Privacy Policy
Last updated 17 September 2026
Tasted is a restaurant diary and recommendation app. You log places you've eaten, and you see what people you follow thought of theirs. This policy explains exactly what we collect, why, and what you can do about it. It describes what the app actually does today — not what it might do later.
Tasted is operated from Australia and is subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What we collect
| What | Why |
|---|---|
| Your email address | It's how you sign in. We email you a one-time code; we never store a password. |
| Your profile — username, display name, bio, profile photo | So other people know whose recommendation they're reading. |
| What you log — the restaurant, your rating, review, dishes, flavour tags, photos, the date you went, and optionally what you paid and how many of you there were | This is the product. It's what your diary holds and what the people you choose to share with can see. |
| Your lists and who you follow or block | To build your feed, your map, and your recommendations. |
| Your device's location, only while you're using the app and only if you allow it | To show restaurants near you, centre the map, and sort places by distance. We do not store your location. It's used to answer the request you just made and then discarded. It is never attached to a review. |
| Reports you file about other people's content | So we can review them. The person you report is not told who reported them. |
| Usage analytics — which screens you open, which actions you take, and a device identifier | To understand what works and what's broken. You can turn this off — see below. |
We do not collect your contacts, your photo library beyond the images you deliberately attach, your precise location history, payment details, or anything from other apps. Tasted has no advertising and we do not sell or share your personal information with anyone for advertising or marketing.
Who can see what you log
Every review you write has a visibility setting that you choose, and it's enforced on our servers — not just hidden in the app:
- Public — any signed-in Tasted user can see it.
- Followers — only people who follow you.
- Private — only you. A private review never appears in anyone else's feed, map, search, or recommendations, and is never counted in anyone else's taste match.
Your profile, your username, and who you follow are visible to other signed-in users. If you block someone, you disappear from each other's app and any follow between you is removed immediately.
Who we share it with
We use a small number of service providers to run the app. They process data on our behalf, under their own security obligations, and only for these purposes:
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database, sign-in, and photo storage | Sydney, Australia |
| PostHog | Usage analytics (only if you leave it on) | United States |
| Geoapify | Restaurant search — your search text and approximate area are sent to find matches | European Union |
| Expo (EAS) | Delivering the app and its updates | United States |
| Resend | Sending your sign-in emails | United States |
Some of these are outside Australia, which means your information may be stored or processed overseas. We'd also disclose information if we were legally required to, or where it's genuinely necessary to protect someone's safety.
Your photos
Photos you attach to a review are stored in private storage. They are not publicly browsable and cannot be reached by guessing a URL — the app requests a short-lived signed link each time it needs to display one, and only for people your visibility setting allows.
Turning analytics off
Open Settings in the app and switch analytics off. It takes effect immediately and stays off. The app works exactly the same with it off; we simply see less about how it's being used.
Deleting your account
Open Settings → Delete account. This is permanent and immediate. It removes your profile, every review and list you made, your photos (the actual image files, not just the records of them), your follows, and your sign-in. It cannot be undone and we cannot restore it for you.
One thing survives: if you added a restaurant that wasn't in our database, the restaurant itself stays, because other people's reviews may point at it. It is no longer attributed to you.
How long we keep things
Your content stays until you delete it or delete your account. Reports are kept after they're resolved so there's a record of what was decided. Analytics are retained by PostHog under their standard retention.
Your rights
You can see and correct most of your information directly in the app — your profile, your reviews, your lists. Under Australian privacy law you can also ask us for a copy of the personal information we hold about you, ask us to correct it, or complain about how we've handled it. Email us and we'll respond within a reasonable time.
If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Children
Tasted isn't intended for anyone under 13, and we don't knowingly collect information from them. If you believe a child has an account, email us and we'll remove it.
Security, honestly stated
Access to your data is enforced at the database level, so the rules about who can read what don't depend on the app behaving correctly. Photos are in private storage behind signed links. That said, no service can promise perfect security, and we won't pretend otherwise. If a breach ever affects you we'll tell you and notify the OAIC as the law requires.
Changes
If we change this policy we'll update the date at the top. If a change materially affects how your information is used, we'll tell you in the app rather than quietly editing this page.
Contact
Questions, requests, or complaints: hello@tasted.online