Privacy Policy
Version 1.0 · Effective 26 October 2026
Foretaste needs a menu photograph or pasted menu text to do its job, and it gives you back a menu you can understand. This policy covers what is sent when you use that feature, what stays on your phone, and the choices you have.
May leave your phone
- The menu photograph or menu text you choose to submit
- The language you want to read it in
- Limited technical information needed to run and protect the service
- Feedback and screenshots, only when you choose to send them
- For a deliberate dish report: that dish’s details, image reference, report reasons, note and JSON; the service attaches its stored image to the support email
- Your installation identifier, menu/picture credit-use records and Apple-signed subscription and credit-pack purchase information used to verify purchases and manage allowances
Stays on your phone
- Your dining preferences, allergies and avoided foods
- The people you have added to your table
- Saved menu history, apart from a dish you deliberately report
- Your app settings
Who we are
Foretaste is an iPhone app. For any question, privacy request or support, write to support@foretaste.dev.
What we use it for
A menu you submit is used to identify the dishes, translate and describe them, estimate taste and ingredients, and draw optional dish pictures. Your reading language is used to return the result in that language. Limited connection information is used to deliver the service, prevent abuse and keep it reliable. Feedback you send is used to reply and to improve the app. We do not sell menu content or use it for advertising. Purchase and usage records verify subscription access, maintain credit balances, prevent duplicate charges and abuse, and support purchase restoration.
How long we keep it
We keep information only as long as reasonably necessary for the purposes above, and we take reasonable steps to minimise what we retain. Derived menu information and individual dish analyses may be kept indefinitely to reuse matching results across scans and reading languages. This includes extracted menu text, reusable culinary profiles and localized text. To translate a saved menu into another language, the app sends a reference to the retained reading and the requested language, without uploading the photograph again. These caches have no automatic expiry and are not linked to an account or to your dining preferences. Anything saved in the app stays on your phone until you remove it or reset the app, except for a dish you deliberately report. Feedback and dish reports, including attachments, remain in the support inbox until manually deleted; there is no automatic expiry.
Subscriptions and weekly-credit records
To verify purchases and count weekly credits, we retain a random installation identifier, a salted digest of the original App Store transaction identifier, subscription product and entitlement dates/status, and records of menu readings and dish pictures, including their times, which pool paid, menu identifiers, dish counts and salted menu-source references. Restoring a subscription links installations to the same subscription record. For a credit pack we retain a salted digest of its App Store transaction identifier, its product, its credits, its purchase and refund dates, and which installations presented it; restoring a pack lets those installations spend its credits. Apple-signed transaction and renewal information is sent to our service, and Apple sends subscription changes through App Store Server Notifications. We do not receive your payment-card details. A daily cleanup deletes credit-use records, credit weeks and saved-menu records 35 days after they were made. After 35 days a credit pack's use records keep only the count of credits it has spent, without the installation; the pack's own record is kept so that a used-up pack cannot be credited twice, and its use records and installations are deleted 35 days after a refund. A subscription record is deleted 90 days after the subscription ends or is refunded. An installation identifier is deleted once it is at least 35 days old and no other record refers to it. A reading result has a one-day expiry for replay by its installation. Expired result content and its bookkeeping row are cleared on later service writes or by the daily cleanup, with the row eligible for removal after two days; physical removal may therefore occur later than expiry. In-progress dish names are cleared when the reading ends and stale progress is eligible for cleanup after ten minutes. Resetting or deleting the app does not delete these server records or the shared content caches. You can request access or deletion through support; we may need enough information to locate and verify the records.
Other people in the frame
A menu photograph taken in a restaurant can catch other diners or staff by accident. Please frame the menu, not the room, and retake the picture if someone else is in it.
Service providers
We use Cloudflare to host and protect the service; Google, Anthropic and OpenAI to process menu requests; and Krea and OpenAI to create dish pictures. A menu photograph or pasted text normally goes to Google for analysis and may go to OpenAI if that analysis is unavailable or fails. When no matching dish analysis is cached, the dish names and printed text read from it then normally go to Google to describe each dish, and to Anthropic, then OpenAI, if that is unavailable or fails. When text in the requested language is not cached, derived menu and dish information normally goes to OpenAI for translation, and to Google, then Anthropic, if that is unavailable or fails. A dish's names and origin normally go to OpenAI to write its “About this dish” card, and to Google if that is unavailable or fails. Dish names and visual prompts normally go to OpenAI. If OpenAI cannot take them in time or fails, they go to Krea through Cloudflare. These providers handle information only to provide those services for us, under appropriate safeguards. Other providers deliver support email and run this website. We do not sell, rent or share your information for advertising.
This website
If you ask for a launch notification, we use the email address you give to email you at most three times: to confirm the request, to confirm you are on the list, and once when Foretaste launches. Every one of those emails carries an unsubscribe link, and you can also ask us to remove the address at any time by writing to support@foretaste.dev; it is not added to a marketing list. The site collects limited, aggregated usage counts to see which pages are useful. It sets no advertising profile and no tracking cookie.
Your choices
- Don't submit a menu or feedback. Nothing is sent for those features until you choose to use them.
- Check before sending. Review a photograph or attachment before you submit it.
- Erase app data. In the app's settings, Reset Foretaste removes saved menus, dish pictures, table members and settings.
- Manage permissions. Change camera and photo-library access in iOS Settings at any time.
Your rights
Depending on where you live, you may have the right to access, correct, delete or restrict the use of your personal information, or to object to it. To make a request, email support@foretaste.dev. We may need enough information to verify the request.
Security and international processing
We use reasonable administrative, technical and organisational safeguards. No online service can promise absolute security. Foretaste and its providers may process information in countries other than yours, with appropriate safeguards where the law requires them.
Children
Foretaste is not directed to children under 13, and we do not knowingly collect personal information from them.
Changes
If this policy changes, we will update the version and date at the top. For any question about it, contact support@foretaste.dev.