Palate Privacy Policy

1. Introduction

This policy explains how Anthony Eli Rasch - sapplify ("sapplify", "we", "us") processes personal data when you use Palate.

Data controller

Anthony Eli Rasch - sapplify
PO Box 004
91501 Nove Mesto nad Vahom
Slovakia
ICO: 56665032

Privacy questions: privacy@sapplify.com

2. What you enter

Palate can store meal descriptions, detected or custom food tags, optional meal photos, self-reported energy, mood and digestion ratings, notes, saved quick meals, a first name used inside the app, and device-local preferences such as tracked metrics and reminder times.

Meal and feeling entries can reveal health information. Where Article 9 GDPR applies, we process this special-category data on the basis of your explicit choice to enter it and, for Sync, your separate choice to turn Sync on.

3. On-device storage and analysis

By default, entries are stored in a local database on your device. Ingredient detection, correlations, insights, and reports are calculated there. Palate does not send entries to a remote AI service for analysis. If you delete the app without turning on Sync, we have no copy of those entries.

4. Usage analytics and error reports

When the shared Sapplify service is configured, Palate sends limited events to our servers in Ireland: app and version, platform, a randomly generated installation identifier, session identifier, event names and values, and an account identifier while signed in. Once per installation, technical context can include device manufacturer, model, and operating-system version. Error reports can include the error, stack trace, and technical context.

The installation identifier is created by Palate, is not an advertising identifier, is not derived from hardware, and disappears when you uninstall. We do not intentionally include meal descriptions, food tags, feeling ratings, notes, names, or photos in analytics events.

You can stop this collection in Settings under Privacy. Palate uses no third-party analytics SDK and sends nothing to an advertising network.

5. Sapplify Account and Sync

Palate works without an account. If you create a Sapplify Account and turn on Sync, meals, feelings, saved quick meals, custom tags, and their timestamps are copied to our servers so another signed-in device can retrieve them.

Meal-photo image files do not sync. The database row can contain an on-device file reference, but the image stays on the device that took it. Your name, tracked metrics, and reminder times also remain device-local.

Signing in means we hold your email address and any identifier returned by an authentication provider you use. The Sapplify Account Privacy Policy applies to account and Sync processing. Turning Sync off stops future copying. Deleting your account removes its server-side app data.

6. Contact messages and purchases

If you contact us through the app, we receive the name, email address, subject, and message you provide, plus technical context such as app version, platform, and language when supplied. We use this to answer and troubleshoot.

Palate Pro is a one-time purchase processed by Apple or Google. We do not receive your card details or billing address. We receive purchase status and receipt information needed to verify and restore the entitlement. When you are signed in, the entitlement can also be associated with your Sapplify Account.

7. Why we process data

Where the GDPR applies, our legal bases are:

• Explicit consent: health-related meal and feeling data you choose to enter and any copy you choose to Sync.
• Performance of a contract: providing storage, insights, purchases, restoration, account features, and Sync you request.
• Legitimate interests: limited analytics and error reports used to maintain, secure, and improve Palate. You can object by switching analytics off.
• Legal obligations: processing required by applicable law.

8. Processors and international transfers

We do not sell personal data or share it for advertising. Supabase hosts our database and authentication in the EU for analytics, contact messages, accounts, and optional Sync. Apple and Google distribute the app and process store purchases. Authentication providers process sign-in data only when you choose them.

If you use Palate outside the EU, information described here can be transferred to and processed in the EU. Service providers can process limited information in other countries under the safeguards available for their services.

9. Security and retention

Information sent to our servers travels over TLS and is encrypted at rest. Synced rows are restricted by account at the database level. Sapplify Sync is not end-to-end encrypted: we operate the service and hold the encryption keys.

• On-device entries remain until you delete them or remove the app.
• Synced entries remain until you delete them or delete your account.
• Live analytics and error events are retained for 30 days, then archived for statistical use with the account identifier removed.
• Contact messages are retained as needed to answer the enquiry and keep a reasonable support record.
• Store providers retain purchase records under their own policies.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data. Palate lets you view, edit, and delete entries; clear all local data; export CSV or JSON with Pro; switch analytics off; and delete a Sapplify Account and its server-side copy.

For anything you cannot do in the app, email privacy@sapplify.com. EEA and UK residents may also complain to their data-protection authority. We do not sell personal information or share it for cross-context behavioural advertising.

11. Children and policy changes

Palate is not directed at children under 13 and we do not knowingly collect their data. Contact us if you believe a child has provided information so we can investigate and help remove it.

We may update this policy when Palate, our services, or applicable law changes. We will update the date here and provide notice or renewed acceptance for material changes where required.

12. Contact

Privacy requests: privacy@sapplify.com
Palate support: palate@sapplify.com
Post: Anthony Eli Rasch - sapplify, PO Box 004, 91501 Nove Mesto nad Vahom, Slovakia

This policy is governed by Slovak law without limiting mandatory rights that apply where you live.