Privacy Policy — Barilo

Publisher: Groupe Estua inc. Last updated: November 3, 2026.

1. Who is responsible

Barilo (the “App”) and the barilo.app website are published by Groupe Estua inc., a Quebec company (NEQ 1182710500), Repentigny (Québec), Canada. For any question about this policy or your personal information: info@estua.ca.

2. The short version

Your cellar lives on your device, and nowhere else. Wines, photos and notes are stored in your device's local storage. There is no account to create and no server of ours holds your cellar: we cannot see your cellar. No ads, no tracking, no analytics — in the App and on this site alike.

Only four online actions exist in the App, and only when you start them: the barcode lookup (the barcode you typed, to Open Food Facts), the online label reading (the cropped photo you choose, through our relay, to Google Cloud Vision), the online label recognition (the same photo, through our relay, to Google's Gemini API) and the clean visual search (the identified name, producer, vintage and region — never your photo — through our relay). Sections 5 to 8 describe them. Nothing else ever leaves your device, and nothing is sent in the background.

3. This site (barilo.app) — exactly what it collects

This site has no account, no store, no audience measurement tool, and no tracking or advertising cookies.

• “Get notified at launch” form (home page): if you submit it, we collect your email address, the page language, the source page, the version of the consent text and the timestamp of your consent, stored in a Cloudflare storage space operated by us. Sole purpose: sending you a single email when Barilo launches. Withdraw at any time: write to info@estua.ca and your address is deleted. No sale, no sharing for marketing.
• En primeur page: no demand-test form is active on that page at this time, and that page collects no information.
• Technical data: as with any website, the host (Cloudflare) may process technical data, such as connection logs, to the extent necessary for the site's security and operation.
• Emails you send us: information you provide by writing to info@estua.ca is used solely to answer your request.

4. The App's data, and where it lives

Everything you enter in the App is kept on your device only (local storage): wine records (name, producer, vintage, appellation, price, quantity, rating, drinking window, notes), futures and pre-orders (wine, price, deposit, expected delivery), label photos cropped and compressed on the device, history, saved views, CSV import mappings, settings and language, and a random device identifier (see sections 6 to 8). There is no copy of your cellar on our servers and no synchronization in this version.

5. What we never collect (App)

No account, no name, no email, no password; no location data; no contacts or calendar; no usage or behaviour data. We do not sell or share personal information for marketing purposes.

6. Barcode lookup (Open Food Facts)

Only if you type a barcode and start the lookup: that code alone is sent to Open Food Facts (world.openfoodfacts.org). You always confirm a candidate before anything is added; its photo is displayed from Open Food Facts and is never saved into your record. Open Food Facts data is under the ODbL licence, with attribution shown in the App.

7. Online label reading and recognition (relay, Google)

Only on your explicit action, after cropping: the cropped photo you chose, with a random device identifier carrying no personal data, passes in memory through our Cloudflare relay — which stores and logs neither the image nor the result — to Google Cloud Vision (text reading) or Google's Gemini API, paid tier (wine recognition). The only thing the relay keeps is a monthly counter per device and per operation type (anti-abuse cap of 30 per month, separate counters), with no image, text or cellar data. You review and confirm every field before anything is saved. On-device reading is always available and sends nothing anywhere.

8. Clean visual search

Only on your action, after an online recognition: the identified name, producer, vintage and region (never your photo) pass in memory through our relay to the Gemini API (paid tier), which searches for the wine's product page; the selected visual is retrieved from the source site and offered to you with its source. It becomes your record's photo only if you adopt it. Separate monthly counter, same cap of 30.

9. Export and import, under your control

JSON export/import (and CSV import parsed on your device) produce a file containing your cellar, under your sole control. We receive it only if you choose to send it to us, for example for support; it is then handled only for that purpose. Without an export, clearing your browser or switching devices erases your cellar: there is no synchronization in this version.

10. Retention

Cellar data: on your device, for as long as you keep it there — we set no period for it, holding no copy. Launch-notice emails: until the launch notice is sent, then deleted; immediate deletion when consent is withdrawn. Relay counters: one number per device per month, per operation type.

11. Your rights

Access, correction and export of your cellar happen directly in the App, at any time and free of charge. Deletion: see the Delete my account page — it is complete and final, since we hold no copy. For the notice email or any other question: info@estua.ca.

12. Children and alcohol

Barilo is an inventory tool intended for adults of legal drinking age in their place of residence. It does not sell or deliver alcohol and is not intended for children.

13. Security

Your data is protected first by your device's own security. On our side: site and App served over HTTPS; the online services' access keys are never in the App — they live on the server side, in the relay only. No measure provides absolute security: protect your export files as you would your cellar, because they contain its contents.

14. Changes

If this policy changes — in particular on the day a feature creates an account or synchronization — the new version will be published at the same address, with a new date, before the motivating change takes effect. A change to the local nature of the data would require an explicit action from you.