Living Palate ← Back to the app

Privacy Policy

Last updated: June 30, 2026

Living Palate (“Living Palate”, “we”, “us”, or “our”) provides a personal wine‑tasting journal, cellar tracker, and AI‑assisted palate tool available at palate‑app.pages.dev (the “Service”). This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

Information we collect

Account information. When you register, we collect your email address and, optionally, your first and last name. We store your password only as a salted cryptographic hash (PBKDF2) — we never store, see, or have access to your plaintext password.

Content you create. The Service stores the information you add about wines and your cellar, including: wine names, grape varieties, regions, countries, vintages, and prices; your ratings and affinity scores; your tasting notes and flavour descriptors; cellar quantities and the named locations you create; and any label photographs you capture or upload.

Information generated for you. To power the Service’s features, we generate and store derived data such as AI‑inferred flavour profiles and tasting notes, your “palate model,” and predictions, recommendations, and scan results.

Technical information. When you use the Service, our hosting provider automatically processes standard technical data such as your IP address, device and browser information, request metadata, and timestamps, for security, abuse prevention, and reliable operation. We keep an authentication token and your preferences (such as theme and list filters) in your browser’s local storage to keep you signed in and remember your settings. The Service does not use third‑party advertising or cross‑site tracking cookies.

How we use your information

We use your information to:

  • provide, maintain, and secure the Service, and store and sync your journal and cellar across your sessions;
  • generate predictions, flavour profiles, recommendations, and label and menu scans using AI (see “AI processing” below);
  • authenticate you and keep your account secure;
  • back up and restore data, diagnose problems, and improve the Service;
  • communicate with you about the Service, including service‑related notices.

We do not sell your personal information, and we do not use it for third‑party advertising.

AI processing

A core part of the Service uses artificial intelligence. To generate predictions, flavour profiles, label and menu scans, “facts” about wines, and recommendations, we send relevant content you provide — such as wine names, your notes, and the images you submit — to our AI provider, Anthropic (the Claude API). Anthropic processes this content to return a result and, under its commercial terms, does not use API inputs or outputs to train its models. You can read more in Anthropic’s privacy policy.

AI‑generated output may be inaccurate or incomplete and is provided for personal, informational purposes only. Please verify anything important — for example, a wine’s identity, vintage, price, or availability — independently.

How we store and share your information

We host the Service on infrastructure provided by the processors below, who process your information on our behalf:

  • Cloudflare, Inc. — application hosting and edge compute, our database, object storage (for label photos and backups), and key‑value storage. Your account and content are stored on Cloudflare’s infrastructure.
  • Anthropic, PBC — AI inference, as described in “AI processing” above.

Our pages also load fonts and icons from third‑party content delivery networks (Google Fonts and jsDelivr). These providers may receive your IP address and standard request information as part of delivering those assets.

Other than as described above, we do not sell, rent, or share your personal information with third parties, except: (a) to comply with applicable law, legal process, or lawful requests; (b) to protect the rights, property, safety, or security of Living Palate, our users, or the public; or (c) in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honour this Privacy Policy.

International data transfers

Our processors may store and process your information in the United States and other countries, which may have different data‑protection laws than your own. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Data retention

We retain your account and content for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us (see “Contact”); we will delete it within 30 days, except where we are required to retain certain information to comply with legal obligations or resolve disputes. Routine backups are retained for a limited period (approximately 30 days) and are then automatically overwritten or deleted.

Security

We take reasonable measures to protect your information: passwords are stored only as salted hashes, data is transmitted over encrypted connections (HTTPS/TLS), label photos are stored in private storage accessible only through authenticated requests, and access to our systems is restricted. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal information.

European Economic Area, United Kingdom, and Switzerland (GDPR). You have the right to access, correct, or delete your personal data; to restrict or object to certain processing; to data portability; and to withdraw consent where processing is based on consent. We process your personal data on these legal bases: performance of our contract with you (to provide the Service); your consent (for example, when you choose to submit photos or other content); our legitimate interests (such as securing and improving the Service); and compliance with legal obligations. You also have the right to lodge a complaint with your local data‑protection supervisory authority.

California (CCPA/CPRA). You have the right to know what personal information we collect and how we use it; to request access to and deletion of your personal information; to correct inaccurate personal information; and to be free from discrimination for exercising your rights. We do not sell or share your personal information (as those terms are defined under California law), and we do not use sensitive personal information to infer characteristics about you.

To exercise any of these rights, contact us using the details in “Contact” below. We will respond within the timeframes required by applicable law and may need to verify your identity before fulfilling your request.

Children

The Service concerns alcoholic beverages and is not intended for children. You must be of legal drinking age in your jurisdiction to use the Service (see our Terms of Service). We do not knowingly collect personal information from anyone under the legal drinking age or, in any case, from children under 16. If you believe a child has provided us personal information, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.

Contact

For privacy questions or to exercise your rights, contact us at privacy@livingpalate.app.

Terms of Service Back to the app