Privacy Policy
Effective 26 July 2026
Tastellar is made by UEI Intelligent Labs LLC (“we”, “us”). This policy covers the Tastellar mobile app and this website, tastellar.com.
Most privacy policies describe settings you can change. The four rules below are not settings. They are enforced in our code and database schema, which is a stronger promise than a toggle: we cannot quietly reverse them without changing how the product is built.
- Private by default, forever. Every star you save starts visible to you alone.
- Journals never travel. Your written memory is structurally excluded from every share. There is no code path that publishes it.
- A 24-hour delay on public. Nothing you make public appears in real time.
- Location is used once, then dropped. Photo GPS is read on your device to suggest a place, then discarded.
What we collect
In the app
- Account: email address, handle, display name, and an optional avatar. An account is optional — capture, imports and the world sky all work without one.
- Stars: photos you add, the dish and place you tag, the date the meal happened, and any journal text you write.
- Location:a photo’s embedded GPS coordinates are read on your device to suggest where it was taken, then discarded. We do not track your location and we do not collect background location.
- Operational data: sync state, error logs, and a count of AI assists used, which is how the free daily allowance is metered.
On this website
- Waitlist: if you ask to be notified at launch, we store your email address and — only if you offer them — your city and how you describe yourself. We use these once, to tell you Tastellar is live.
- Table links: a
tastellar.com/t/…link carries the host’s handle and the dish and place of a shared meal, in the link itself. Those pages are never indexed and never cached. - Subscriptions: see Payments below.
- Server logs: our hosting and network providers keep short-lived request logs, including IP addresses, to serve the site and defend it from abuse.
What we never do
- We never sell your data, and we never share it with data brokers.
- There are no ads, no advertising identifiers, and no third-party tracking anywhere in the app or on this site.
- This website sets no cookies and loads no analytics. It requests nothing from any third-party host — no fonts, no scripts, no pixels. Fonts are served from our own domain.
- Photo EXIF metadata is stripped from stored images. Dates are kept for your timeline; GPS is discarded after a place is suggested.
- We never scrape or hotlink other people’s photos. Media is either yours or hosted by us.
Who can see your stars
- Every star is private by default, forever.
- Per star, you may widen visibility: Private → Links (your mutual connections) → Public.
- Links are mutual and severable. Severing one removes it in both directions and immediately deletes any crossings between your skies.
- A star you set to Public stays hidden for 24 hours before it appears anywhere public.
- An optional home shield caps stars near your home at Links visibility, whatever else you set.
- A private star never produces a crossing, a suggestion, or any signal to another person.
AI features
Some Tastellar features use a large language model to help you write — polishing your own fragments, asking a couple of questions to draw out a memory, or composing a three-line dish haiku. These run only on content you supply, every draft is editable before anything is saved, and they never invent facts about you.
The text you submit to an assist is sent to our AI provider to generate that response. It is not used to train their models. Assists are metered, and the count of how many you have used is operational data.
Payments
Tastellar Pro is sold on this website and processed by Stripe. We never see or store your card number — Stripe handles the payment entirely.
What we store is the minimum needed to know that you are entitled to Pro: your Stripe customer and subscription identifiers, whether the subscription is active, and when the current period ends.
Who processes your data
We keep this list short deliberately. Every provider here is a processor acting on our instructions, and all of them are located in the United States.
| Provider | What it does |
|---|---|
| Supabase | Database, authentication and media storage |
| Vercel | Hosting for this website |
| Cloudflare | DNS and network delivery |
| Stripe | Subscription payments |
| Resend | Transactional email, such as your waitlist confirmation |
| Anthropic | The language model behind AI assists |
| Google Workspace | Our own email, including anything you send us |
How long we keep things
- Your stars and account stay until you delete them or close your account.
- Waitlist entries are kept until launch, and removed within a reasonable period after we have contacted you — or immediately, if you ask.
- Billing records are kept as long as tax and accounting law requires, typically seven years.
- Server logs are short-lived and retained by our providers on their own schedules, generally measured in days.
Your rights
Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, or export it in a portable form. If you are in the European Economic Area or the United Kingdom you also have the right to object to or restrict processing, and to complain to your data protection authority.
If you are a California resident, you have the rights to know, delete, correct, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, and we never have, so there is nothing to opt out of. We will not discriminate against you for exercising any right.
How to exercise a right today. Email [email protected] and we will action it. Self-serve account deletion and one-tap export are being built into the app; until they ship, we handle these requests by hand, and we will confirm when yours is done.
One thing worth being plain about: if someone accepted a Starpass from you, that star was copied into their sky by design. Deleting yours does not reach their copy, and theirs does not reach yours.
Children
Tastellar is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email us and we will delete it.
Security
Data is encrypted in transit and at rest by our providers. Access to production data is limited to those who need it. The rules at the top of this policy are enforced by database row-level security rather than by application code alone, so a bug in the app cannot quietly expose a private star.
No system is perfectly secure. If you find a vulnerability, please tell us at [email protected] before disclosing it publicly.
Changes
If we change this policy we will update the effective date above. If a change materially affects how we handle your data, we will tell you in the app or by email rather than relying on you to re-read this page.
Contact
UEI Intelligent Labs LLC — [email protected]
