Privacy Policy

• Account: email address, display name, handle, and optional profile photo. Your dietary preferences, allergies, and disliked ingredients, if you set them.
• Fridge & pantry photos: the photos you scan and the ingredient list extracted from them. These are private to your account and never visible to other users.
• Activity: in-app actions such as viewing, saving, cooking, rating, and hiding recipes, and your taste-calibration answers. This activity trains the statistical model that ranks recipes for you.
• Social content: posts, notes, photos/videos you attach to posts, likes, comments, and follows. These are visible to other signed-in users, along with your display name, handle, avatar, and leaderboard cook counts. Your email is never shown to other users.
• Billing: payments are processed by Stripe. We store your subscription status and Stripe customer reference — never your card number.
• Technical: standard server logs (IP address, user agent, timestamps) via our hosting providers, used for security and debugging. We use only essential cookies — the ones that keep you signed in. No advertising cookies, no analytics cookies, no third-party tracking of any kind.

When you scan your fridge, your photos are sent to Anthropic’s Claude API to extract an ingredient list, which you then review and confirm. Under Anthropic’s API terms, data sent to the API is not used to train their models. Recipe suggestions are ranked by a model that runs on our own infrastructure using your in-app activity — your data is not used to build profiles for anyone else or shared with data brokers.

We share data only with the processors that run the Service:

• Supabase — database, authentication, and file storage
• Vercel — application hosting
• Stripe — subscription payments
• Anthropic — AI ingredient extraction from your scan photos
• Our email delivery provider — account emails (confirmation, password reset)

Each receives only what its function requires. We do not sell personal data and we do not share it with advertisers.

Your data is kept while your account is active. Scan photos and their cached extractions are kept so re-scans are instant; you can effectively replace old inventory by scanning again. Aggregate, de-identified statistics (for example, how often a recipe is cooked across all users) may be retained after account deletion.

You can delete your account in the app (You tab → Delete account) or by emailing support@palateweb.com. Deletion removes your account, profile, fridge photos, inventory, activity history, taste model, posts and their media, comments, likes, and follows. Stripe retains transaction records as required by financial regulations. Backups age out within 30 days.

Depending on where you live (for example, under Maryland’s Online Data Privacy Act, the CCPA, or GDPR), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. We do not sell personal data or process it for targeted advertising. Email support@palateweb.com to exercise them — we respond to all requests, whatever your jurisdiction.

Data is encrypted in transit; database access is protected by row-level security so each account can only read its own private data; scan photos live in private storage accessible only to your account; payment credentials never touch our servers. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you.

Palate is not directed to children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, contact us and we will delete it.

We will announce material changes to this policy in the app or by email, and update the date above. Questions: support@palateweb.com