Privacy policy

This policy explains what personal data Tasteally collects, why, and the choices you have. We’ve tried to keep it plain.

Who we are

Tasteally is provided by James Pratt, trading as Tasteally, of 56 Maple Avenue, Leicester, LE3 3FH, United Kingdom (“we”, “us”). We are the controller of your personal data. Our ICO registration number is [OWNER TO COMPLETE: ICO registration number]. Contact us about privacy at support@tasteally.app.

The short version

• We collect what we need to run the app, and nothing to sell. We never sell personal data and we don’t run third-party advertising trackers.
• Food logs, weight, goals, allergies and similar details can reveal information about your health. We treat them as special category data and only process them with your explicit consent.
• You can download your data or delete your account at any time from the app or your account page.

What we collect and why

Account details — email address and a securely hashed password (or your Sign in with Apple identifier). Used to create and secure your account. Lawful basis: performance of our contract with you.

Profile and health-related information — age or year of birth, sex (only for the energy calculation), height, weight, activity level, goal, target weight, dietary preferences, allergies, and whether you’re pregnant or breastfeeding or have chosen calm mode. Used to calculate your targets and tailor answers. Lawful basis: your explicit consent (UK GDPR Article 9(2)(a)), which you give during setup and can withdraw at any time by deleting the information or your account.

Food and activity logs — what you log, water, saved meals, scores and streaks. Used to provide the service. Lawful basis: explicit consent, as above.

Photos you choose to analyse — meal photos and nutrition label photos are sent to our servers and to our AI provider to produce an estimate. We don’t keep the photos: each one is used for the estimate and then discarded. We keep only the result, such as the estimate or the label text you save. Lawful basis: explicit consent.

AI coach conversations — your messages and the replies, so the conversation can continue and so we can keep the service safe. Messages are checked automatically for safety concerns (for example, signs of disordered eating) so we can respond supportively.

Purchases — subscription status, plan, renewal dates and transaction references from Apple, Google or Stripe. We never see or store your full card details. Lawful basis: contract, and legal obligation for tax records.

Referrals and challenges — who invited whom, challenge membership, the display name you choose and days completed. We use limited, hashed device and network signals to prevent referral fraud. Lawful basis: legitimate interests in preventing abuse.

Fresh Run game — your scores, distance and run times. Your best score and display name are shown to friends in your challenges and, if you’re 18 or over and leave “Show me on the global game board” on (You → Privacy & data), to other players on a global board. You can report or block another player from their row. Lawful basis: our contract with you to provide the game you choose to play; the global board only while you leave its setting on.

Support messages — what you send us and our replies.

Usage analytics (optional) — if you opt in, we record first-party events such as which features are used, linked to a random identifier. Lawful basis: consent. It’s off unless you turn it on, and you can turn it off at any time.

Technical data — IP address (truncated where stored), device type, app version and error reports, used to keep the service secure and working. Lawful basis: legitimate interests.

Who we share data with

We use carefully chosen service providers (processors) who act only on our instructions under written contracts: - Hosting and database — Hetzner Online GmbH. Our servers, database and backups are in Germany (EU). - Payments — Stripe (web), Apple (App Store), Google (Google Play). Each is also a controller for the payment data they hold. - AI processing — Anthropic, to analyse photos and answer coach and support questions. Anthropic’s Data Processing Addendum is part of its commercial terms. Content sent through its API isn’t used to train its models, and Anthropic deletes API inputs and outputs within 30 days by default. - Email delivery — we don’t use an email delivery provider yet. If we add one, we’ll name it here.

Open Food Facts receives only the barcode number when you scan a product not already in our database — never your identity. If you choose to submit a new product to Open Food Facts, its details become public under the Open Database Licence.

We may disclose information if required by law, or to protect someone’s safety.

How AI processing works

Some features use artificial intelligence: meal photo estimates, nutrition label reading, the AI food coach and the support assistant. When you use one of them: - What’s sent: only what the feature needs — the photo you chose, or your message plus the context needed to answer it. For the coach that’s your display name, the name you gave your coach, today’s food log and remaining calories, your goal, dietary preferences, allergies and dislikes, any cooking and budget preferences you set, and the short notes the coach remembers about you. We don’t send your email address. - Who processes it: Anthropic, acting as our processor, under a data processing agreement. Under Anthropic’s commercial terms, content sent through its API is not used to train its models. Anthropic deletes API inputs and outputs from its systems within 30 days by default. - What we keep: coach conversations are kept in your account so you can continue them, until you delete them or your account. The coach also keeps short notes about things you tell it (for example a new allergy or goal) so it can personalise answers; you can see and delete each one in You → Your coach. If you speak to the coach (Talk mode or the microphone in Ask), your speech is turned into text before anything reaches us. In the app, your phone does this — on the device where supported, otherwise using Apple’s or Google’s speech service. On the website, your browser may send audio to its own speech service (for example Google, in Chrome) to turn it into text. Only the text is sent to us; we never receive or store audio. Estimates you log are kept as part of your food log. We don’t keep the photos themselves. - Safety checks: before anything is sent, messages are screened automatically. If a message suggests someone may be at risk — for example signs of disordered eating — we don’t send it to the AI model at all, and show supportive information instead. - Your choice: AI features are optional. Scanning, search and logging work without them.

AI output can be wrong, so estimates are always labelled and you can correct them.

International transfers

Some providers process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to protect your data. Our servers, database and backups are with Hetzner in Germany, which the UK recognises as adequate. Anthropic processes AI requests in the United States, with the safeguards set out in its Data Processing Addendum.

How long we keep data

• Account, profile and logs: while your account is open. When you delete your account we delete this data straight away from our live systems, and from backups within 14 days.
• Purchase records: up to 6 years, for tax and accounting.
• Support conversations: up to 2 years after the ticket closes.
• Optional analytics events: up to 25 months, then deleted or aggregated.
• Security logs: up to 12 months.

Your rights

You can ask to access, correct, delete, restrict or object to the use of your data, and to receive it in a portable format. You can withdraw consent at any time — this doesn’t affect processing already carried out. Most of this you can do yourself: Account → Your data to download, and Delete account to erase everything. Otherwise, email support@tasteally.app. We’ll respond within one month.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put things right first.

Children

Tasteally is not intended for children under 13. Teenagers aged 13–17 can use it, but we never set weight-loss targets for under-18s, and we don’t show them on the global game board.

Security

Data is encrypted in transit (TLS) and at rest. Passwords are hashed with Argon2id. Access to personal data within our team is limited, logged and reviewed.

Changes

If we make significant changes we’ll tell you in the app or by email before they take effect.