Privacy Policy

Last updated: June 21, 2026

Overview

Palytt is a social food discovery app. This policy explains what we collect, why we collect it, who we share it with, how long we keep it, and how you can exercise privacy choices. If you do not agree with this policy, do not use Palytt.

Information We Collect

  • Account data: name, username, email, authentication identifiers, profile photo, bio, and optional phone number or phone hash.
  • User content: photos, captions, ratings, comments, messages, saved lists, reports, profile banners, and other content you upload or create.
  • Photo and camera data: images you select or capture, including metadata that may be present before we process it.
  • Location data: precise or approximate location when you grant permission, plus location tags attached to posts.
  • Contacts data: if you opt in, Palytt hashes normalized phone numbers on your device and sends hashes to find contacts who use Palytt.
  • Voice and microphone data: if you use voice logging, we process microphone and speech-recognition inputs to create food logs or recommendations.
  • Usage, diagnostics, and device data: app interactions, screens, performance, crash logs, device type, OS, IP address, and security logs.

How We Use Information

  • Operate accounts, posts, comments, messages, saved lists, notifications, and support.
  • Recommend restaurants, dishes, friends, posts, and taste matches.
  • Analyze uploaded food photos and captions for dish recognition, moderation, and safety.
  • Find nearby restaurants and optionally tag or rank posts by location.
  • Detect spam, abuse, security incidents, copyright issues, and policy violations.
  • Measure product performance, troubleshoot crashes, and improve features.
  • Send transactional email, support replies, account notices, and marketing only where permitted.

AI and Moderation

Palytt may send uploaded images, captions, menu items, and related context to AI providers for food recognition, recommendation quality, and content moderation. Moderation and analysis results may be cached temporarily to reduce repeated processing, investigate abuse, and improve safety. Do not upload images or text unless you have the right to share them.

Service Providers

We use vendors that process data for us, including:

  • Clerk: authentication and user management.
  • Convex and PostgreSQL/Prisma: app data, real-time features, and backend storage.
  • Google Places: restaurant search, place details, and maps-related data.
  • OpenRouter and AI model providers: image analysis, recommendations, and moderation.
  • PostHog: product analytics and app usage measurement.
  • Sentry: crash reporting, diagnostics, breadcrumbs, and error monitoring.
  • Resend: support, transactional, and marketing email delivery.
  • Apple Push Notification Service: iOS push notifications.

Sharing and Visibility

Public posts, profile details, comments, activity, saved-list visibility, and location tags may be visible to other users depending on your settings. We do not sell personal information and do not use data for cross-app behavioral advertising. We may disclose information to comply with law, protect rights and safety, investigate abuse, enforce our terms, or complete a business transaction.

Retention and Deletion

We keep data while your account is active or as needed for the purposes above. Uploaded media, reports, logs, AI analysis caches, and support records may be retained for limited periods for safety, legal, security, and abuse-prevention reasons. You can delete your account in the app or request deletion on our account deletion page.

Your Choices and Rights

  • Access, correct, export, or delete your account data.
  • Change location, contacts, camera, microphone, notifications, and photo-library permissions in device settings.
  • Opt out of marketing email using unsubscribe links or by contacting us.
  • Report privacy, safety, copyright, or security concerns through in-app reporting or support.

California and other privacy laws may provide additional rights to know, delete, correct, limit, or opt out of certain data practices. We will not discriminate against you for exercising your privacy rights.

Children and Teens

Palytt is not directed to children under 13, and users must be at least 13. If we learn that we collected personal information from a child under 13, we will delete it. Users under 18 should use Palytt only with permission from a parent or guardian.

Contact

Privacy questions or requests: privacy@palytt.com. General support: support@palytt.com.