Things people ask.

Once Botto is on your iPhone, create an account with your email (or sign in with Apple), and you’re in. The first time you launch the app you’ll be guided through naming your cellar location (e.g. “Zurich apartment” or “the cottage”) and adding a spot or two inside it (a fridge, a rack, a closet shelf — whatever you actually use).

Then add your first bottle. Snap the front label, fill in producer and wine name (autocomplete kicks in fast once a few are entered), set vintage and color, choose where it’s stored, and you’re done. The whole flow is five quick steps; most bottles take under a minute to log.

You don’t need to add your entire cellar at once. Most people start with the bottles they’re about to drink or the ones they’re proudest of, and let the rest accumulate naturally over the next few weeks.

Two levels: Locations (a house, an apartment, the cottage) and Spots inside each location (a fridge, a temperature-controlled cabinet, a rack, a single shelf). Each bottle lives in exactly one spot. If you want extra precision — “row 3, position B” — there’s a freeform position field on the bottle itself.

The cellar shows your wines as cards, each with the wine’s name, vintage, region and how many bottles you have. You can switch between a list and a grid.

The filter sheet lets you filter by color and by location, and sort by date added, name, vintage, price or highest rated. You can also choose to show vintages you’ve finished. Search finds wines by name, producer or grape.

The short answer: it’s yours, it’s stored in the United States, and we never sell it.

What the app collects: your email address, so you can sign in; your name, if you sign in with Apple; the cellar data you add (wines, prices, ratings, tasting notes, and the names you tag for who shared a bottle, typed in or imported from your iPhone Contacts if you choose to); label photos, only when you scan a label and only with your consent; account and device identifiers; your subscription status; and how you use the app, plus crash reports, scrubbed before they are stored. Our server copy of a label photo is deleted once the label is read, usually within seconds, and we aim to remove it within 24 hours of upload at the latest. The Privacy Policy has the full list and the reason for each item.

Your account and cellar data live in a cloud database in the United States. The website runs on Cloudflare’s network.

Label reading and recognition run on our servers through Anthropic and Cohere, and only after you say yes. The keys for those services live on our servers, never in the app.

We don’t show ads, we don’t sell your data, and we don’t track your location.

You can export everything (CSV or JSON) from Settings at any time, and you can delete your account there too. The details are in the Privacy Policy and on the subprocessors page.