Privacy Policy

Flavora · Last updated July 18, 2026

What we collect

Account basics (email, display name), the content you post (reviews, pins, photos), and — only if you choose to set one — your palate.

Your palate is sensitive data

It can reflect cultural heritage, so it gets the strictest handling we have: always optional, encrypted at rest, never used for advertising, never shared with third parties, never shown anywhere you haven’t posted, and deletable in Settings at any time. Deleting it also removes the stamp from your past reviews.

Location

Used only while you’re in the app, for distances and the map. Manual city mode sends no coordinates at all. We never track location in the background.

Notifications

If you allow notifications, we store a device push token to tell you about your own submissions (for example, when a pin you dropped goes live). You can turn this off in system settings at any time.

What we never do

Sell your data. Infer ethnicity from your activity. Share individual palate data with restaurants.

Ads

Flavora may show ads to help fund the app. If it does, they will never use your palate or other sensitive data, and they will never change how spots or dishes rank — rankings always come from real diners, never from who pays. We’ll update this policy before any ads go live.

Retention & deletion

Delete your account in Settings and everything identifying you is gone within 30 days; anonymized review scores may remain in aggregates.

United States

We honor Global Privacy Control signals. We do not sell personal information as defined by US state privacy laws. California (CCPA/CPRA): you have the right to know, delete, correct, and opt out of sale/sharing — we don’t sell or share personal information. Exercise rights in Settings or via legal@authenticeats.app.

Canada

PIPEDA / Law 25: palate data is handled as sensitive personal information with express consent. You may withdraw consent, request access, or file a complaint with the OPC or the CAI (Quebec).

European Union & United Kingdom

GDPR / UK GDPR: palate data is processed as special-category data under Art. 9(2)(a) explicit consent. You have rights of access, rectification, erasure, portability, and objection; withdraw consent anytime in Settings. Reach our representative and DPO at legal@authenticeats.app; you may lodge a complaint with your supervisory authority (ICO in the UK).

Contact

legal@authenticeats.app