Privacy Policy

• Account info: your name, username, email address or phone number used to create, verify or recover your account, and an optional profile photo. Supported sign-in methods include Sign in with Apple and email or phone verification. Your verified contact details and account identifiers are linked to your PalAte profile.
• Recovery key: if you generate one, we store only a salted hash of it (scrypt). We cannot read the key itself, which is why a lost key cannot be recovered — only replaced.
• Location: only when you grant it, used to find restaurants near you. We keep the coordinates of your last search — never a continuous track.
• Activity: swipes, saves, ratings, posts, lists, direct messages, friends, and reservation plans. Used to personalize your deck and power the social features you opt into.
• Contacts (opt-in): if you use friend-finding, your address book is read and hashed on your device; only SHA-256 hashes of emails and phone numbers are sent to our servers to check for matches. Your raw address book never leaves your phone.
• Calendar (opt-in): with your permission, PalAte can read calendar events to find reservations and free-time windows, and save reservations to your calendar. Matched reservations and availability you share sync to your account. Connecting Google Calendar allows these features to use your primary calendar. The separate Use my calendar occasions setting is off by default. If you enable it, upcoming birthday, anniversary and celebration titles and dates can be used by the Concierge to suggest plans. Event notes and attendees are excluded from this occasion context; friends' private event titles are not read.
• Concierge and shared excerpts: your prompts, conversation context, and text or email excerpts you deliberately share can be used to help plan. The app does not read your iOS Messages history or an email inbox in the background. Calendar permission does not grant email access. If you separately connect Gmail, choosing an email loads a limited preview of recent travel and reservation emails (sender, subject, date and short excerpt). Full bodies and attachments are not fetched. Only an excerpt you review and send is added to the Concierge conversation. Google authorization tokens are kept on the server to maintain your connection. Suggestions can also use your app activity, accepted friends' public ratings, shared availability, and plans you can access.
• Photos and camera (opt-in): only the photos you attach to posts or set as your profile picture.
• Device info: iOS version, app version, device model, and a push token if you enable notifications.
• Payment info: none, ever. PalAte is free and processes no payments of any kind.

• Run the app: the discover deck, ratings, posts, messaging, reservation availability, and personalized planning suggestions. The Concierge's automatic briefing is read-only; sending invitations or taking a coordinating action uses the app's review and confirmation flow.
• Send push notifications you've opted into (friend activity, reservation availability, sign-in approvals). Every category can be turned off in Settings.
• Protect your account: signing in on a new device can require an approval code shown on a device you already trust.
• Improve the product: pseudonymous product analytics via PostHog (event counts tied to a random ID, not your name or email).

• Supabase (database, auth, storage): hosts your account and content data.
• Vercel (hosting): runs the website and backend API.
• Firebase Authentication (Google): processes email or phone verification data for supported sign-in methods and account protection. Google Calendar supplies calendar data only when you connect it. Gmail supplies the email previews you explicitly request after granting separate read access.
• Google Gemini: processes Concierge prompts and relevant planning context to produce responses, including excerpts and occasion context you choose to share. ElevenLabs processes audio and conversation context when you use voice features.
• Google Places and booking platforms — Resy, OpenTable, SevenRooms, Toast Tables, Tock, Yelp: queried in real time for restaurant details and table availability. These requests carry only the venue, date, and party size — never your identity. Completing a booking happens in that platform's own app or site, under its own privacy policy.
• Apple APNs: delivers push notifications.
• PostHog: product analytics, pseudonymous IDs only.

We do not sell or rent your personal information to anyone.

• Access: request a copy of your data — email austinomala2002@gmail.com.
• Delete: delete your account from Settings → Account. Your profile, posts, messages, and ratings are removed; residual backups clear within 30 days. Aggregated analytics that don't identify you may be retained.
• Opt out of analytics: Settings → Privacy → Analytics.
• Revoke permissions: location, contacts, calendar, photos, microphone, and notifications can each be withdrawn in iOS Settings → PalAte. You can turn off calendar occasion sharing or disconnect Google in Connections. Disconnecting Google removes both Gmail and Google Calendar access. Turning off access stops future reads; use the account and content deletion controls to remove information already saved.