for adults because it concerns alcohol tasting and is not directed to children. We may update this policy as the app or its providers change. The revised date will be shown at the top of this page.