Tasteful Privacy Policy

Tasteful is operated by Intrinsic Value LLC, which acts as the data controller for personal information described in this policy. This policy covers the Tasteful iOS app, the website at tasteful.to, and related services we provide under the Tasteful brand.

Contact: support@tasteful.to

For data-protection requests, email with “Privacy Request” in the subject line.

If you visit tasteful.to without creating an App account, we still collect limited information as described below. Waitlist data is stored separately from App accounts and is not automatically linked to them.

We do notuse third-party advertising or cross-app tracking SDKs on the marketing site as of this policy's effective date.

Information you provide

Information collected automatically

Optional permissions & Apple services

You control these in iOS Settings and in-app prompts.

Location (when in use)

Nearby restaurants and maps

Apple MapKit

Search and maps. Apple’s privacy policy applies to MapKit

WeatherKit

Weather near you, using approximate location

Photo library

Import or save meal photos you choose

Microphone & speech

Voice search, if you turn it on

Passkeys (Face ID / Touch ID)

Optional sign-in. Private keys stay on your device. We store only public keys with our sign-in provider

On-device photo analysis (Vision)

Optional meal-name suggestions from photos you choose. This runs on your device

We use your information to:

• Provide, operate, maintain, and improve the app
• Authenticate you and protect your account
• Sync data across your devices when you are signed in
• Power features you choose: recommendations, planning, and households
• Respond to support requests and enforce our terms
• Comply with law and protect users and the service

We do not sell your personal information or run third-party behavioral advertising through the app.

Where GDPR-style laws apply, we rely on:

• Contract — to provide the services you request
• Legitimate interests — security, reliability, and support (balanced against your rights)
• Consent — where required for optional permissions or communications (you may withdraw where the law allows)

Service providers

• Supabase

  Sign-in, database, and photo storage for the app

  Primary region: AWS us-west-1 (Northern California). Supabase may also use edges, logs, or backups as described in their documentation.

• Vercel

  Hosting and privacy-oriented analytics for tasteful.to

  Vercel Web Analytics counts visits to the marketing site. It is separate from the app and is not used for ads.

Apple — When you use MapKit, WeatherKit, Siri, speech, or other Apple frameworks, Apple may process data under its own policies.

Legal & safety — We may disclose information when we reasonably believe it is required by law, to enforce our terms, prevent abuse, or protect people.

Business transfers — If we are involved in a merger or acquisition, data may transfer as part of that deal. We will notify you as required by law.

• Primary cloud region: Signed-in sync is stored primarily in Supabase on AWS us-west-1 (Northern California), unless we notify you of a migration.
• Security: Encryption in transit (TLS) and access controls on our backend. No method is 100% secure.
• Retention: We keep data while your account is active and as needed for the service, law, and disputes. Deleting items in the app removes them from your library; backups may persist for a limited time.
• Local copies: The app caches data for offline use. Uninstalling the app may remove local copies without deleting cloud data until you delete content online or request account deletion.

We and Supabase may process data in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for transfers from the EEA, UK, or Switzerland.

EEA, UK, Switzerland: You may have rights to access, rectify, erase, restrict, object, portability, and to complain to your supervisory authority.

California & other US states:We do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are commonly defined. We will not discriminate for exercising privacy rights. Residents of Colorado, Virginia, Connecticut, Utah, and similar laws may have comparable rights—contact support@tasteful.to.

The services are not directed to children under 13(or the minimum age in your jurisdiction). We do not knowingly collect children's personal information. If you believe we have, contact us and we will delete it promptly.

The app may reference websites or services operated by others. This policy does not apply there—review their policies before you share information.

Tasteful is free on this iPhone, with no account. $10 a year if you want it on another phone, or with someone you eat with, like a shared calendar. Apple bills that plan after a 14-day trial. See pricing and Terms of Service.

We store subscription status so we know your household is paid. Apple processes the card. We do not receive your card number. Manage or cancel in iOS Settings, then Subscriptions.

We do not use personal information for solely automated decisions with legal or similarly significant effects under GDPR Article 22. Meal suggestions are ideas you can ignore or override.

We may update this policy from time to time. We will post a new effective date at the top and, where appropriate, give additional notice in the app or by email. Continued use after the effective date means you accept the updated policy where the law allows.