Somm U

Privacy Policy

Last Updated: November 18, 2025

1. Introduction

Somm U ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

By using the App, you consent to the data practices described in this policy. If you do not agree with this Privacy Policy, please do not use the App.

2. Age Restrictions

The App is intended only for users who are at least 21 years of age. We do not knowingly collect personal information from individuals under 21. If we learn that we have collected information from someone under 21, we will delete that information immediately.

3. Information We Collect

3.1 Information You Provide Directly

Account Information:

  • Email address (for authentication)
  • Display name
  • Password (encrypted and stored securely via Firebase Authentication)

Preference Information:

  • Wine preferences (types, varietals, price ranges, taste profiles)
  • Beer preferences (styles, breweries, price ranges, taste profiles)
  • Ratings and reviews of wines and beers
  • Preferred store locations
  • Favorite wines and beers

User-Generated Content:

  • Photos of wine menus or labels (for restaurant recommendations)
  • Text queries and chat messages sent to our AI assistant
  • Any other content you choose to submit through the App

3.2 Information Collected Automatically

Device Information:

  • Device type and model
  • Operating system version
  • Unique device identifiers
  • Mobile network information
  • App version

Location Information:

  • Approximate location (city/region) based on IP address
  • Precise GPS location (only if you grant permission) to show nearby stores

Usage Information:

  • Features you use within the App
  • Time and duration of App usage
  • Search queries and interactions
  • Screens viewed and navigation paths
  • Crash reports and performance data

Analytics Information:

  • Firebase Analytics data
  • App performance metrics
  • Error logs and debugging information

3.3 Information from Third-Party Services

Firebase Services:

  • Authentication data
  • Cloud Firestore database records
  • Analytics and performance monitoring data

OpenAI API:

  • Prompts sent to generate recommendations
  • AI-generated responses
  • API usage metrics

4. How We Use Your Information

4.1 Core Functionality

  • Authenticate your identity and maintain your account
  • Provide personalized wine and beer recommendations
  • Store and retrieve your preferences and favorites
  • Display nearby store locations
  • Process images for restaurant menu recommendations
  • Enable chat-based interactions with our AI assistant

4.2 AI and Machine Learning

  • Generate personalized recommendations using AI models
  • Improve AI response quality and accuracy
  • Train and refine our recommendation algorithms
  • Analyze user preferences to enhance AI capabilities

Important AI Notice: Your queries and interactions with our AI features are sent to OpenAI's API for processing. OpenAI's use of this data is governed by their own privacy policy and terms of service. While we take steps to minimize personal information in AI queries, you should avoid including sensitive personal information in your questions or prompts.

4.3 Service Improvement

  • Analyze usage patterns to improve the App
  • Identify and fix technical issues
  • Develop new features and functionality
  • Conduct research and analytics

4.4 Communication

  • Send you service-related notifications
  • Respond to your inquiries and support requests
  • Notify you of updates or changes to the App
  • Send important security or legal notices

4.5 Legal and Safety

  • Comply with legal obligations
  • Enforce our Terms of Service
  • Protect against fraud, abuse, or illegal activity
  • Verify age compliance (21+ requirement)
  • Protect our rights, property, and safety

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

Firebase (Google LLC):

  • Authentication services
  • Cloud database storage (Firestore)
  • Analytics and crash reporting
  • Cloud functions and hosting

OpenAI:

  • AI recommendation generation
  • Natural language processing
  • Image analysis for menu recommendations

Apple:

  • App Store distribution
  • Device authentication
  • Location services
  • Push notifications

These service providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your information.

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

  • Court orders or subpoenas
  • Legal processes or government requests
  • Requests from law enforcement
  • National security requirements
  • Protection of our legal rights

5.3 Business Transfers

If Somm U is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. You will be notified of any such change via email or prominent notice in the App.

5.4 With Your Consent

We may share your information for other purposes with your explicit consent.

5.5 Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you, such as:

  • General usage statistics
  • Popular wine and beer trends
  • Aggregate preference data
  • App performance metrics

6. Data Storage and Security

6.1 Storage Location

Your data is stored using Firebase Cloud Firestore, which may store data on servers located in the United States and other countries. By using the App, you consent to the transfer of your information to these locations.

6.2 Security Measures

We implement reasonable security measures to protect your information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Firebase Authentication security protocols
  • Secure API communications
  • Access controls and authentication
  • Regular security assessments

6.3 No Absolute Security

Important: No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You use the App at your own risk.

6.4 Your Responsibility

You are responsible for:

  • Maintaining the confidentiality of your account credentials
  • Logging out of your account when using shared devices
  • Notifying us immediately of any unauthorized access
  • Using strong, unique passwords

7. Data Retention

7.1 Active Accounts

We retain your information for as long as your account is active or as needed to provide you services.

7.2 Deleted Accounts

When you delete your account:

  • We will delete or anonymize your personal information within 30 days
  • Some information may be retained for legal, regulatory, or legitimate business purposes
  • Backup copies may persist for a limited time
  • Aggregated or de-identified data may be retained indefinitely

7.3 Legal Retention

We may retain certain information to:

  • Comply with legal obligations
  • Resolve disputes
  • Enforce our agreements
  • Prevent fraud and abuse

8. Your Privacy Rights

8.1 Access and Portability

You have the right to:

  • Access the personal information we hold about you
  • Request a copy of your data in a portable format
  • Review your account information through the App

8.2 Correction and Updates

You can:

  • Update your profile information through the App settings
  • Correct inaccurate information
  • Request corrections by contacting us

8.3 Deletion

You can:

  • Delete your account through the App settings
  • Request deletion of specific information by contacting us
  • Withdraw consent for certain data processing

8.4 Opt-Out Rights

You can opt out of:

  • Location tracking (through device settings)
  • Analytics collection (through device settings)
  • Marketing communications (if any)
  • Certain data processing activities

8.5 California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to deletion of personal information
  • Right to non-discrimination for exercising your rights

To exercise these rights, contact us at hello@lablabs.co.

8.6 European Privacy Rights

If you are in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR):

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

Legal Basis for Processing: We process your data based on:

  • Your consent (for optional features)
  • Contractual necessity (to provide the App)
  • Legitimate interests (to improve and secure the App)
  • Legal obligations (to comply with laws)

9. Location Information

9.1 Collection

The App may request access to your device's location services to:

  • Show nearby liquor stores
  • Provide location-based recommendations
  • Improve service relevance

9.2 Control

You can control location access through:

  • Device settings (Settings > Privacy > Location Services)
  • Denying location permission when prompted
  • Revoking location permission at any time

9.3 Impact of Disabling

Disabling location services may limit certain App features, such as finding nearby stores, but will not prevent you from using core functionality.

10. Cookies and Tracking Technologies

10.1 Technologies Used

The App may use:

  • Local storage for preferences and cache
  • Analytics SDKs (Firebase Analytics)
  • Crash reporting tools
  • Session management tokens

10.2 Third-Party Analytics

We use Firebase Analytics to understand how users interact with the App. Firebase may use cookies and similar technologies. You can opt out of analytics through your device settings.

10.3 Do Not Track

The App does not respond to "Do Not Track" signals as there is no industry standard for compliance.

11. Children's Privacy

The App is not intended for individuals under 21 years of age. We do not knowingly collect personal information from anyone under 21.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will delete such information from our systems.

12. Third-Party Links and Services

12.1 External Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12.2 Third-Party Terms

Your use of third-party services integrated with the App (Firebase, OpenAI, Apple services) is subject to their respective privacy policies:

13. AI and Data Processing

13.1 AI-Generated Content

The App uses AI to generate recommendations and responses. This involves:

  • Sending your queries to OpenAI's API
  • Processing your preferences and ratings
  • Analyzing images you upload
  • Generating personalized suggestions

13.2 Data Sent to AI Services

When you use AI features, we send:

  • Your query or question
  • Relevant preference information
  • Wine/beer ratings you've provided
  • Images you upload (for menu analysis)
  • Context needed for recommendations

13.3 AI Data Retention

OpenAI's data retention policies apply to information sent to their API. As of the last update, OpenAI retains API data for 30 days for abuse monitoring, then deletes it. However, their policies may change. Review OpenAI's privacy policy for current information.

13.4 Minimizing Personal Information

We attempt to minimize personal information sent to AI services by:

  • Sending only necessary context
  • Avoiding inclusion of email addresses or names in prompts
  • Anonymizing data where possible

Important: You should not include sensitive personal information (medical information, financial details, etc.) in your AI queries.

14. International Data Transfers

14.1 Global Operations

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where data protection laws may differ.

14.2 Safeguards

We rely on:

  • Standard contractual clauses approved by regulatory authorities
  • Service providers' compliance with applicable data protection frameworks
  • Appropriate technical and organizational security measures

14.3 Consent

By using the App, you consent to the transfer of your information to other countries.

15. Changes to This Privacy Policy

15.1 Updates

We may update this Privacy Policy from time to time to reflect:

  • Changes in our practices
  • Changes in applicable laws
  • New features or services
  • User feedback

15.2 Notification

We will notify you of material changes by:

  • Posting the updated Privacy Policy in the App
  • Updating the "Last Updated" date
  • Sending an email notification (for significant changes)
  • Displaying an in-app notice

15.3 Continued Use

Your continued use of the App after changes to this Privacy Policy constitutes acceptance of the updated policy.

16. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

  • Notify you as required by applicable law
  • Provide information about the breach
  • Describe steps we are taking to address the breach
  • Recommend actions you can take to protect yourself

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Somm U
Email: hello@lablabs.co

For privacy-related requests (access, deletion, correction), please include:

  • Your name and email address associated with your account
  • A detailed description of your request
  • Any relevant account information to verify your identity

We will respond to your request within a reasonable timeframe as required by applicable law.

18. Dispute Resolution

Any disputes regarding this Privacy Policy shall be resolved in accordance with the dispute resolution provisions in our Terms of Service.

19. Consent

By using the App, you consent to:

  • The collection, use, and sharing of your information as described in this Privacy Policy
  • The transfer of your information to the United States and other countries
  • The use of cookies and similar technologies
  • The processing of your data by third-party service providers
  • The use of your information for AI-powered features

You can withdraw your consent at any time by:

  • Deleting your account
  • Discontinuing use of the App
  • Contacting us with specific opt-out requests

However, withdrawal of consent may limit or prevent your ability to use certain App features.

By using the App, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.