Privacy Policy

• Account info: the name and email you choose to share through Sign in with Apple, your username, and an optional profile photo. Apple sign-in is the only sign-in — we never see or store a password.
• Recovery key: if you generate one, we store only a salted hash of it (scrypt). We cannot read the key itself, which is why a lost key cannot be recovered — only replaced.
• Location: only when you grant it, used to find restaurants near you. We keep the coordinates of your last search — never a continuous track.
• Activity: swipes, saves, ratings, posts, lists, direct messages, friends, and reservation plans. Used to personalize your deck and power the social features you opt into.
• Contacts (opt-in): if you use friend-finding, your address book is read and hashed on your device; only SHA-256 hashes of emails and phone numbers are sent to our servers to check for matches. Your raw address book never leaves your phone.
• Calendar (opt-in): if you grant calendar access, the app scans on-device for reservation-looking events (Resy, OpenTable, etc.) so your PalAte calendar stays complete; matched reservations sync to your account.
• Photos and camera (opt-in): only the photos you attach to posts or set as your profile picture.
• Device info: iOS version, app version, device model, and a push token if you enable notifications.
• Payment info: none, ever. PalAte is free and processes no payments of any kind.

• Run the app: the discover deck, ratings, posts, messaging, and reservation availability.
• Send push notifications you've opted into (friend activity, reservation availability, sign-in approvals). Every category can be turned off in Settings.
• Protect your account: signing in on a new device can require an approval code shown on a device you already trust.
• Improve the product: pseudonymous product analytics via PostHog (event counts tied to a random ID, not your name or email).

• Supabase (database, auth, storage): hosts your account and content data.
• Vercel (hosting): runs the website and backend API.
• Google Places and booking platforms — Resy, OpenTable, SevenRooms, Toast Tables, Tock, Yelp: queried in real time for restaurant details and table availability. These requests carry only the venue, date, and party size — never your identity. Completing a booking happens in that platform's own app or site, under its own privacy policy.
• Apple APNs: delivers push notifications.
• PostHog: product analytics, pseudonymous IDs only.

We do not sell or rent your personal information to anyone.

• Access: request a copy of your data — email austinomala2002@gmail.com.
• Delete: delete your account from Settings → Account. Your profile, posts, messages, and ratings are removed; residual backups clear within 30 days. Aggregated analytics that don't identify you may be retained.
• Opt out of analytics: Settings → Privacy → Analytics.
• Revoke permissions: location, contacts, calendar, photos, and notifications can each be withdrawn any time in iOS Settings → PalAte.