Privacy Policy
Last updated: September 5, 2026
SOSVine ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the SOSVine mobile application ("the App"). By using the App, you agree to the practices described in this policy.
What we never do
- ✓ We do not track you across other apps or websites. The App carries no advertising SDKs and no cross-app tracking identifiers.
- ✓ We do not sell, rent or trade your personal data — not to advertisers, not to data brokers, not to anyone.
- ✓ We do not use your vineyard coordinates, spray records or photos for anything other than running the features you asked for.
Information We Collect
Email address
Your email address is your login credential. We use it to sign you in, to send service emails about your account and subscription, and to answer support requests. Apple Sign-In or Google Sign-In may supply it on your behalf.
Name
Optional. We use it to address you in the App and, where you provide it, as the holder name printed on your legal spray records.
Precise location
This is the most sensitive item the App handles, so we state it plainly: SOSVine collects precise coordinates. Your vineyard coordinates drive the weather forecast and every disease, pest and frost model. The coordinates attached to a community alert decide which neighbouring growers see it. You can type coordinates in by hand instead of granting the App access to device location.
Photos
Optional. You may attach a photo to a community alert. That photo is visible to other growers whose vineyards fall inside the alert radius.
Field records and other content you enter
Spray records — product, dose, date, parcel and notes — along with alert notes, the applicator name, and the professional applicator card number. See "The applicator card number" below.
User ID and device identifiers
A pseudonymous user ID plus device and push identifiers, used for authentication, push notification delivery, subscription entitlement, and product analytics. They identify an account, not a person, and they are never shared with advertisers.
Purchase history
Subscription status and entitlement, used to manage your subscription. Payment is processed by Apple or Google and relayed to us by RevenueCat — we never see your card details.
Crash and performance data
Diagnostic data captured when the App crashes or runs slowly, so we can fix it. This data is linked to your user ID.
Product interaction
Which features get opened and used, so we know what to improve. Event names and a user ID only — no coordinates, no field records, no photos, no note content.
How We Use Your Information
- ✓ Provide personalized disease and pest risk assessments based on your vineyard locations
- ✓ Deliver location-specific weather forecasts, historical analysis, and alerts
- ✓ Display relevant community alerts from nearby vineyard owners
- ✓ Send push notifications about risk changes, weather alerts, and community activity
- ✓ Process and manage your subscription and premium feature access
- ✓ Improve our risk algorithms and overall app experience
- ✓ Respond to your support inquiries
Data Storage & Security
- ✓ All data is stored using Supabase, hosted on secure servers within the European Union (EU)
- ✓ Data is transmitted using industry-standard TLS encryption
- ✓ We implement appropriate technical and organizational measures to protect your personal data
- ✓ Access to personal data is restricted to authorized personnel only
Community Alerts & Anonymity
- ✓ When you submit a community alert, it is shared anonymously with nearby vineyard owners
- ✓ Other users can see the alert content (disease type, severity, photos, notes) and approximate location, but cannot see your identity
- ✓ Your personal information is never attached to community alerts visible to other users
The Applicator Card Number
If you record a professional applicator card number, you are giving us professional licence data, and we treat it as such. We hold it for one reason: EU Regulation 2023/564 and the Portuguese caderno de campo require the applicator to be identified on every plant-protection product record. It appears only on your own records and on the exports you generate from them. It is never shown to other growers, never used for analytics, and never shared beyond the processors listed below that store your data on our behalf.
Your Records Belong to You
- ✓ Your spray records are yours. They stay readable and exportable whether or not you have an active subscription — the logbook and its compliance export are part of the free tier
- ✓ You can export the logbook from the App at any time, as a structured file you can keep or hand to an inspector
- ✓ You can delete your account from the App's settings. Deleting the account deletes your vineyards, spray records, community alerts, photos and profile
- ✓ Deletion is applied to live systems immediately and to encrypted backups within 30 days. After that, only records we are legally required to keep remain — invoicing and transaction data held for tax and accounting purposes
Third-Party Services
We use the following third-party services:
Supabase
Database, authentication and file storage (EU region)
Open-Meteo
Weather data — receives vineyard coordinates, no personal identifiers
OpenStreetMap / Nominatim
Turning coordinates into a place name
OneSignal
Push notification delivery
RevenueCat
Subscription management and entitlement
Sentry
Crash and performance reporting
PostHog
Product analytics — event names and a user ID
Resend
Sending the welcome and subscription emails
Apple Sign-In / Google Sign-In
Authentication (optional)
We do not sell, rent, or trade your personal data to third parties. Third-party services only receive the minimum data necessary to provide their functionality.
Your Rights
Under the General Data Protection Regulation (GDPR) and applicable EU/Portuguese law, you have the right to:
- ✓ Access the personal data we hold about you
- ✓ Correct inaccurate personal data
- ✓ Request deletion of your personal data
- ✓ Restrict or object to the processing of your data
- ✓ Data portability — receive your data in a structured, machine-readable format
- ✓ Withdraw consent at any time
- ✓ Lodge a complaint with a data protection supervisory authority
You can delete your account and all associated data directly from the App's settings, and export your logbook from the App at any time. To exercise any other right, write to contact@sosvine.com — we answer within 24–48 hours. You may also lodge a complaint with a supervisory authority: in Portugal, the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt); elsewhere in the EU, the authority for your country of residence.
Data Retention
- ✓ Account data is retained for as long as your account is active
- ✓ Vineyards and spray records are retained for as long as your account is active, so that your logbook still covers the retention period your own regulator requires
- ✓ When you delete your account, personal data is removed from live systems immediately and from encrypted backups within 30 days
- ✓ Subscription and purchase records are retained as required by applicable tax and accounting law — normally seven years
- ✓ Crash reports and product analytics events are retained for up to 12 months
- ✓ Community alerts are retained while they are still current and are archived after the season they belong to
Legal Basis for Processing
We process your personal data under the following legal bases, as defined by the General Data Protection Regulation (GDPR):
Contract Performance
Processing necessary to provide the App's services, including risk assessments, weather data, community features, and account management.
Consent
Where you have given explicit consent, such as for push notifications, location access, and optional photo uploads in community alerts.
Legitimate Interests
Processing necessary for our legitimate business interests, such as improving our algorithms, preventing abuse, and ensuring App security — provided these do not override your fundamental rights and freedoms.
Legal Obligation
Processing necessary to comply with legal requirements, such as retaining transaction records for tax and accounting purposes.
International Data Transfers
Your data is primarily stored within the European Union. Some third-party services we use may process data outside the EU/EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in accordance with EU data protection standards.
Cookies & Tracking Technologies
The SOSVine mobile app sets no cookies at all. This website is a separate thing and sets no non-essential cookies: no advertising trackers, no cross-site tracking scripts, no third-party marketing tools. If we ever add a non-essential cookie to the website, we will ask for your consent first and it will default to off. Analytics inside the App are described under "Product interaction" above — event names and a user ID, nothing more.
Children's Privacy
SOSVine is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email. Continued use of the App after changes constitutes acceptance of the updated policy.
Who Is Responsible for Your Data
SOSVine is the data controller for the personal data described in this policy. We decide what is collected and why, and we are the party you exercise your rights against. The contact point for anything in this policy — access requests, corrections, deletions, or a complaint — is contact@sosvine.com.
Contact
If you have questions or concerns about this Privacy Policy or your personal data, please contact us:
contact@sosvine.com