TasteBot Privacy Policy

Last updated: September 20, 2025

TasteBot, LLC (Texas, USA) ("TasteBot," "we," "us," or "our") provides a mobile application that uses AI to generate recipes based on user preferences (the "Service"). This Privacy Policy explains how we collect, use, and share information about users of the Service.

If you do not agree with this policy, please do not use the Service.

1. Who we are & how to contact us

• Controller: TasteBot, LLC – Texas, USA
• Address: 919 Kavanagh Dr, Austin, TX 78748, USA
• Contact: support@tastebotai.com

2. Children’s privacy

The Service is intended for individuals 13 years and older. We do not knowingly collect personal information from children under 13.

3. Information we collect

• Account identifiers: Email address.
• Preferences & content: Dietary preferences, saved recipes, favorites, and prompts related to recipe generation.
• Device & app information: Device model, operating system, time zone; activity related to recipe generation (counts/metadata).
• Payments & subscriptions: Plan tier and renewal status via Apple, Google, or Stripe. We do not collect precise location, health data, photos/media, contacts, or other sensitive categories.

4. How we use information

Provide, maintain, and improve the Service; authenticate users; save preferences and recipe history; manage subscriptions; enforce terms and prevent abuse; and comply with legal obligations.

5. AI processing

We send relevant preferences and prompts to OpenAI (processor) to generate recipes. AI outputs may be stored to enable saved recipes, variations, sharing links, and exports.

6. Legal bases (EEA/UK)

Contract, Legitimate interests, and Legal obligations.

7. Sharing of information

We do not sell or "share" personal information for cross-context behavioral advertising. We disclose information only to processors/service providers: Supabase (backend/db/auth), OpenAI (AI), Mailgun / Google Workspace (email), Apple/Google/Stripe (payments).

8. International transfers

We are based in the United States and may process data where our processors operate. For EEA/UK users, we rely on Standard Contractual Clauses (SCCs) or other lawful mechanisms where applicable.

9. Data retention

We retain data until you delete your account or we no longer need it. After deletion, we delete or de-identify personal data within a reasonable period subject to legal obligations and backups.

10. Security

We use safeguards including TLS in transit, managed at-rest encryption via our infrastructure (e.g., Supabase), and row-level security (RLS). No method is 100% secure.

11. Your rights

Depending on location: access, deletion (in-app), correction, objection/restriction/portability (where applicable). Contact support@tastebotai.com. EEA/UK users may contact their data protection authority.

12. Data export

We currently do not provide self-serve exports. Contact us if you require a copy; we will evaluate requests where legally required.

13. CCPA/CPRA

We do not sell or "share" personal information as defined by CCPA/CPRA.

14. Changes

We may update this policy and will indicate the effective date. Material changes will be reasonably noticed.