TSTE

Privacy Policy

Last updated: March 2026

1. Overview

TSTE ("the App") is operated by Alexander Alber. We take your privacy seriously. This policy explains what data we collect, why, and how we handle it.

2. Data We Collect

Account Data (optional): If you sign in with Apple, we receive your Apple ID and, if you choose, your name and email. We use this solely for account management and progress sync.

Usage Data: Mission completions, points, badges, and progress are stored locally on your device. If you sign in, this data is synced to our servers (Supabase) so you can access it across devices.

Location Data: The App uses your location to verify proximity to mission locations and provide navigation. Location data is processed on-device and is not stored on our servers.

Analytics: Our website (tste.app) collects anonymous page views (page path, referrer) without cookies or personal identifiers. This is GDPR-compliant.

Restaurant Ratings (community): When you rate a mission, your 4-axis score (Food, Service, Ambience, Value) is submitted to our Supabase database under your anonymous user ID. Once a restaurant has at least 10 ratings, we display an aggregated "TSTE score" to other users — individual ratings are never shown publicly.

Mission Photos (community): If you choose to upload photos with your rating, they are stored in a private Supabase Storage bucket and shown on the corresponding restaurant page to other TSTE users. Photos are published anonymously (no name attached). Before upload, EXIF metadata — including any GPS coordinates embedded by your camera — is stripped on-device by re-encoding the image. You can delete your own photos any time, or report photos uploaded by other users via the in-app Report button; we review reports within 24 hours and remove inappropriate content.

AI Chef, Recipe Wizard & Meal-Plan Wizard (premium): When you use these AI features, your chat messages, questions, and questionnaire answers (e.g. dietary restrictions, allergies, diet goals) are sent to Anthropic PBC (San Francisco, USA), which processes them with the Claude Haiku 4.5 model to generate a reply, recipe, or meal plan on our behalf. Conversations are not stored on our servers — they live only on your device — but each message does briefly leave the EU to reach Anthropic's API. This transfer is covered by the EU Standard Contractual Clauses included in our data processing agreement with Anthropic. We do not send your name, email, or account identifiers to Anthropic — only the text you type into the chat.

Restaurant Ratings from Google (Places API): To show you a restaurant's public rating, we send the restaurant's name, address, and coordinates (not your personal data) to the Google Places API. Results are cached on our servers for up to 30 days to limit how often this lookup happens.

Restaurant Partner Portal (business owners): If you register or manage a restaurant through our Restaurant Partner Portal, we collect your business contact email, a salted-and-hashed one-time login code (the plain code is never stored), and a log of your own edits to your restaurant's listing. Login codes are delivered by email via Resend (San Francisco, USA), which processes your email address solely to transmit that message. Portal data is retained for as long as your restaurant listing is active and is never used for marketing. See Section 9 for details specific to restaurant partners.

3. Data We Do NOT Collect

4. Data Storage

App data is stored locally on your device using Apple's SwiftData framework. If you sign in, synced data is stored on Supabase (hosted in the EU). Purchases are handled entirely by Apple's App Store — we do not process or store payment information.

5. Your Rights (GDPR)

You have the right to:

To exercise these rights, contact us at info@inzpyre.me.

6. Data Retention

Guest data stays on your device only. Signed-in user data is retained until you delete your account. Anonymous analytics data is retained for 12 months.

7. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect data from children.

8. Changes

We may update this policy. Material changes will be communicated via the App or website.

9. Restaurant Partner Portal (Business Owners)

This section applies if you register or manage a restaurant on TSTE as a business owner, separately from the app-user data described in Section 2.

10. Contact

Alexander Alber
Toemlingerstr. 21
81375 München
Germany
info@inzpyre.me

Deutsche Version: Datenschutzerklärung