Déjàvin Privacy Policy

This policy covers the Déjàvin app for iPhone, iPad, and Mac, made by SENSUS AI - FZCO, Dubai, United Arab Emirates. The short version, which the rest of this page only makes precise:

• No Déjàvin login. The app uses pseudonymous Apple download and device identifiers for its AI preview and subscriptions. Your private cellar stays in your own iCloud.
• Your photos and voice recordings stay on your devices and in your private iCloud.
• Your cellar syncs through your own iCloud, which we cannot read.
• No ads, no tracking, no third-party analytics SDKs, and no sale of personal data.

What Stays on Your Device (and in Your iCloud)

Everything personal: your bottle photos and their cutouts, your tasting notes and their audio recordings, your cellar records, prices, and preferences. This data is stored on your device and synced between your devices through Apple’s iCloud private database — a space tied to your Apple account that Sensus AI cannot read. Bottle and note deletions sync through your private iCloud. Removing the app or its iCloud data does not reset the server-side AI preview record described below.

What Reaches Our Servers, and Why

Déjàvin’s servers exist to answer two questions: “what wine is this label?” and “how do these spoken impressions map to a structured tasting note?” To do that, they receive the minimum:

• Label text, not label photos. When you scan a bottle, the photo is processed entirely on your device; only the text read from the label is sent for identification. We keep a one-way cryptographic hash of that text and the wine’s resolved identity in a shared wine catalog — a database about wines, not about you.
• Tasting transcripts, transiently. Notes are structured on your device when your hardware supports it. When cloud processing is used instead, the transcript text is sent, processed, returned — and not stored on our servers.
• A pseudonymous device credential. Apple’s App Attest helps the app authenticate to our service. We retain its public verification data and associate the device with the download identity and subscription state needed to provide the service.
• AI preview and usage records. A one-way hash of the App Store app-transaction identifier lets the three-use preview follow the download account across devices and reinstalls. Per-action records include a request identifier, action type, outcome, timestamps, salted input digests and the device/download association. These records support service delivery, retry protection and abuse prevention. They contain no label photos, transcript text, tasting-note content or private field edits. Hashing preserves the pseudonymous association needed for these features; these records are not anonymous.
• Technical diagnostics and service metrics. We retain identification outcomes, failure categories, request/session identifiers, text-length counts, service timing and resource-use metrics to troubleshoot the service and protect its availability. These records can be associated with the pseudonymous device/download record. Daily outcome totals also help us measure catalog coverage. They do not include request text, photos or recordings, and are never used for advertising tracking.
• Subscription entitlement. If you subscribe to Déjàvin Pro, Apple sends us a signed receipt so we can unlock Pro features. Payment is handled entirely by Apple — we never see your payment details.

AI Processing

Wine identification and cloud note structuring run on inference servers operated by Sensus AI. Only the label text and tasting transcripts described above are processed to provide the feature you request. This text is processed transiently, is not retained as request content, and is not used to train AI models. We do not send it to third-party AI providers. On-device AI features run entirely on your hardware. Managed infrastructure providers support the app’s API and shared wine catalog.

What We Don’t Do

Déjàvin contains no advertising, no third-party analytics or tracking SDKs, and no data brokers. We do not sell or rent your information or share it for advertising. Infrastructure providers process service data on our behalf. The app has no public social features; your private cellar and tasting notes are not published.

Retention and Deletion

Detailed AI-use records, model-call diagnostics and closed device-to-download binding history become eligible for removal after 395 days (approximately 13 months). A daily cleanup removes eligible records; identification diagnostic events use a shorter 30-day period. AI-use retention is measured from the last update to the record. Current authentication and subscription records remain while needed to authenticate the app, deliver purchases and prevent abuse. The shared wine catalog describes wines and is maintained independently of the private cellar and AI-use history.

In versions that include More → Your data → Erase AI usage history, you can request removal of detailed AI-use history and linked identification diagnostics. Model-call accounting is retained without its device, request or binding association. The confirmation explains cancellation of pending AI work on that device. Your cellar, recordings, saved notes, delivered results and Apple subscription remain available. Earlier builds can request help at apple@sensusai.io.

Erasure retains the pseudonymous download eligibility record and the number of free AI uses already consumed, so deletion and reinstallation do not issue a new preview. We also retain minimal one-way request hashes to prevent old requests from being replayed. Those replay markers contain no download identifier, device identifier, timestamp or request content. Historical operation details and closed bindings are removed under the retention policy; deleting usage history does not cancel a subscription, which you manage with Apple. Operational logs and backups are managed separately under infrastructure retention controls. Contact us for help with a privacy request that extends beyond this in-app control.

Age

Déjàvin is an app about wine and is intended for adults of legal drinking age in their jurisdiction. It is not directed at children, and we do not knowingly process children’s data.

Changes

If this policy changes in a way that matters, the app and this page will say so plainly. The “last updated” date above always reflects the current version.

Contact

Privacy questions or requests: apple@sensusai.io
SENSUS AI - FZCO, Dubai, United Arab Emirates.