Tasteful Privacy Policy

Tasteful is operated by Intrinsic Value LLC, which acts as the data controller for personal information described in this policy. This policy covers the Tasteful iOS app, the website at tasteful.to, and related services we provide under the Tasteful brand.

Contact: support@tasteful.to

For data-protection requests, email with “Privacy Request” in the subject line.

If you visit tasteful.to without creating an App account, we still collect limited information as described below. Waitlist data is stored separately from App accounts and is not automatically linked to them.

We do notuse third-party advertising or cross-app tracking SDKs on the marketing site as of this policy's effective date.

Information you provide

Information collected automatically

Optional permissions & Apple services

You control these in iOS Settings and in-app prompts.

Location (when in use)

Nearby restaurants and mapping; may use Apple MapKit

Apple MapKit

Search, geocoding, maps—governed by Apple’s privacy policy

WeatherKit

Weather-aware suggestions using approximate location for forecasts

Photo library

Import or save meal photos you choose

Microphone & speech

Voice search where you enable it

Passkeys (Face ID / Touch ID)

Optional passwordless sign-in—private keys stay on your device or synced password manager; only public keys are stored with our auth provider

On-device photo analysis (Vision)

Optional meal-name suggestions from photos you choose—processed on your device, not sent to our servers for that purpose

We use your information to:

• Provide, operate, maintain, and improve the app
• Authenticate you and protect your account
• Sync data across your devices when you are signed in
• Power features you choose—recommendations, planning, households
• Respond to support requests and enforce our terms
• Comply with law and protect users and the service

We do not sell your personal information or run third-party behavioral advertising through the app.

Where GDPR-style laws apply, we rely on:

• Contract — to provide the services you request
• Legitimate interests — security, reliability, and support (balanced against your rights)
• Consent — where required for optional permissions or communications (you may withdraw where the law allows)

Service providers

• Supabase

  Authentication, database, APIs, and photo/object storage for the App

  Primary infrastructure: AWS us-west-1 (US West — Northern California). Supabase may also use edges, logging, backups, or subprocessors as described in their documentation.

• Vercel

  Hosting and privacy-oriented web analytics for tasteful.to

  Vercel Web Analytics collects aggregate visit data for the marketing site. It is separate from in-app usage counters and is not used for behavioral advertising.

Apple — When you use MapKit, WeatherKit, Siri, speech, or other Apple frameworks, Apple may process data under its own policies.

Legal & safety — We may disclose information when we reasonably believe it is required by law, to enforce our terms, prevent abuse, or protect people.

Business transfers — If we are involved in a merger or acquisition, data may transfer as part of that deal. We will notify you as required by law.

• Primary cloud region: Signed-in sync is stored primarily in Supabase on AWS us-west-1 (Northern California), unless we notify you of a migration.
• Security: Encryption in transit (TLS) and access controls on our backend. No method is 100% secure.
• Retention: We keep data while your account is active and as needed for the service, law, and disputes. Deleting items in the app removes them from your library; backups may persist for a limited time.
• Local copies: The app caches data for offline use. Uninstalling the app may remove local copies without deleting cloud data until you delete content online or request account deletion.

We and Supabase may process data in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for transfers from the EEA, UK, or Switzerland.

EEA, UK, Switzerland: You may have rights to access, rectify, erase, restrict, object, portability, and to complain to your supervisory authority.

California & other US states:We do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are commonly defined. We will not discriminate for exercising privacy rights. Residents of Colorado, Virginia, Connecticut, Utah, and similar laws may have comparable rights—contact support@tasteful.to.

The services are not directed to children under 13(or the minimum age in your jurisdiction). We do not knowingly collect children's personal information. If you believe we have, contact us and we will delete it promptly.

The app may reference websites or services operated by others. This policy does not apply there—review their policies before you share information.

Tasteful is $10 per year per household after a 14-day full-feature trial, billed through Apple In-App Purchase. See our pricing page and Terms of Service.

To enable cloud sync and household sharing, we store subscription entitlement statuson our servers (for example, trial end date, renewal period, and Apple's original transaction identifier). Apple processes payment card data—we do not receive your full payment details. Subscription management and cancellation are handled in iOS Settings → Subscriptions.

Without an active subscription, you may still use the app locally on your device; cloud sync and household collaboration are disabled until you subscribe.

We do not use personal information for solely automated decisions with legal or similarly significant effects under GDPR Article 22. Meal suggestions are ideas you can ignore or override.

We may update this policy from time to time. We will post a new effective date at the top and, where appropriate, give additional notice in the app or by email. Continued use after the effective date means you accept the updated policy where the law allows.