Privacy Policy

1. Information we collect

Account and profile: email address, username, password (stored securely by our authentication provider), and optional profile fields you choose to provide (e.g. name, bio, phone number, avatar image).

Content and activity: recipes you create or save, likes, follows, rankings data derived from public engagement, and optional health-related inputs you add in health features.

Scanning and media: when you use the camera or photo library to scan ingredients, images you submit are sent to our backend and, where applicable, to OpenAI, LLC’s hosted API services (see §10) so models can interpret images or text and return suggestions. Images may be temporarily processed and subject to retention described below.

Technical data: device type, app version, and diagnostic or crash data as collected by our hosting or analytics tools if enabled.

We do not knowingly collect sensitive categories of information beyond what you voluntarily enter (e.g. health fields).

2. How we use information

We use information to: provide and improve the Service; authenticate you; personalize your experience; generate recipe suggestions when you request them; maintain safety and integrity; communicate about the Service; comply with law; and enforce our Terms of Service.

3. Legal bases (EEA/UK users)

Where GDPR applies, we rely on: performance of a contract (providing the Service); legitimate interests (security, product improvement, and communications that are not marketing where applicable); consent where required (e.g. certain optional features); and legal obligation where applicable.

4. How we share information

We share information with: service providers that help us run the Service (e.g. cloud hosting, authentication, database, and AI vendors such as OpenAI when you use AI features) subject to confidentiality and data-processing terms; other users when you post public content (e.g. recipes, profile fields visible in the app); and authorities when required by law or to protect rights and safety. We do not sell your personal information for money as traditionally defined.

5. Retention

We retain information as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account where the app provides that feature; some residual copies may persist for a limited period in backups.

6. Security

We implement reasonable technical and organizational measures to protect information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

7. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, and to object to or restrict certain processing. To exercise rights, contact us at the email below. You may opt out of optional communications where offered. California residents may have additional rights under the CCPA/CPRA (e.g. to know, delete, and opt out of certain sharing); we describe our practices here and will honor applicable requests.

8. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, contact us and we will take appropriate steps to delete it.

9. International transfers

We may process information in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

10. OpenAI and third-party AI processing

TasteLabs uses OpenAI, LLC (“OpenAI”) API services to power AI features in the app (for example recipe generation, ingredient detection or interpretation from photos or text, and related model outputs). When you use those features, prompts and related inputs—including text derived from scans, ingredient lists, optional nutrition or recipe context you provide, and similar request content—are transmitted from our systems to OpenAI’s servers for inference. We may use configurable OpenAI models (including multimodal / “vision” endpoints where images are sent); typical deployments use GPT-class models (for example gpt-4o-mini or successor models we configure). Model names and versions may change as we update the Service.

OpenAI processes that data under its own policies and terms, including https://openai.com/policies/privacy-policy and https://openai.com/policies/terms-of-use . Processing may occur in the United States or other regions described in OpenAI’s documentation. Do not submit highly sensitive personal data you do not want included in a prompt.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy in the app and revise the "Last updated" date. Material changes may require additional notice where required by law.

12. Related documents

For cookies and similar technologies, see the Cookie Policy. For who processes data on our behalf, see the Subprocessor disclosure. For optional health inputs, see the Health Data Supplement. For community safety, see the Community Guidelines.

13. Contact

Privacy questions or requests: admins@taste-labs.com.