Table of contents
The short version: we collect the recipes you save, the meals you plan, the pantry you track. We use it to make those features work for you, your household, and (if you opt in) the AI recipe generator. We don’t sell anything to advertisers and we don’t run third-party trackers. The long version is below — written in plain English, in articles you can skim.
Tasteze runs on the web and as an app on iPhone and iPad, and the two are not identical. Where they differ, this policy says so on the spot and marks the platform. If you’re here about the iOS app specifically, Article 06 collects every iOS answer in one place.
The summary.
What we collect: the recipes you import or generate, the meal plans and shopping lists you build, the items in your pantry, your dietary profile, the household you share with, your subscription tier, and the device + analytics signals necessary to run the app reliably.
What we don’t: third-party advertising identifiers, contact lists, location histories, biometric data, or anything else you didn’t volunteer. Tasteze does not sell or rent personal information. There is no behavioural ad targeting. The iOS app declares no tracking in its App Store privacy manifest and contains no third-party analytics SDK.
Where it lives: on Supabase (PostgreSQL) in US-East, with row-level security on every table. Files (recipe photos, banners, cookbook drafts) live in Supabase Storage. The partner blog serves published posts publicly; everything else requires authentication.
Who else sees it: a short list of vendors that run specific features — payments, AI, search, email, error tracking. Each is named in Article 03, with the platform it applies to.
Deleting your account: always available, from inside either app, and never refused for any reason. Article 05 has the exact path for each platform.
What you can switch off: in the iOS app, app-performance diagnostics, at Settings → Privacy & Data → Share Diagnostics. Turning it off stops the collection and deletes anything still waiting to be sent from that device.
What we collect.
We group your data into three buckets so it’s easy to reason about.
You give us this directly. Account email + password (or Apple or Google sign-in). Display name. Optional avatar. Saved recipes (title, ingredients, instructions, photos, nutrition you edited). Meal plans, shopping lists, pantry inventory, cookbooks. Dietary profile + allergens. Household membership. Notes and ratings you leave on recipes.
The platform generates this from your activity. Cooking-mode progress, mise en place plans, AI generation history, usage counters (how many imports this month, how many AI generations), suggestion-engine signals (which recipes you saved, which you cooked, which you ignored), and search queries.
The system collects this automatically — on the web. Device type, browser, app version, IP address (used only to detect abuse, then truncated), session timestamps, product analytics (PostHog — events only, no cross-site identifiers).
The system collects this automatically — in the iOS app. The iOS app runs no PostHog and no other third-party analytics SDK, sets no advertising identifier and does no tracking. What it does send, to Tasteze’s own servers and nowhere else, is an app-performance report:
- normalised aggregates derived from Apple’s MetricKit — launch, hang, scroll and resume timing histograms;
- how long a handful of named journeys took (opening the app, loading home, opening a recipe, searching, reading the cache, downloading and decoding an image);
- counts of hangs and crashes — never a raw crash log, stack trace, symbol or call stack;
- app version and build, OS version, and whether the device is an iPhone or iPad.
The app converts each MetricKit delivery into that summary in memory and throws away Apple’s raw payload before anything is written to disk. The report carries no account, household, device, installation, vendor or advertising identifier, no recipe, search, URL or free text. Your signed-in session authorises the upload and limits how often your account may send — which is why the app’s privacy manifest declares this data as Performance Data and Crash Data linked to you, for App Functionality and Analytics — but the caller’s identity is not written into the stored report. We delete each report 90 days after we receive it.
You can turn this off. Settings → Privacy & Data → Share Diagnostics. Switching it off stops the collection and deletes anything still queued on that device. It is per-device, and the app works exactly the same either way.
What the iOS app asks your device for. Only two things, and only when you use the feature that needs them:
- Camera — to scan a product barcode while you shop, and to photograph a recipe so we can import it. iOS asks you first; the prompt reads “Tasteze uses the camera to scan recipes and product barcodes.”
- Photos — read through Apple’s system photo picker, which runs outside the app. Because of that the app requests no photo-library permission at all and never gains access to your library: it receives only the specific image you chose.
The “Save to Tasteze” share extension. When you share a link to Tasteze from another app, the extension receives that link and sends it to our recipe-import endpoint. The shared link and your sign-in token travel through Tasteze’s own App Group and Keychain on your device. Nothing is read from the app you shared from beyond the item you shared.
What the iOS app never asks for. No location. No contacts. No microphone. No push notifications. No health, motion, calendar or Bluetooth access.
If you become a Tasteze partner, we additionally collect the answers you submitted on the application form, your voice interview transcript and AI-distilled voice profile, your blog posts and their generation history, and (if you connect a custom domain) the domain configuration.
How we use it.
Seven things, full stop.
- Run the kitchen features. Save recipes, build plans, track pantry, generate shopping lists, run cooking mode, sync your household.
- Train the suggestion engine — but only on your own data, weighted to your preferences, never combined with anyone else’s profile.
- Fulfil AI requests you initiate. Send the necessary inputs to Anthropic, OpenAI, x.AI, or Google to import a recipe, generate a story, or render an image. We don’t send anything you didn’t ask for. Article 04 lists exactly what gets sent.
- Process payments via RevenueCat (App Store + Stripe). We see your subscription tier; we don’t see card numbers.
- Email you when something requires your attention: password reset, weekly summary if you opted in, partner-blog publish notifications. No marketing without explicit opt-in.
- Make the iOS app faster and stop it crashing. The app-performance report described in Article 01 is used for two things and nothing else: keeping the app working (finding the launches, screens and scrolls that are slow, and the builds that hang or crash), and the release-over-release analytics that tell us whether a change helped. It is never used to profile you, to target anything at you, or to build a picture of what you cook — it cannot be, since the stored report holds no identifier and no content. Off by your choice, at Settings → Privacy & Data → Share Diagnostics.
- Keep the lights on. Detect abuse, debug errors, monitor performance. We use the minimum signal necessary.
AI & your recipes.
Tasteze is built around AI features. We want to be specific about what that means for the recipes you save.
What we send, and when. Nothing goes to an AI provider until you use a feature that needs one. When you do, what that feature works on is sent to a provider acting on Tasteze’s behalf:
- the text of a recipe you write, paste or import;
- a link you ask us to import, and the page we fetch from it;
- a photo or PDF you upload for us to read;
- the food preferences, pantry contents and meal plans used to personalise a result — taste matching, suggestion scoring and smart shopping read your saved data, so this is not limited to imports.
We send the inputs the feature needs and no more. Your email address, your account identifier and your payment details are not part of an AI request.
The AI providers don’t train on your data. Our contracts with Anthropic, OpenAI, x.AI, and Google opt out of training on customer prompts and outputs. Inputs we send are processed for a single request and not retained for model improvement.
How long a provider keeps what it receives. Beyond serving the request, each provider may hold an input briefly for abuse monitoring and legal compliance. That window is fixed by the provider’s own enterprise terms, which govern our account with them, and it differs between them — so rather than quote a single number that would be wrong for at least one of them, we point you at each provider’s published terms: Anthropic, OpenAI, x.AI, and Google. If you want the exact figure that applies to your data under our agreements, email privacy@tasteze.app and we will tell you.
Tasteze does use your data to improve Tasteze. We log generation history (with the prompt, tokens used, cost, and your feedback) to debug and improve our prompts and suggestion engine. This stays inside the platform and is never shared externally. It lives as long as your account does, and is removed when you delete the account.
Public partner content is publicly published. If you’re a partner and you publish a blog post, that post — including the AI-generated narrative around your recipe — is public. The partner blog renders it as soon as you click publish.
Your rights.
Regardless of where you live, you have the following rights over your data. We honour them globally — not just in jurisdictions that require it.
- Access. Email privacy@tasteze.app to request a full export of your library. We deliver it within 30 days as a structured JSON archive.
- Correction. Edit anything you submitted directly in the app.
- Deletion. You can delete your account yourself, from either platform. Both paths delete the same account, and both ask you to type your account email address to confirm.
- iOS app · Settings → Personal Information → Delete Account.
- Web · Settings → Profile & Preferences → Account → Danger Zone → Delete Account.
Deletion is never refused. There is no state your account can be in — a live subscription, a past purchase, an unpaid balance — that makes us keep it. If you bought or sold something, tax and accounting law requires us to keep the record of the transaction: the amount, the date, the payment reference. So we keep that and detach you from it. Your name, email, address and account are erased on the same schedule as everything else, and what remains in the ledger carries no identifier that leads back to you — not even the internal one your account used. You do not have to email us, cancel anything, or wait for a human. - Portability. The same export works for re-import elsewhere — bring your library wherever you go.
- Objection. Email privacy@tasteze.app to opt out of analytics, transactional summaries, or any specific processing.
- Withdraw consent — in the iOS app. Turn off app-performance diagnostics at Settings → Privacy & Data → Share Diagnostics; that stops the collection immediately and deletes anything still queued on the device. Your subscription is Apple’s to cancel, not ours: Settings → Subscription → Manage subscription opens Apple’s own management sheet. Your second factor is a TOTP authenticator app, at Settings → Security. The iOS app does not use passkeys and has no OAuth-disconnect control.
- Withdraw consent — on the web. Settings → Subscription → Manage Subscription opens the store that sold your plan, where you can cancel. Your second factor is a TOTP authenticator app, at Settings → Security. To opt out of web product analytics, email privacy@tasteze.app.
If you’re in the EU, UK, California, Colorado, Virginia, or another jurisdiction with extended privacy rights, the same controls apply. We’ve appointed a representative for GDPR inquiries — contact details below.
The iOS app.
Everything in this article also appears in its subject-matter article above. It is gathered here so that the iOS answer can be read in one pass, without reconstructing it from a policy written across two platforms.
Deleting your account. Settings → Personal Information → Delete Account, then type your account email to confirm. It always works: no subscription, purchase or balance can block it, and you never have to contact us to get it done. See Article 05 for exactly what is removed and how long it takes.
Diagnostics, and the switch that stops them. The app sends Tasteze how fast it launched, how long screens took, and how often it hung or crashed. No recipes, photos, searches or account details are included. Turning off Settings → Privacy & Data → Share Diagnostics stops the collection and deletes anything still waiting to be sent from that device. The full field list, and what we do and don’t store, is in Article 01.
Permissions the app requests. Camera, for barcode scanning and photographing a recipe to import. That is the whole list. Photos are read through Apple’s system picker, so no photo-library permission is requested and the app never has access to your library. There is no location, contacts, microphone, push notification, health, motion, calendar or Bluetooth access.
Third-party code in the app. Two SDKs: Supabase (sign-in and session handling) and RevenueCat (subscriptions). No analytics SDK, no attribution SDK, no advertising SDK, no third-party crash reporter. The app’s privacy manifest declares no tracking, and it sets no advertising identifier. Every other vendor in Article 03 is reached by Tasteze’s servers, or applies to the web only.
Subscriptions. Bought through the App Store and managed by Apple. Tasteze cannot cancel an App Store subscription; Settings → Subscription → Manage subscription hands you to Apple’s own sheet. We see your entitlement tier, not your card.
The share extension. “Save to Tasteze” receives the link you shared and sends it to our recipe-import endpoint. The link and your sign-in token move through Tasteze’s own App Group and Keychain. Nothing else is read from the app you shared from.
AI. Identical to the web, and described in Article 04: the recipe text, an imported link and the page behind it, an uploaded photo or PDF, and the preferences, pantry and plans used to personalise a result. All of it goes from our servers, not from your device.
Storage & security.
Your data lives in Supabase’s US-East region (Postgres + Storage). Encryption at rest is on by default. Connections are TLS 1.2+ from the client all the way to the database.
API keys for partner-side integrations live in an encrypted vault (AES-256-GCM) keyed by a master key that’s rotated quarterly. Admin access requires TOTP MFA in addition to the primary credential.
We retain account data while your account is active. If you cancel, your account stays as Free with all your recipes intact until you delete it. Deletion itself is immediate — one transaction, no soft-delete flag, no grace period — after which the only remaining copies live in encrypted backups that age out on our host’s rotation and are never used to bring an account back.
App-performance reports from the iOS app are kept on a fixed clock of their own: we delete each one 90 days after we receive it, and the daily aggregates it contributed to are deleted on the same 90-day boundary. Because those records hold no identifier, they are not tied to your account and are not affected by deleting it.
Children.
Tasteze is not directed at children under 13 (or under 16 in the EU/UK). We don’t knowingly collect personal information from them. Households can include minors as members at the discretion of the household owner — the owner’s account is the legal counterparty. If you believe a minor has signed up directly, email us and we’ll investigate within 30 days.
Changes to this policy.
When we change this policy, we update the date at the top and email everyone with an active account at least 30 days before the changes take effect (unless required to apply them sooner by law). Past versions of this policy are kept at /privacy/history so you can see what changed.
How to reach us.
For privacy questions, data requests, or anything that reads unclearly above:
- Email · privacy@tasteze.app
- Mail · DND Media Group LLC · State of Florida, USA
- EU representative · listed at /privacy/eu-rep
We respond to data requests within 30 days. If we need additional information to verify your identity, we’ll ask before we act.