Privacy Policy

Taste10 works by learning your taste, so it holds real information about you, including your allergies. This page says exactly what it keeps, why, who else sees it, and how to get rid of it.

Who is responsible

Perelli GmbH, Dorfstrasse 5, 6318 Walchwil, Switzerland (legal notice). For anything on this page: privacy (at) taste10.com.

Swiss data protection law (FADP) applies to us, and the GDPR applies as well where we offer Taste10 to people in the EU or the EEA.

What Taste10 stores

Your account

When you first open the app, an anonymous user ID is created so your answers can be saved. It becomes your account when, at the end of the setup, you connect it to a way of signing in: an email address (we send you a 6-digit code, there is no password), your Apple ID or your Google account.

• Email address: we store it to sign you in and to reach you about your account.
• Sign in with Apple: we receive the email address Apple gives us, which may be a private relay address if you chose to hide your own, and a token Apple issues. We keep that token only so we can tell Apple to disconnect Taste10 when you delete your account.
• Sign in with Google: we receive your email address and the confirmation that Google signed you in.

With the account we also store your user name, the name you choose to be called and a profile photo if you add one.

An email address, Apple ID or Google account is needed to have an account. Everything else you tell Taste10 is up to you, though without your taste answers it cannot predict much.

What you agreed to, and when

Which version of the Terms of Use you accepted and when; when you agreed to us storing your diet and allergies; and, only if you ticked the box, when you agreed to receive emails about what is new in Taste10. We keep these records to be able to show what was agreed.

What you tell it about your taste

The answers from the setup, every quick-fire answer, the ratings you give things you have eaten, and what Taste10 works out from them: which qualities you lean toward, and how far. This is the profile that makes a prediction possible.

Your diet and your allergies

Allergies and intolerances are health information, and some diets (halal, kosher) say something about religion. The law treats both as especially sensitive, and so do we: we ask for them only because a recommendation that ignores them could hurt you, we ask for your explicit agreement before we store them, and we use them for nothing else: never for advertising, and for anonymous statistics only if you separately agree. So that every scan can be checked against them, they are sent to our AI provider with each scan (see below).

We also keep a history of changes to them: what was added, changed or removed, and when. That way we can show what Taste10 knew when you scanned something. The history is deleted with your account.

About you, if you choose to say

Gender, year of birth and the country you live in are optional, can be left empty, and can be cleared again at any time on the Profile tab. They help Taste10 read your taste in context, and we use them, without your name, for anonymous statistics about who uses Taste10. They are not sent to the AI provider. The app language is stored with them.

Your scans

The photographs you take, what the AI made of them, the score, any barcode it read, your own rating, and whether you saved the scan.

When you share

When you share a scan or your taste portrait, the app makes the picture and the message on your phone and hands them to the app you choose; they do not pass through us. We note that you shared, what (a scan, or your portrait and which version and language), the app you shared it with and whether it was sent, as far as your phone tells us, your Taste Insights at that moment, your phone's system, and when, so we can see how often and where Taste10 is shared. We never record what you wrote or who received it.

Your membership

Whether you have a membership, which plan, and until when. You buy it through Apple's App Store or Google Play; they handle the payment, and we never see your card or bank details.

Technical information

Our servers log technical details of each request, including your IP address, for security and to find faults; our hosting provider deletes these logs after a short time. If you write to us from inside the app, the email already contains the app version, the phone model and system, the app language, the time, your account number and your plan, so we can help without asking. You see all of it before sending, and you can delete any of it.

To apply the scan limits, we keep a separate list of when each analysis took place, and delete each entry after 30 days. This does not affect your scans: they stay in your history, with their date, until you remove them.

Why we are allowed to hold it

Where the GDPR applies, these are our legal bases. Swiss law does not tie every use to a legal basis in the same way: under the FADP we follow its principles and, where a justification is needed, rely on your consent, an overriding interest or the law.

To provide the app

Your account, your profile, your scans and your membership: without them there is no product. (Performance of a contract.)

Your explicit consent

Allergies, intolerances and diets, including sending them to our AI provider; and emails about what is new. You can withdraw a consent at any time: remove the entries, or tell us, and an email about news always has a link to stop them. Withdrawing does not make earlier processing unlawful.

Your consent

The optional details about you, which you give by filling them in and can clear at any time.

Our legitimate interest

Keeping the service secure and working, finding faults, preventing misuse (for example limits on how many scans an account can make in a day and in 30 days), understanding how memberships develop over time (see RevenueCat below), counting how often Taste10 is shared, and creating anonymous statistics (from your diet or allergies only if you separately agree).

Establishing or defending legal claims

The history of changes to your diet and allergies, so that what applied at a given time can be shown if there is ever a dispute. It stays when you remove an entry, and goes when you delete your account.

A legal obligation

Records we must keep by law, for example for accounting.

Who else sees it

We do not sell your personal data. We may use and share statistics that are aggregated and anonymous, for example how a group of people rates a kind of product, in a form that cannot identify you; your diet and allergies are used for them only if you separately agree. These are the companies that process data on our behalf, each for one job:

Supabase: database, accounts and photo storage

Supabase Inc. stores your data in the European Union (Ireland). Who may see it is enforced by the database itself, not merely by the app: nobody else can see your data unless you choose to share it.

OpenAI: the analysis of a scan

When you scan something, your photographs, your taste profile and your diet and allergies are sent to OpenAI to produce the result. Our contract is with OpenAI Ireland Ltd.; the data is processed by OpenAI in the United States, under standard contractual clauses. Your name, email address, user name and the optional details about you are never sent. Under the terms of our business account, OpenAI does not use the data to train its models and keeps no copy for us to retrieve; it may keep it for up to 30 days to detect misuse and then deletes it.

RevenueCat: memberships

RevenueCat, in the United States, keeps track of who holds a membership. It receives your account number (a random code, not your name or email) and, from Apple or Google, the record of your purchases: dates, plan, price, renewals and cancellations, and the country of the store, plus the technical data any request carries, such as the IP address. Nothing about your taste, diet or allergies is ever sent to it.

Sentry: error reports

When the app or our server runs into an error, a report goes to Functional Software Inc. (Sentry), stored in the European Union (Germany): what went wrong, where in the code, the app version, the phone model and system, and your account number. It contains no name, email address, photographs, taste data, diet or allergies, and no IP address is stored. Reports are deleted after at most 90 days. (Our legitimate interest in finding and fixing faults.)

PostHog: how the app is used

PostHog Inc. records, stored in the European Union (Germany), which screens and steps of the app are used, for example that a scan was finished or that the membership screen was shown, under your account number. That shows us where people get stuck and lets us compare two versions of a screen. It contains no name, email address, photographs, taste data, diet or allergies; IP addresses are discarded, and PostHog stores no identifier of its own on your phone. You can switch it off at any time: Profile, "Help improve Taste10". (Our legitimate interest in improving the app; switching it off is your right to object.)

Google (Workspace): email

The emails with your sign-in code are sent through our Google account, and if you write to us, your message is in our mailbox.

Apple and Google: app stores, payment, sign-in

They handle the download, the payment for a membership, and Sign in with Apple or Google if you use it. What they collect is governed by their own privacy policies, not ours.

Where data goes to the United States, it is protected by the safeguards the law provides for: the standard contractual clauses (with the adaptations Swiss law requires), or the data privacy framework the provider is certified under. You can ask us for a copy. We will name any further processor here before it starts.

The score is produced automatically

Taste10's prediction is made by software, without a person looking at it. It is a suggestion about food, nothing legally binding follows from it, and you are free to ignore it. An allergen note is information only: it is not a safety clearance and may be incomplete or wrong.

How long it is kept

Your account, your profile and your scans stay until you delete your account. Photographs are kept for a shorter time than the record: your 50 most recent scans keep their pictures, older ones lose them automatically, and a scan you save keeps its photograph until you remove it.

If you start setting up Taste10 but never create an account, what you entered is deleted automatically once it has not been used for 30 days.

"Remove from history" takes a scan out of your history and deletes its photographs straight away. What Taste10 learned from that scan stays in your profile, and the record behind it stays until you delete your account, because it is what your profile was built from.

Support correspondence is kept for as long as the matter and any follow-up require. Records we must keep by law are kept for as long as the law requires.

Deleting your account

In the app: Profile, then Delete account at the bottom. Or write to privacy (at) taste10.com from the address on your account. Deletion removes your account and everything attached to it: profile, answers, ratings, scans, photographs, Taste Insights. If you signed in with Apple, we also tell Apple to disconnect Taste10. It cannot be undone. Backup copies of our database are overwritten within 7 days, and our AI provider deletes what it kept of recent scans within 30 days.

Two things do not end with your account. A running subscription continues until you cancel it in your App Store or Google Play settings; the app reminds you before you delete. And RevenueCat keeps the record of your purchases under your account number, so that our figures about memberships stay correct. After deletion we can no longer connect that number to you, but Apple or Google could, so we treat the record as personal data: we keep it for at most three years, and delete it sooner if you ask.

The usage records in PostHog also stay after deletion, under the same account number, so that our figures stay correct. PostHog deletes them after one year, and we delete them sooner if you ask.

Your rights

You can ask what we hold about you, have it corrected, have it deleted, have its use restricted, ask for a copy in a portable form, object to a particular use, or withdraw a consent you gave. Write to privacy (at) taste10.com; we answer within a month.

If our answer does not satisfy you, you can complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority where you live.

If you live in the United States

We do not sell your personal data, and we do not share it for targeted advertising. Your allergies, intolerances and diets count as "consumer health data" under some US state laws; how we handle them, and your rights over them, are set out in our Consumer Health Data Privacy Policy. Whatever state you live in, you can ask us for a copy of your data, to correct it or to delete it, as described above.

Children

Taste10 is for adults: you must be 18 or older to use it. We do not knowingly collect data from anyone younger, and will delete it if we learn that we have.

Security

Every connection between the app and our services is encrypted. Keys that could reach other people's data exist only on our server, never in the app. Each account is isolated in the database itself, and that isolation is tested rather than assumed.

Changes

When this policy changes we update the date below, and we will tell you in the app or by email before a change that matters takes effect.

Last updated: 23 October 2026