Privacy Policy

Effective 19 August 2026 · YoBebo, a personal project by an individual, not a company.

YoBebo is a tasting journal for wine, spirits and beer. This policy describes exactly what it stores and who else sees it. It is written to be accurate rather than lawyerly; if something here is unclear, ask.

The short version. Your journal lives on your device. If you sign in, a copy is stored so your other devices can read it. Nothing is sold, there is no advertising and there are no analytics or tracking scripts. AI features send the relevant part of your journal to Anthropic to answer. Nothing you write is public unless you create a share link yourself.

Using YoBebo without an account

You can use the whole app without signing in. Your journal is then stored only in your browser (in localStorage), and no account exists for you. Clearing your browser data deletes it, so use Export to keep a backup.

If you sign in

Signing in uses Google. YoBebo receives and stores three things from Google: your Google account ID, your email address and your display name. It does not receive your password and asks for no other access to your Google account.

Signing in also creates a copy of your journal on the server so your devices can stay in step. That copy holds whatever you have put in the app: bottles, tasting notes, ratings, purchases, trips, wineries, wishlist and your saved friend links.

Location

Location is only ever read when you tap the 📍 button, and only then. Those coordinates are sent to OpenStreetMap to find the name of the winery, bar or restaurant you are in, and are saved with that entry so you can see where you were. They are never collected in the background, and they are deliberately excluded from any page you share.

Photos

Label and trip photos are stored on your device. If you are signed in they are also stored in Cloudflare R2 so your other devices can see them. They are served only to you, and are never public unless you include one in a share link you created.

What is sent to other services

Who	What they get	When
Anthropic (Claude)	The relevant part of your journal, or a photo of a label or wine list. Enough to answer the question you asked.	Only when you use an AI feature — asking Bebo, scanning a label, scanning a wine list, generating a trip journal.
Google	Sign-in only.	When you sign in.
Cloudflare	Hosts the site, the database and the photos.	Always. Standard server logs apply.
OpenStreetMap	The coordinates from one 📍 tap.	Only when you tap it.
cdnjs / jsDelivr	Your IP address, because a script is fetched from them.	Only if the AI label scanner is unavailable and the offline text reader is used instead.

The app also shows outbound links (for example to Google or Wine-Searcher). Those sites only learn anything if you choose to click.

Counters we keep

To keep the AI features affordable and free, the server counts how many AI calls happen each day and roughly how large they were, grouped by feature — not by person. These records contain no prompt text, no journal content and nothing you wrote. Where a limit needs to be applied per visitor, it is counted against a one-way scrambled form of your IP address, which cannot be turned back into an address.

Your own Anthropic key

If you supply your own API key in Settings, it is stored only in that browser. It is never synced to your other devices, never included in an Export backup, and never stored on the server — it is used for your request and discarded.

Sharing is something you choose

Nothing in your journal is public by default. If you create a share link, that specific content becomes readable by anyone who has the link. Share pages ask search engines not to index them and there is no directory of them, but a link is a link: treat it as public. You can turn any share off at any time, and it stops working immediately, photos included.

Who can see your journal

Nobody else using YoBebo can see your journal. The one exception is the person who runs the service: while YoBebo is in testing there is an admin view that can open an account's journal read-only, so that a report like “the filter is broken” can actually be looked at. It is limited to a single named account, it cannot change anything, and it exists only because support is otherwise guesswork.

This is worth being plain about: whoever operates any service like this holds its database and could read it regardless. The admin view adds convenience, not access. If that is not a trade you want to make, use YoBebo without signing in — then no copy of your journal exists anywhere but your own device.

Getting your data out, or deleted

Export (under More) downloads everything as a file, at any time, with no account needed.

Delete your account is under More → Sync & sign-in. It permanently removes the copy of your journal on the server, your photos, every share link you have made and any feedback you sent. It cannot be undone, so it asks you to type the word first, and offers an Export on the way.

It deletes the copy on the server. The journal on your own device is left alone — you are simply signed out and back to a local-only journal. Clear this site's data if you want it gone from the device too. If you would rather it were handled for you, email the address below instead.

Children

YoBebo is about alcohol and is not intended for anyone under the legal drinking age where they live.

Changes

If this policy changes materially, the effective date above changes and the change will be noted in the app's changelog.