Your information in TasteFlight.

Effective September 27, 2026. Operator: Jonathan Fitch, United States.

This policy explains how TasteFlight handles information when you use the app, its connected services, or this website.

What you provide

• Account and contact details: your name, email address, optional phone number, sign-in provider identifiers, account credentials where you use email sign-in, and choices about email updates. Passwords are stored as protected hashes, not readable passwords.
• Food preferences: eating preferences, allergies, cuisines, cooking choices, and feedback you choose to provide. Some of these details may reveal health-related information.
• Recipe and restaurant content: links, captions, photos, screenshots, PDFs, recipe text, notes, ratings, and questions you submit. Your local recipe box and visit history remain on your device except when you use connected features, backups, support, or sharing.
• Shared cookbooks: when available and used, shared recipes, cookbook names, membership details, and invitations are stored by our service and made available to the people with access.

Location, images, and files

With your permission, the app uses location to find nearby restaurants. Relevant location and place information may be sent to mapping or place providers to answer your request. You can deny location access or change it in iPhone Settings. Photos and files are processed when you choose them for importing, cooking, feedback, or sharing. We do not upload your entire photo library.

AI processing

When you use AI features, relevant text, selected images or documents, recipe context, and preferences are sent through our Cloudflare-hosted service to Google Gemini and, where a feature or configuration uses them, other AI providers. These requests produce recipes, menu suggestions, cooking answers, and related results. We do not need an API key from you.

We use Langfuse for diagnostic traces and quality evaluation. New traces enrolled by our service are scheduled for deletion after seven days. Traces can include prompt and response text, a pseudonymous installation identifier, model information, timings, token counts, and errors. Deletion is processed asynchronously, and this schedule does not apply to other records, provider retention, or historical beta traces that were not enrolled. Do not submit information you do not want processed by connected services.

Usage and diagnostics

We use PostHog for app usage events, feedback, and sampled session replay to understand errors and improve the experience. Events include device and app information, a pseudonymous installation identifier, screens visited, feature interactions, and performance or error information. Text inputs, images, and maps are masked in session replay, but other text visible on a screen, such as recipe text, can appear. Information you choose to send in feedback is also processed.

Subscriptions

When paid plans are available, Apple processes payment and RevenueCat helps validate purchases, restore access, and manage subscription entitlements. We receive purchase and subscription status associated with account or installation identifiers, not your full payment card information.

Why we use information

We use information to provide account access and app features, personalize food suggestions, process your requests, operate shared features, prevent misuse, manage subscriptions, respond to support requests, and improve reliability. If you opt into recipe news, we may use your email for those updates. You can withdraw that choice in the app or contact us.

Service providers and sharing

Providers include Cloudflare for hosting and storage; Apple and Google for selected sign-in and platform services; mapping and place providers for restaurant discovery; AI providers for requested features; Langfuse for AI diagnostics; PostHog for usage and feedback; and RevenueCat for paid-plan management when enabled. Their own terms and privacy policies govern their services. Public restaurant information may be cached across users to avoid repeatedly fetching the same menu. We do not sell personal information or use it for cross-app advertising tracking.

Retention and your choices

Account, contact, shared content, purchase, and operational records are kept as needed to provide the service, respond to requests, and meet applicable obligations. Retention periods differ by record and provider; the seven-day trace schedule is not a blanket deletion period. You can change contact preferences, control iPhone permissions, delete your account from Settings, or contact us to request access, correction, or deletion. Backups, legal records, and copies shared with others may be retained separately.

Children and international processing

TasteFlight is not directed to children under 13. If you believe a child has provided personal information, contact us. Our service providers may process information in the United States and other countries where they operate.

Contact and changes

For privacy questions or requests, email tasteflightapp@gmail.com.

We may update this policy as features and practices change. We will update the effective date and provide additional notice when required.