Privacy
Last updated 29 October 2026
Barello is a small app made in Melbourne and used in many countries. It is not a business that runs on your data. This page says plainly what gets stored, where it sits, who can read it, why, and how to have it deleted, and it applies wherever you live.
Who is responsible for it
Wylliott Labs Pty Ltd, the Australian company that makes Barello, decides what happens to your data (in European law, the "controller"). You can reach us at hello@barello.app about anything on this page.
What we store
Only what you put in, plus the little needed to run an account.
| What | Why |
|---|---|
| Your email address | It is how you sign in. We email you a code; there is no password to store. |
| A display name, if you set one | So the other person in your household sees "Pat" rather than a blank. |
| Your bottles, notes, ratings and pours | The cellar itself. This is the whole product. |
| Label photos you take | Shown on the bottle in the app. See the note on photos below. |
| Where you keep your wine | The kind of place (a cupboard, a fridge, a garage) and the town you pick, so the drinking windows can allow for the temperature. We store the town, never a street address, and never a precise location. |
| Which household you belong to, and your price bands and settings | So the cellar is shared with the right person and reads the way you set it. |
| Whether your household is a Foundation Member | So the promise in the terms is kept: a record of the household and when it joined, nothing about you. |
| Error reports from the app | If the app hits an error while you're signed in, it sends a short report: what went wrong, which screen (its address without anything after it), the kind of device, and a random number your browser makes so we can tell one phone from five. Email addresses and sign-in codes are taken out before it leaves your phone. Kept 90 days, and deleted with your account. |
| Notifications, if you turn them on | Which alerts you chose, and an address for each phone or browser you turned them on for, so an alert can reach it. Turning notifications off on the phone, signing out, or deleting your account removes that address. |
| Your currency, units and time zone | So prices, temperatures and measures are in your terms, and our emails arrive at a sensible hour where you are. The time zone comes from your phone or the town you pick, never from your location. |
Label photos
When you photograph a label, the picture is sent to Anthropic's Claude to read what is printed on it: the producer, the wine, the vintage. What it read is shown to you as a draft, and nothing goes into your cellar until you confirm it. The photo and what was read from it are kept from the moment it's read: the photo so it can be shown on the bottle, and the reading so a label you leave for later waits in the cellar to be confirmed. A photo's link is unguessable but not private: anyone holding the exact link can open it, so don't photograph anything you would not want seen.
What we don't do
- No advertising, and no selling or sharing your data. There is no third party we sell it or hand it to for their own use.
- No tracking of how much you drink. Barello tracks what is in the house. Logging a pour is optional and exists so the cellar stays right.
- No payment details. Barello is free and takes no money.
- No cookies for tracking. The website and the app use Cloudflare Web Analytics, which counts visits and how fast pages load, without cookies and without following you to other sites. Inside the app we record five things about use: that it was opened (how long it took to load, and whether that was in the app or a browser), which screen, how far through the first-time setup you got, if you arrived by tapping a link in one of our emails, which email it was, and your answer when we ask whether you'd like notifications. Never what you typed or what you own. On the cocktail finder we count two moments. One is when you start ticking. The other is the first time it finds a drink you can make, with how many things you'd ticked and how many drinks came up. We don't record which bottles you ticked, which drinks came up, or who you are. To stop one connection flooding that count, we keep a scrambled code made from your IP address for a day. It can't be turned back into the address. Our emails carry no tracking pixel, so we don't know whether you opened one, only whether you came back through it.
Joining
The sign-up form is protected by a Cloudflare bot check. When you submit it we store your email, your first name if you give one (it's how the app and our emails address you), the site that first sent you to Barello and the page you first landed on, whether you were on a phone, and a one-way hash of your connection address. That lets us stop one connection hammering the form, and it can't be turned back into the address. If sign-ups are paused for the day, your email waits in a queue: put it in again on a later day and you're in, or ask us to remove it.
After you join, Pat may send you a couple of emails in your first few weeks about your own cellar: when a bottle you added has been priced, and what the app would open on your first Friday evening. There are never more than one of each. Every one has an unsubscribe link, and using it stops them for good. Your sign-in codes are separate and keep coming when you ask.
To know which site first sent you, your browser remembers where you first arrived from (the site that linked you and the page you landed on). That stays on your device unless you join. If you're visiting from the EU, the UK or Switzerland, your browser doesn't keep it at all.
Who can see it
The people in your household, and nobody else. Every row is locked to the household it belongs to by the database itself, not by application code that could have a bug in it. A different signed-in user asking for your bottles gets nothing back, and so does an unauthenticated request. This was tested rather than assumed. The one exception is the cocktail library, which is shared reference data, not yours.
The person who runs Barello can technically reach the database through administrative access, as is true of anyone who operates a service. We don't read your cellar, and there is no product reason to.
Where it lives
The website and app are served by Cloudflare. Accounts and data are held in a Supabase database hosted in Sydney, Australia. Sign-in codes and welcome emails are delivered through Resend. Your browser keeps your sign-in, a few display choices like how you sort the cellar, and a small page to show if you open the app with no connection; the cellar itself is loaded from the database each time you open the app.
Four services see a little more, each for one job:
- Anthropic receives label photos you choose to upload, to read them, and email you send us, so its AI (Claude) can help us sort and answer it. A person still reads every email. Each night its AI also looks up prices and tasting notes for new bottles: for that it receives the details of the bottles in your cellar (name, producer, vintage, region, grape and style) and of the wines you've tasted, with your rating, and never your name, your email or which household they belong to. Every price it finds has to name the shop or market it came from.
- Open-Meteo receives what you type into the town search and the town you pick, to look up its climate. Those requests come from your own browser, so they see your IP address, as any website does.
- Google Fonts serves the typefaces and sees your IP address.
- Cloudflare Turnstile runs the bot check on the sign-up form.
- Notifications, if you turn them on, are delivered by Apple to the iPhone app, and by your browser's maker everywhere else (Google for Chrome and the Android app, Mozilla for Firefox, Microsoft for Edge, Apple for Safari). Each receives the alert's few words and the address of the phone it goes to.
Your data is held in Australia, and Anthropic, Cloudflare, Resend and Google are based in the United States, as are Apple, Mozilla and Microsoft if your notifications go through them. So if you use Barello from the EU, the UK or anywhere else outside Australia, your data is stored and handled outside your own country.
The prices Barello finds come from Australian shops and are shown in Australian dollars wherever you are. They're a guide to the wine, not what it costs where you live.
Why we use it
European and UK law asks us to name the reason for each use, so here they are.
| Use | Why we're allowed to |
|---|---|
| Your account, your cellar, label reading, price lookups and sign-in codes | It's the service you asked for. Without it there's no app. |
| Notifications | You turned them on, and chose which. Switch any of them off in Settings, or turn notifications off for Barello on your phone, and they stop. |
| The couple of emails in your first few weeks | Our interest in helping you get started. Unsubscribe and they stop. |
| Counting visits and app use, and the bot check on sign-up | Our interest in keeping Barello working and free of abuse. None of it is used to profile you. |
Your data is yours
- Delete a bottle or a rating in the app, any time. A label photo stays stored until your account is deleted; email us and we'll remove one sooner.
- Delete your account in the app, under Settings, then Account, or email us and we'll do it. If you share a household, the cellar stays with the household, because the bottles belong to the house, not to whoever added them. How deleting your account works.
- Get a copy, yourself, any time. In the app, under Settings, then Download everything: your cellar, finished bottles, tasting history, ratings and drinks log, as spreadsheets you can open anywhere or take to another app. It's free and there's no limit. A partner's ratings and tasted wines are only in it if they share them with you. Or email us and we'll send it.
- Correct it. Almost everything can be edited in the app. Email us for anything that can't.
- Object, or ask us to stop. Tell us to stop using your data for any of the reasons in the table above, and we will, unless it's needed to run the account you still want.
We answer every request within a month, and there's no charge. We keep your data for as long as you have an account, and no longer. An account nobody has signed in to for two years may be closed and deleted, after we've emailed you at least 30 days ahead (see the terms). Our database provider's routine backups can hold deleted data for a short time, until they expire.
If you're unhappy with how we've handled your data, tell us first and we'll put it right. You can also complain to a regulator: the Office of the Australian Information Commissioner (oaic.gov.au), the Information Commissioner's Office in the UK (ico.org.uk), or the data protection authority where you live in the EU.
In California: we don't sell or share your personal information, as California law defines those words, and we don't use it for anything beyond running Barello.
Age
Barello is for adults of legal drinking age where they live. It is not designed or marketed for anyone younger, and we do not knowingly hold data about children.
If this page changes
The date at the top moves. If a change matters, somewhere new for your data to live or a new company involved, we say so in the app rather than quietly editing this page.
Asking us something
Email hello@barello.app. A person reads it and replies, with help from the AI service named above.
Barello is a registered business name of Wylliott Labs Pty Ltd, ABN 94 701 857 525, Melbourne, Australia, checkable on the Australian Business Register.