Privacy Policy
Effective 25 October 2026
This policy explains what Tastefully collects, who it is shared with, how long it is kept and how to have it deleted. It covers the Tastefully iPhone app and this website.
The short version. Tastefully uses PostHog to understand onboarding, feature use, reliability and costs, and Superwall to manage and improve paywalls. We do not sell your information or share it for advertising. Photos you select for a dump are kept on your phone and sent for analysis when you request a build; our backend does not save those uploaded image files. Profile scans have different storage and retention rules, explained below.
Your account
Setup progress is initially saved on your phone. When a feature such as profile lookup needs an authenticated connection, the app creates a guest account with a random identifier. This account has no sign-in email or name attached, but its identifier links your requests, answers and results.
Completing onboarding asks you to sign in with Apple or Google. We normally link that identity to your guest account; if it already belongs to another Tastefully account, signing in returns you to that account instead of combining the two histories. We receive the account information the provider supplies, which can include an email address and name. If you choose Apple's Hide My Email, the email address supplied to us is a private relay address.
What you give us
- Your answers during setup — age range, gender, what you want out of the app, what you are concerned about, lifestyle tags and the taste references you pick. We keep structured selections and changes as you progress, including unfinished onboarding, as well as submitted answers and the version of each question.
- An Instagram handle — yours, or someone else's, whenever you run a scan.
- Photos from your camera roll — the ones you select for a dump. The app copies them into its local storage; reduced-size copies are sent for analysis when you request a build or retake.
- Bug reports, if you send one — your message, an optional contact email, and your app version, iOS version and device model.
- Launch waitlist, if you join — your email address, signup time, the version of the notification wording you agreed to, and campaign tags included in the page link, as explained below.
Your dump photos and taste preferences
When you build or retake a dump, reduced-size copies of your selected photos pass through our service to Google's Gemini API. Our backend processes those image files in memory and does not write them to its database or permanent file storage. The app keeps local photo copies, drafts and saved dumps on your phone; Tastefully does not provide a cloud backup of those photo files.
We save the returned photo ordering and explanation, taste preferences and generated taste description, request identifiers, counts, outcomes and usage records. Descriptions of the reference images you pick help Gemini create that taste description. The reference images are not added to your dump. Lifestyle choices can also be sent to Gemini when it prepares advice about your own profile.
When you export a dump, iOS writes the rendered images to Photos, and to an album when permission allows. Those exported copies remain in your Photos library until you remove them there. An export does not tell us whether you later post the images on Instagram.
Our storage rules do not promise that analysis providers retain nothing. Google's processing and retention are governed by its Gemini API terms and the service configuration.
Profile lookups and scans
Entering an Instagram handle sends it to our lookup service and Apify to retrieve public profile details, such as the username, display name, profile photo and private-account status. This lookup is separate from a full scan. Public lookup results are cached on our server and scheduled for deletion after seven days.
A full scan fetches public profile information and available images through Apify. Google's Gemini API analyses that material to produce scores and written feedback. Private posts are not accessed; the app asks you to make your own profile public before continuing when needed.
Scan analysis images are stored privately and become eligible for scheduled cleanup seven days after a scan finishes. Cleanup can take longer because of failures or a backlog. Saved scan results, supporting profile information and result-card images remain with the scan until account deletion or a deletion request. The seven-day image cleanup does not delete the saved result or all associated metadata. Apify's own dataset retention is separate from our server cleanup.
Scanning someone who is not you. Tastefully lets you scan public Instagram profiles other than your own. If you do that, you are asking us to process information about another person. Only scan profiles that are public, only do it for your own personal use, and do not use what you get back to harass, profile or make decisions about anybody. If you are the subject of a scan and want the record removed, email us and we will delete it.
What we collect automatically
- Device integrity checks — Tastefully uses Apple's App Attest and DeviceCheck to help verify app installations and protect generation allowances. We keep installation and account identifiers, attestation keys and receipts, and eligibility and abuse-prevention records. These records are linked to your account or installation; they are not advertising identifiers.
- Subscription state — your product and subscription status, relevant purchase and expiry dates, signed transaction information and transaction identifiers used to verify access and restore purchases. Apple handles the payment; we do not receive your payment-card details.
- Usage records — request identifiers, timestamps, outcomes, provider usage and costs, and rate-limit records, including hashed network identifiers where available, so that per-account limits and service reliability can be managed.
We do not request GPS location, your contacts or an advertising identifier, and we do not upload your camera roll as a whole. We use PostHog for product analytics. Events include screen visits, structured onboarding choices, feature outcomes, subscription access, app version, device and operating-system information, timings and generation costs, linked to a pseudonymous identifier. We do not send PostHog your name, email, Instagram handle, photos, raw AI responses or bug-report text. Session recording, automatic screen/tap capture and PostHog IP-location enrichment are disabled. Network providers still receive the connection information needed to deliver requests.
This website
The website does not load the app's PostHog SDK or advertising trackers. Cloudflare serves the pages, and Google Fonts provides the typeface. Requests to these services include ordinary connection information, such as IP addresses and request headers.
If you join the waitlist, you ask us to send one email when Tastefully launches. We keep your email address in a private Supabase table, together with the signup time and notification-wording version. If the link you followed includes utm_source, utm_medium or utm_campaign tags, or a short creator path such as /ig/username, we also keep the platform and creator or campaign information from that link to understand what brought the signup. Joining the waitlist does not create an app account or subscribe you to a newsletter. We do not send a confirmation email or verify ownership of the address when you join.
Cloudflare processes signup requests, including the email and campaign tags, and limits repeated requests using connection information. We do not store your IP address with the waitlist entry. You can withdraw your launch-notification request and have the entry removed by emailing support@tastefully.app from the address you signed up with.
Who we share it with
We use the following services to provide the app and website. Information may be processed outside your country, including in the United States for PostHog.
| Service | What it does | What it receives |
|---|---|---|
| Supabase | Authentication, backend hosting, database and scan-image storage | Account and setup data, generation requests and results, scan media, support and security records, and waitlist emails, signup times, notification-wording versions and campaign tags |
| Google (Gemini API) | Analyses photos and profiles and generates taste descriptions | Selected dump photos, public profile material, reference descriptions, taste context and relevant lifestyle choices |
| Apify | Fetches public Instagram profiles | The handle being scanned |
| Apple | App Attest, DeviceCheck, App Store billing, Sign in with Apple | Device attestation, purchase records, your Apple identity |
| Sign in with Google | Your Google identity | |
| Superwall | Paywalls, purchase management and paywall analytics | Your account identifier, subscription and purchase information, paywall interactions, and the profile handle and thumbnail used to personalize the paywall |
| Cloudflare | Serves and protects this website and processes waitlist signups | Website requests, ordinary connection information, and waitlist emails and campaign tags submitted through the website |
| Google Fonts | Loads this website's typeface | Font requests and ordinary connection information |
| PostHog (US hosting) | Product analytics, reliability and cost analysis | Pseudonymous identifiers, structured onboarding choices, screen and feature events, app/device information, timings and cost records |
We do not sell your personal information, we do not share it for advertising, and we do not use it to train our own models.
How long we keep it
- Waitlist entries — automatically deleted by a daily cleanup once they are older than six months. You can request earlier removal by emailing support.
- Selected dump photos — retained locally for your drafts and saved dumps; uploaded image files are not saved by our backend. Exported copies are controlled through your Photos library.
- Profile lookup cache — scheduled for cleanup after seven days.
- Scan analysis images — eligible for cleanup seven days after completion; actual cleanup may take longer.
- Account, onboarding-answer history, preferences, saved results and scan cards — kept until account deletion or a deletion request, except for the separate records described here.
- Product analytics — retained in PostHog for product analysis until removed through our analytics deletion process. Deleting an account in the app automatically queues removal of the associated PostHog profile and events; see below.
- Bug reports — scheduled for deletion after 180 days; optional contact emails are scheduled to be cleared after 90 days. Reports can remain after account deletion, with the account link removed.
- Billing, security and abuse-prevention records — retained as needed for those purposes. Account deletion removes credentials and personal request content, but limited usage, cost and anti-abuse records can remain.
Deleting your data
In the app, open Profile → Delete account. Once deletion succeeds, your account, account-linked answers and preferences, saved scan records and stored scan images are removed, and this phone's app data and sign-in credentials are cleared. This does not remove images you already exported to Photos, cancel an Apple subscription, or remove the limited retained records described above.
Deleting your account automatically queues deletion of its linked PostHog profile and historical events. We retry unsuccessful requests and repeat accepted requests to cover delayed analytics delivery. PostHog processes deletion asynchronously, so it is not immediate. We retain a minimal account identifier and deletion status while processing the request and for 30 days after the final accepted request. Unlinked anonymous activity and records held separately by other service providers may need separate handling. Email support@tastefully.app if you cannot access the app or need help with a broader deletion request. We handle deletion requests within 30 days, subject to the retention described above and any applicable legal obligations.
Deleting the app from your phone does not by itself delete information held on our servers. Manage or cancel your subscription separately through Apple's subscription settings, available from Profile → Manage subscription.
Your rights
Wherever you live, you can ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing the address above.
If you are in the UK, the EEA or Switzerland, you additionally have the right to object to or restrict processing, the right to data portability, and the right to complain to your national data protection authority. We process your data to provide the service you asked for, and on the basis of our legitimate interest in keeping that service secure and affordable to run.
If you are a California resident, you have the right to know what we collect, to request deletion, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under the CCPA.
Security
Traffic is encrypted in transit. Authentication and database access controls restrict access to account records. Protected generation requests use device attestation and server-side allowance checks. These measures reduce unauthorized access and abuse; no service can promise absolute security.
Children
Tastefully is intended only for adults aged 18 and over. If you believe someone under 18 has used the app, email us and we will delete the account.
Changes
If this policy changes materially we will update the effective date above and, where the change affects how your existing data is used, tell you in the app.