Privacy policy

Tasty Tasting is run by Uplift Duo ("we", "us"). This page explains what we collect, why, and what you can do about it. We keep it short on purpose.

What we collect

• Your email address, if you sign in. We use it to send your 6-digit sign-in code and to find your account.
• Your credit balance and a ledger of credits added, spent and returned.
• Your tastings: the photos you upload, the research we generate about what is in them, and the quiz.
• Optional ratings and notes you add to a tasting.
• For purchases, Stripe tells us that a payment succeeded and which pack you bought. We never see or store your card number.
• If you try a free tasting without an account: a random browser id in a cookie, and a one-way hash of your IP address. We cannot turn the hash back into your IP address.

Why we use it

• To run the service: identify items in your photo, build your tasting and save it to your profile.
• To keep your account and credits correct, and to process payments and refunds.
• To limit free tastings so the service stays fair and affordable.
• To keep the service secure and fix problems.

We do not sell your data. We do not use it for advertising.

Who helps us run it

We share only what each company needs to do its job.

• Anthropic: your photo is sent to its Claude API, which identifies items and researches them on the web.
• Supabase: database, sign-in and photo storage. Data is stored in the United States.
• Vercel: hosting.
• Stripe: payments.
• Resend: sending your sign-in code by email.

We may also share information if the law requires it, or to protect people or the service.

Photos and share links

Photos are stored in a storage bucket with public but unguessable web addresses. Anyone who has a tasting's share link can view that tasting and its photo. Do not share the link with people you do not want to see it.

Please do not upload photos of people or of private documents. If one slips through, email us and we will remove it.

Cookies

• tt_anon: an httpOnly cookie with a random id, used to limit free tastings without an account.
• Supabase sign-in cookies, set when you are signed in, so you stay signed in.

We do not use advertising or tracking cookies.

How long we keep it

We keep your account, credit history, tastings and photos until you ask us to delete them. Payment records may be kept longer where tax or accounting law requires it. Free-tasting limit data (the cookie id and IP hash) is kept only as long as needed to enforce the limit.

Deleting your account

Email hello@upliftduo.com from the address on your account. We will delete your account, tastings and photos within 30 days. Once deleted, unused credits are lost. A self-serve delete button is planned.

Your rights

Depending on where you live, you may have the right to see, correct, export or delete your data, and to object to or limit how we use it. If you are in the EU or UK (GDPR), you can also complain to your local data protection authority. If you are in California (CCPA), you have the right to know what we collect and to delete it, and we do not sell or share personal information for advertising. To use any of these rights, email hello@upliftduo.com. We will not treat you differently for asking.

If we transfer data outside your country, we rely on the safeguards our providers offer, such as standard contractual clauses.

Children

Tasty Tasting is for people 18 and over, and alcohol tastings are only for people of legal drinking age. We do not knowingly collect data from children. If you think a child has given us data, email us and we will delete it.

Changes

If we change this policy in a meaningful way, we will update the date at the top and, where we can, tell you. Terms are in our Terms of service.

Contact

Questions or requests: hello@upliftduo.com.