What this policy covers

This policy applies to the Palate mobile app, website, waitlist, and related services operated by Binary Hive Technologies Inc. (“Palate,” “we,” “us,” or “our”).

Information we collect

• Account information: an anonymous account identifier or, when you choose to sign in with Google or Apple, identifiers and profile details those services provide, such as your name and email address.
• Food and preference information: pantry items, dietary preferences, allergies or restrictions, cooking preferences, ratings, and feedback you submit.
• Photos and other content: pantry photos you choose to analyze and text you send through Ask Palate. Supported on-device AI keeps this content on your device. If you allow AI sharing, a selected photo or message may be transmitted for remote processing.
• Product activity: recipe suggestions shown or selected, cooking activity, and related events used to operate and personalize Palate.
• Waitlist information: your email address, confirmation status, and email delivery records when you join the waitlist.
• Technical information: device, app, browser, network, security, and diagnostic information generated when you use the services.

How we use information

• Provide accounts, pantry management, recipe suggestions, cooking features, and support
• Analyze pantry photos and generate personalized suggestions and responses
• Maintain, secure, troubleshoot, and improve Palate
• Manage the waitlist and send requested access or product communications
• Comply with legal obligations and enforce our terms

Sharing and service providers

We use Cloudflare Workers, D1, KV, and optional AI Gateway for account consent, encrypted household relay, recipe generation records and request routing. Google Firebase Authentication manages anonymous and linked accounts. Firebase and Google Cloud host the website and waitlist services; Resend delivers waitlist email. Google or Apple process sign-in when you choose them. When enabled, Sentry processes app and backend error reports and technical diagnostics to help us find and fix failures.

Only with your explicit AI-sharing permission, we send pantry ingredients, dietary and allergy preferences, cooking preferences, Ask messages, and photos you select to AI services for ingredient recognition, recipes, and replies. Recipients are OpenRouter and Google, Anthropic, or OpenAI, including direct API requests to these providers. OpenRouter requests are restricted to these recipients and request endpoints with zero data retention and no data collection. Direct providers apply their own service terms and retention policies. We do not promise that every provider retains no data.

You can decline AI sharing and still use supported on-device Ask and pantry scanning, manage your pantry, and use saved recipes. Remote-only requests show an action to enable sharing. Withdraw permission in Profile → AI sharing to stop new external AI requests. Requests already transmitted cannot be recalled. Changes to the disclosed recipients or uses require renewed permission before processing.

We may disclose information when required by law, to protect Palate or others, or as part of a corporate transaction. We do not sell personal information or use it for cross-context behavioural advertising.

Retention

Your kitchen content is stored on your devices and, when household sync or recovery is enabled, as encrypted data that Palate cannot read. Account deletion removes server-held membership, consent, relay and recovery records as applicable. Shared encrypted household data may remain for other household members. We retain only the old account and household identifiers and deletion timestamp to prevent stale credentials from restoring a deleted account and to make deletion retries safe.

Palate does not store pantry photos on its servers. A photo sent with AI sharing enabled is processed in the request and discarded by Palate; AI-provider and security records may persist under their respective policies. Local prompts, photos, and model output are not sent as telemetry. Infrastructure backups and security logs may persist under their respective retention policies. Contact us for help with retained records.

Your choices

You can delete your Palate account from Profile, including guest accounts. You can manage AI sharing in Profile → AI sharing. Linking Google or Apple enables account recovery across devices; guest data also syncs to our backend and is not stored only on your phone. You can request access, correction, or deletion, withdraw from the waitlist, or ask a privacy question at [email protected]. We may need to verify your request.

Storage and international processing

Palate and its providers may process information in Canada, the United States, and other countries. Privacy laws in those places may differ from those where you live. We use reasonable administrative, technical, and organizational safeguards, but no service can guarantee absolute security.

Children

Palate is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information to Palate.

Changes

We may update this policy as Palate changes. We will post the revised policy here and update its effective date. If a change is material, we will provide additional notice where required.