Privacy Policy

Effective and last updated: July 26, 2026

Scope and who controls your information

This Privacy Policy applies to the Tavelino mobile application, website, and related support services (together, the "Services"). Tavelino ("we", "us", or "our") is responsible for the processing described here. Questions and privacy requests may be sent to support@tavelino.app.

Information we process

• Anonymous app identifier and technical data. The App signs in through a randomly generated, anonymous Supabase user identifier. We process that identifier, authentication tokens, app version, operating system, language, request timing, and basic server logs so the App can connect securely, remember entitlements, enforce fair-use limits, and diagnose failures. We do not ask for a name, email address, or password to use the App.
• Kitchen photos and scan results. A fridge, pantry, or counter photo is uploaded only after you choose to scan it. Our server sends it to Google Gemini and may use OpenAI as a reliability fallback to recognize visible ingredients. Recognized ingredient names and your edits are then used to match recipes.
• Recipe activity and preferences. We process searches, ingredients, cuisine and dietary choices, cooking-time choices, recipe selections, and similar inputs to provide catalog matches. A search may be sent to Google Gemini, OpenAI, Serper, or Tavily when live search or language processing is needed. Saved recipes, shopping-list items, cooking progress, and completed-dish photos are ordinarily stored on your device.
• Sous Chef messages and audio. With microphone permission, the App records only when you activate the Sous Chef. Audio and the current recipe conversation are sent through our server to OpenAI, with Google Gemini available as a fallback, for transcription, a recipe-focused answer, and optional synthesized speech.
• Approximate country from network address. Our server may derive country-level location from an IP address to apply regional availability, cost, security, and abuse protections. We do not request precise GPS location for this purpose.
• Purchases and entitlements. Apple or Google handles payment. We receive product, transaction, and subscription-status information needed to verify access, but not your full payment-card number.
• Advertising and consent signals. The free version uses Google AdMob. Depending on your settings and region, Google may process device information, advertising identifiers, IP address, ad interactions, and consent choices to deliver, limit, and measure advertising. Where required, the App presents consent choices; iOS tracking permission is requested separately. Declining tracking does not remove ads.
• Crash reports. Builds configured with Sentry may send error details, device and app information, and diagnostic breadcrumbs after a failure. We configure this for troubleshooting, not advertising.
• Support communications. If you email us, we receive your email address, message, and any information you choose to include.

Why we process it

We process information to perform the service you request, maintain security and reliability, verify purchases, prevent fraud and excessive automated use, comply with law, and improve the Services. Where applicable law requires a legal basis, these purposes rely on performance of our contract, our legitimate interests in operating and protecting Tavelino, legal obligations, or consent for activities such as microphone access, tracking, or personalized advertising. You may withdraw consent through the App or device settings without affecting earlier lawful processing.

Providers and disclosures

We disclose only what is reasonably needed to providers acting for the purposes below:

• Supabase — anonymous authentication, database, usage ledgers, entitlements, and recipe/image storage.
• Fly.io — application hosting and delivery.
• Google Gemini and OpenAI — image understanding, recipe/language processing, Sous Chef transcription, answers, and speech.
• Serper and Tavily — recipe web-search queries and results.
• Google AdMob — advertising, consent signals, fraud prevention, and measurement.
• Apple App Store and Google Play — app distribution, purchases, subscription management, and store-required reporting.
• Sentry — optional crash and performance diagnostics.

We require service providers handling information for Tavelino to use it only for the contracted service, maintain appropriate safeguards, and provide privacy protection consistent with this notice and applicable law.

We may also disclose information if reasonably necessary to comply with law, protect people or the Services, investigate abuse, or complete a business transaction subject to appropriate confidentiality and notice. Tavelino does not sell personal information for money. Advertising disclosures may be treated as "sharing", targeted advertising, or a "sale" under some local laws; applicable App and device controls can be used to opt out.

Retention and deletion

• Kitchen scan photos and Sous Chef audio are transmitted to produce the requested result and are not intentionally retained by Tavelino as a personal photo or voice library. Short-lived infrastructure logs and provider retention may still apply.
• Anonymous identifiers, entitlement records, and usage ledgers are retained while needed to operate the App, verify purchases, enforce limits, resolve disputes, and meet legal obligations, then deleted or de-identified.
• Server security and diagnostic logs are generally kept for a limited operational period unless a longer period is needed to investigate abuse or an incident.
• Saved recipes, lists, progress, and completed-dish photos stored locally remain until you remove them, clear app data, or uninstall the App.
• Support emails are kept while the request is active and as reasonably needed for follow-up and legal records.

Our processors may retain information under their own service terms and legal obligations. We periodically review retention and keep information no longer than reasonably necessary for the stated purpose.

Your choices and rights

You can deny or revoke camera, photo-library, microphone, notification, and tracking permissions in device settings; change advertising or consent choices where the App makes them available; delete local recipes, photos, and list items in the App; and cancel subscriptions through Apple or Google. Because Tavelino uses an anonymous identifier, include enough detail for us to locate the correct record when making a request. We may ask for the identifier associated with the App, but never for a password.

Depending on your location, you may request access, correction, deletion, restriction, portability, or an objection to certain processing; withdraw consent; opt out of targeted advertising or qualifying data sharing; and appeal a decision. You may also complain to your local data-protection authority. Email support@tavelino.app. We will verify and respond as required by applicable law and will not discriminate against you for exercising a privacy right.

Step-by-step instructions for deleting local App data, requesting deletion of server-side records, and changing advertising or device permissions are available on our Data and Deletion page.

Security

We use safeguards designed to protect information, including encrypted transport, authenticated API requests, server-side purchase verification, restricted service credentials, and rate and spending limits. No system is perfectly secure, so we cannot guarantee absolute security.

Children

Tavelino is not directed to children under 13, or a higher minimum age where local law requires it, and we do not knowingly collect personal information from children. A parent or guardian who believes a child submitted information should contact us so we can investigate and delete it.

International processing

Providers may process information in the United States and other countries that may have different data-protection laws. Where required, we rely on recognized transfer safeguards or another lawful transfer mechanism.

Third-party content and links

Recipes credit and may link to independent publishers. Their sites and privacy practices are outside Tavelino's control; review their notices before providing information to them.

Changes

We may update this policy as the Services or law change. We will update the date above and provide additional notice in the App when a change is material and notice is required.

Contact