Vinora Privacy Policy

Vinora is built and operated by HYPERIANLABS (PTY) LTD ("Hyperian Labs"), a company registered in South Africa (registration number 2026/756541/07), of 15 C Benacre Lane, Modderfontein, Gauteng, 1645, South Africa. HYPERIANLABS (PTY) LTD is the responsible party under POPIA for the personal information Vinora processes.

Contact for privacy requests: vinora@hyperianlabs.com

You may also lodge a complaint directly with South Africa's Information Regulator if you believe your information has been mishandled: inforegulator.org.za.

Account information: email address, display name, date of birth (used only to confirm you meet South Africa's legal drinking age), and password (stored securely by our authentication provider, never in plain text).

Profile content: a profile photo you choose to upload.

Location data: your device's GPS coordinates at the moment you check in at a winery, used to confirm you're actually at that estate. We do not track your location in the background or outside the check-in flow.

Photos and notes: any photos or tasting notes you attach to a check-in, a cellar entry, or a wine rating.

Payment information: if you subscribe to a paid plan, your payment is processed directly by Paystack. We never see or store your card details — we only receive confirmation that a payment succeeded and a reference we use to manage your subscription.

Usage information: the wineries, events and features you interact with, so we can show you your own passport history, badges and stats.

• To create and secure your account
• To verify winery check-ins and award badges and loyalty progress
• To show your passport, cellar and activity back to you and, where you choose to connect with other users, to your friends
• To process subscription payments and manage billing
• To send account, security and (where relevant) claim-related emails
• To maintain the security and integrity of the platform

We use a small number of service providers to run Vinora, each acting under contract:

• Supabase — hosts our database, authentication and file storage
• Paystack — processes subscription payments
• Resend — delivers transactional emails (confirmations, password resets, claim notifications)

We do not sell your personal information. Public-facing content you choose to post — such as a check-in photo shown to friends, or a public wine review — is visible to other users by design.

If you claim and manage a winery listing, we additionally process the business and contact details you submit for verification (business name, contact name, contact email) and the content you upload to your listing (photos, wine catalogue, events, promotions). This is used solely to operate and display your winery's profile on Vinora.

What a winery can see about visitors: if you check in at, or rate the wines of, a winery whose profile is claimed and managed on Vinora, that winery's owner and staff can see your display name together with your visit activity at their estate — your number of visits, your first and last visit dates, and the ratings you gave their wines — as well as your progress if you join that winery's loyalty programme. Wineries only ever see activity at their own estate, never your wider passport, and cannot see your email address, date of birth or location coordinates.

Under POPIA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated personal information
• Object to certain processing of your information

You can edit your display name, profile photo and cellar/tasting-note content directly in the app. For any other request, contact us at vinora@hyperianlabs.com.

We retain your information for as long as your account is active. If you request deletion, we remove your personal information within a reasonable time, except where we're required to keep records for legal, tax or fraud-prevention purposes. Check-in GPS coordinates are stored only with the check-in that created them and are deleted when you delete that check-in or your account.

Vinora is not intended for anyone under 18, in line with South African liquor law. We do not knowingly collect information from anyone under 18.

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.