Privacy.

Palate is a private restaurant journal. The data the app collects is the data you put into it — and a small amount of account information required to keep your guide synced across your devices.

• — Account

  When you sign in with Apple, Google, or email, we store your user ID, your email address, and (where you provide it) your display name. Apple Sign In may give us a private relay address instead of your real email — that’s fine; we never need the underlying address.

• — Your guide

  Restaurants, visits, dishes, tier marks, notes, occasions, companions, trip names, and the photos you attach to a visit. All of it is yours; none of it is published.

• — Anonymous telemetry, opt-out

  Counts of features used (e.g. how often the Add flow is opened), platform information, and crash diagnostics. Never restaurant names, never note text, never photos, never locations. You can turn it off in Settings.

We use account data to authenticate you and sync your guide between your devices. We use your guide data to show it back to you and to render the annual PDF. We use anonymous telemetry to understand which features are working and which need redesign.

We do not advertise. We do not profile. We do not train models on your guide. Your data is not used to make decisions about anyone other than you.

Palate runs on a small set of vendors. Each one is mentioned because your data passes through it.

• — Firebase (Google LLC)

  Firebase Authentication stores the credentials that let you sign in. Cloud Firestore stores your guide. Firebase Storage stores your photos. Data is fenced to your account by security rules and is held in Google’s data centers under their Firebase Data Processing Terms.

• — Apple (StoreKit)

  Subscription and one-time purchase processing happens entirely inside Apple’s payment system. We never see your card details; we receive only the entitlement that says you’re a paying customer.

• — Apple Sign In, Google Sign In

  Used only to authenticate you. We receive only the identifiers described above.

We do not use Google Analytics, Meta Pixel, or any cross-site advertising tracker.

Open Palate and go to Me → Settings → Account → Delete Account. One confirmation, and the app:

• · wipes your Firestore documents,
• · deletes your photos from Firebase Storage,
• · removes your Firebase Authentication account,
• · clears the local SwiftData cache on the device.

Once that completes, we don’t keep a copy. We can’t restore the data afterward, even if you ask. If you would prefer we delete your data for you, write to support@palate-journal.app from the address on the account.

Each December, the app renders a print-ready PDF of your year. Pro subscribers get one for every year on file. You can also share an individual restaurant or visit as an image card from the share sheet. If you would like a structured JSON export of your guide, email support@palate-journal.app and we will send you one.

Palate is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has signed up, contact us and we will delete the account.

If we change anything material in this policy, we will surface a notice in the app the next time you open it and update the date at the top of this page. Substantive changes — new vendors, new data types, new ways your data is used — get an in-app banner you have to acknowledge before continuing.

Privacy questions, deletion requests, or anything else: write to support@palate-journal.app. We aim to reply within two business days.