Privacy policy
Your taste belongs to you. This policy explains the information used to run Palateo and the choices you have.
At a glance
We use account details, food preferences and saved activity to provide your restaurant recommendations. Device location is optional. We do not sell personal data or run third-party advertising in the current app. You can contact us to access, correct, export or request deletion of your information.
1. Who operates Palateo
Palateo is operated by Aayush Mittal in India, with the contact address 937, GIDC Makarpura. This policy applies to the Palateo website at palateo.in and its account and recommendation features. Aayush Mittal is also the privacy and grievance contact, available at palateo.com@gmail.com.
Palateo is a general-audience food-discovery service, currently focused on Ahmedabad and Vadodara, and is not directed at children. Users under 18 should use the service with a parent or guardian’s knowledge and permission. Restaurant visits and services you obtain from other businesses are governed by those businesses' own notices and terms.
Launch waitlist
When you join the waitlist, we collect your email address, selected city, time of signup and the version of your consent notice. We store these in Supabase to send you Palateo launch updates you requested. Resend processes your email address and delivery information to send your signup confirmation and requested launch emails. Email open and click tracking are disabled. Joining does not create an app account or verify your email ownership. We do not publish the subscriber list, sell it, or use it for unrelated advertising. We retain it while preparing and communicating the launch, then review whether it is still needed. To withdraw consent or request removal, email palateo.com@gmail.com with the subject “Remove me from the waitlist”. Withdrawal does not affect your separate app account. Any future launch email will include a way to opt out.
The landing page loads fonts from Google Fonts; this sends your browser’s request information, including IP address, to Google. It uses no advertising analytics or tracking cookies. Existing app session storage applies only when you open the beta app.
2. Information we handle
- Account details: your name, email address and phone number when you register; your account identifier; and optional profile information you choose to add, such as a biography or profile image.
- Authentication: your password is submitted to Supabase Auth to create or access your account. Palateo does not store your plain-text password in your profile. Authentication also produces session and refresh tokens used to keep you signed in.
- Acceptance records: the policy and terms versions you accept, the time of acceptance.
- Food preferences: your taste-test answers, cuisine and dietary choices, including vegetarian or non-vegetarian preferences, budget, city and related recommendation settings.
- Your activity: saved venues, ratings, follows, directions clicks and other interactions recorded by the app to maintain your account and improve its recommendations.
- Optional location: coordinates supplied by your browser when you choose to use your location and grant permission. The current app uses these temporarily on your device; it does not save those coordinates to your Supabase account.
- Technical information: hosting and software providers may receive IP addresses, browser or device information, request times and error or security information as part of delivering and protecting the service.
- Contact requests: the information you send when requesting help, reporting a problem or making a privacy request.
Dietary preferences are used for food discovery. Do not submit medical records, government identity documents or other unnecessary sensitive information in your profile or support messages.
3. Why we use it
We use your information to authenticate your account, remember your profile and preferences, recommend venues, store your saved places and activity, synchronise supported account features across devices, respond to requests, investigate problems and protect the service from abuse. We may also retain or disclose information when required by law.
Your name, email, phone number and authentication details are requested for account registration. You can choose not to register, but account features require those details. Optional profile information and browser location can be left unset.
Food recommendations are generated from preferences and venue information. They are suggestions, not medical advice or a guarantee about ingredients, allergies, food safety or suitability. The current app does not send your preferences to Gemini, Claude or an AI Guide service.
We will explain a material new use of your information before starting it and seek an affirmative choice where consent is required. Accepting the terms does not authorise unrelated marketing or every possible future use.
4. Location and device storage
You can select Ahmedabad or Vadodara manually. Choosing to use your location asks your browser for permission; declining permission does not prevent manual city selection. We persist your city choice, not a history of your precise movements.
The app uses browser local storage and IndexedDB for session material, preferences and other local app state. This supports persistent sign-in and remembers your choices. Protect access to shared devices and sign out when finished. You can revoke location permission and clear site storage in your browser settings. Clearing browser storage does not delete your cloud account or its saved data.
The current app has no third-party advertising cookies or advertising trackers. Essential storage and our providers' service or security processing remain necessary to operate the app.
6. Retention and security
We keep active account information for as long as needed to provide the account and its supported features. After a verified deletion or withdrawal request, we remove information no longer needed for those purposes, subject to any lawful retention needed for security, disputes or legal obligations. Copies in provider backups may remain until the relevant backup cycles expire. We do not claim that inactive accounts are automatically deleted or that every copy disappears instantly.
Browser copies can remain until you clear them or the app removes them. Signing out and deleting an account are different actions.
We use HTTPS, Supabase authentication and access controls intended to limit account data to authorised access. No internet service can guarantee absolute security. Please use a unique password, keep your devices secure and report suspected account compromise to our contact address. We will handle security incidents and make notifications when applicable law requires them.
7. Your choices and requests
You can review and change available profile and taste settings in the app. For information not accessible there, email palateo.com@gmail.com to request access, an export, correction, account or data deletion, or withdrawal of consent. You may also contact us about a nomination request where the applicable data-protection framework provides for it.
Tell us the account email and the request you want us to handle, preferably writing from that email. We may need to confirm ownership before releasing or changing account information. Do not send your password. We will not request identity documents unless they are legally necessary for the request.
Withdrawal applies to the relevant future processing and does not undo lawful processing already completed. If you withdraw information necessary for an account feature, we may need to stop providing that feature or close the account. Optional location access can be withdrawn directly through your browser.
We will address privacy grievances expeditiously and within one month of receipt. We will explain any lawful reason preventing a requested action. These routes do not restrict rights or complaint remedies available under applicable law.
8. Children and younger users
Palateo is a general-audience service and is not directed at children. We do not knowingly use children’s information for targeted advertising or sell personal information. Users under 18 should use Palateo with a parent or guardian’s knowledge and permission. If you believe a child has provided information without appropriate permission, contact us so we can verify the request and take appropriate steps, including deletion where required.
Where applicable data-protection law requires verifiable parental consent or additional child safeguards, those requirements take priority. Palateo may restrict a feature while that process is arranged.
9. Changes to this policy
We publish the effective date and version at the top of this page. We will give notice of material changes through the app or an appropriate account communication. Where a new purpose requires consent, we will obtain it before the relevant processing starts.
Indian privacy law is undergoing phased implementation. We will apply the duties and rights that are in force when relevant processing occurs. The DPDP Act commencement notification and DPDP Rules, 2025 set out that timetable. This policy also describes choices we make available through our contact route.
10. Privacy and grievance contact
Aayush Mittal
Operator and privacy/grievance contact, Palateo
937, GIDC Makarpura
palateo.com@gmail.com
Use a subject such as “Privacy request”, “Account deletion” or “Privacy grievance”. Include enough information to identify the account and issue, without sharing unnecessary sensitive information.