Tasted Privacy Policy

Version 2.11 · Last updated October 27, 2026

Mysite.ai, Inc. (“Tasted”, “we”, “us”) provides the Tasted mobile application. Tasted rewards you with Tasted Cash — promotional value we and participating restaurants fund — when you eat at a participating restaurant, post about the meal, and submit your receipt. Tasted Cash is spent with the Tasted Card. Together these are the “Service”.

This Privacy Policy explains how we collect, use, and share personal information when you use the Service, and the rights you have over it. If you are in the European Economic Area, the United Kingdom, or Switzerland, section 15 also applies to you.

Index

1. Personal information we collect
2. The Tasted Card: identity verification and card data
3. Bank account connections
4. Financial privacy and the card program
5. How we use your personal information
6. How we share your personal information
7. Your privacy rights and choices
8. How long we keep your information
9. Security
10. Children
11. Other sites and services
12. Changes to this Privacy Policy
13. How to contact us
14. US state privacy notice
15. If you are in the EEA, the UK or Switzerland

1. Personal information we collect

Personal information you provide to us through the Service includes:

• Contact data, such as your mobile phone number. Your phone number is how you sign in — we send a one-time code to it — and it is the account identifier we require. An email address if you give us one.
• Identity data — your full legal name, residential address, and date of birth. We collect these only when you activate a Tasted Card, and they exist for the card program. See section 2.
• Profile data, such as the name or nickname you choose to display, a profile photo if you add one, a short bio, your neighborhood, and your university if you tell us.
• Content you create, such as photos of dishes, notes and ratings about a meal, comments, the places you save, and who you follow. A photo and a rating are part of how Tasted Cash is earned.
• Receipt images, when you submit a receipt to earn Tasted Cash. A person on our team may review a receipt to check the restaurant, date, and amount. Receipt images are kept in private storage and are never shown to other users.
• Your contacts, only if you choose to share your address book. See Your contacts below.
• A shipping address, only if you reach a referral milestone that comes with a physical reward and give us an address to send it to. It is used only to ship that reward, and we delete it thirty days after the reward is delivered.
• Reports and blocks — when you report a post, a comment, or a person, the reason you choose and any note you add; and the list of people you have blocked. See Reports and blocks below.
• Card and transaction data we receive from mCards if you hold a Tasted Card. See section 2.
• Communications that we exchange with you, for example when you contact support. See Support conversations below.

Support conversations

When you message us from the app (Message support in Settings, from version 2.1), the conversation runs on Intercom. If you are signed in, Intercom is told your account’s random identifier, so we can see which account is writing, but not your phone number. Intercom holds what you write and anything you attach, and the basic device information its software reports, such as device model, operating system, app version, and an approximate location derived from your IP address. If you choose to record a video with sound to attach, the app asks for your microphone first; nothing is recorded unless you start it. If you are not signed in, the conversation is anonymous.

Location

With your permission, the Service uses your device’s location while the app is open, to show restaurants near you and near where you took a photo. To find those restaurants, the area you are looking at is sent to our restaurant search, which uses Google Places. Tasted uses your location in the background only for the heads-ups described below, and only if you allow location “Always”. You can withdraw this permission at any time in your device settings; the app still works, using a default area.

Heads-ups at participating restaurants. If you allow location “Always” for heads-ups at places that give tasted cash, Tasted uses your precise location in the background, on your phone only, to notice when you have spent about ten minutes at a participating restaurant and let you know. Tasted never sends your location, or which restaurant a heads-up was about, to us or to anyone else; if you tap a heads-up, that restaurant’s page loads as it would from the map. If you share usage data, we learn only whether you turned heads-ups on and how many were shown on a given day, and we learn the count the next day you open the app.

Heads-ups work only if you allow Tasted to use your location “Always” — in the app when we ask, or in iOS Settings. You can stop them at any time by turning off Offers you saved in the app’s notification settings, or by changing Tasted’s location access in iOS Settings; the rest of the app keeps working.

Location saved with a photo or a receipt. When you add a photo to a post or scan a receipt, we save with it when it was taken and, where known, where: your device’s location at that moment, or the location stored in a photo you choose from your library. We also record whether it came from the camera or your library. A reviewer uses this to check that a visit happened at the restaurant, and the app uses it to suggest where a photo was taken. It is not shown to other users. If location is off, nothing is saved and your post or receipt still goes through. Apart from this, we do not build a history of where you have been.

Your contacts

Sharing your contacts is optional. The app offers it once while you set up your account, tells you what happens to the numbers before iOS asks for permission, and you can skip it. If you decline, nothing is read, and you can still find and follow people by searching.

If you allow it:

• What we read. The name and phone numbers of each contact, and nothing else — no email addresses, postal addresses, birthdays, notes, or photos.
• What we upload and keep. Each phone number, converted to international format, together with the name you saved it under — up to 4,000 contacts. Numbers are stored as phone numbers, not hashed, because we need to recognize a number when its owner joins later. We keep them, rather than matching and discarding them, and we tell you that before you share.
• Why. To show you which of your contacts are already on Tasted; to tell you when one of your contacts joins; and so that an invitation you send still counts when your friend signs up later, which is how referral rewards are credited.
• The name you saved is private to you. We never show the name you saved a contact under to anyone else. Other users see a person’s own display name, never the label somebody else gave them.
• Nobody is contacted because you shared your contacts. A person who is not on Tasted hears about it only if you choose to tag their number in a post, or to invite that number to a meal. An invitation to a meal is a text from your own phone: the app opens your messages app with the words written for you, you decide whether to send it, and it goes from your number, not ours. If the person has not opened or answered it after a few hours, we may send them one text message ourselves, saying that you tagged or invited them and at which restaurant; when you tag a number in a post, that one message from us is the only one. Invitations can go to a phone number in any country. A number is sent at most one invitation by us, ever, no matter how many people tag or invite it, and we send nobody a reminder unless they asked us to — see If somebody invites you by phone number, which also says how to stop messages and how to have the number erased.
• Opting out. A person who does not want to hear from us, or wants their number erased, can email privacy@jointasted.com — see below. Once they do, their number is never sent an invitation.
• Your own number. When you sign in, we record your verified number against your account, so that people who have your number saved can see that you are on Tasted and follow you.
• Not sold, not used for advertising, and not sent to our analytics or messaging providers. The only other party that receives a contact’s number is our SMS provider, Telnyx, to deliver an invitation you asked us to send.
• How long we keep them. Until you delete your account, or until you ask us to remove them by emailing privacy@jointasted.com. Turning off contacts access in your device settings stops the app reading your contacts again, but does not delete what was already uploaded — email us for that.

If you are not a Tasted user and want never to be texted an invitation or a reminder, or want your number removed from every address book uploaded to us, email privacy@jointasted.com from any address, with the number. We may ask you to confirm you control the number (for example with a code) before erasing it. We then delete it from every uploaded address book, delete the invitation and anything we hold about it — see If somebody invites you by phone number — and keep the number alone, with no name and no link to anybody, on a suppression list, so that it is not stored again when somebody’s phone uploads it in future and is never sent an invitation or a reminder. If you later join Tasted with that number, the suppression is lifted.

If somebody invites you by phone number

This section is about you if you do not use Tasted and somebody invited you — by tagging your number in a post, or by asking you to a meal. You did not come to us, so we say plainly what exists because of that invitation and how to end it.

• What we create. A record of the invitation: your phone number, the first name of the person who invited you, the restaurant, the day if there is one, and a one-time web link we text you. If you open that link we record that it was opened, and your answer if you give one. We never publish your number to anybody, and the page itself never shows your number or your name.
• We create a profile for you at Customer.io. This is the part worth reading twice. Customer.io — the company that sends our messages, listed on Service providers we use — is given your phone number and the state of the invitation (that it was sent, opened, answered, and how, and when). It does not send you anything unless you asked us to — by choosing Maybe next time and leaving your number, or by accepting the invitation. It is not given your name, because an invitation never asks you for one, and it is never given a receipt total, a balance, anybody’s contacts or a card number. Until you answer, you have consented to none of this, which is why the next two points exist.
• Our lawful basis. Outside Europe we rely on the legitimate interests of the person inviting you, and ours, in letting people invite their friends to a meal and in following up on an invitation that was sent — the same basis as in If you are not a Tasted user (Article 6(1)(f) of the GDPR for anyone in the EEA, the UK or Switzerland). We balanced that against your interests, and the limits that came out of it are part of the basis rather than a courtesy: at most one text from us to a number, ever, and only if you have not already opened or answered the invitation your friend sent; no reminders and no marketing on this basis; a stop honored on the first request; and no number in our logs. Where the law requires your consent for a message rather than a legitimate interest, that is a limit we accept rather than a position we assert, and replying STOP, following the opt-out link in the text, or emailing us ends it immediately and permanently.
• If you choose Maybe next time and leave your number, you are asking us for texts about other outings your friends ask you to, and about the app. That consent is the only basis on which we send them — not the legitimate interests above. How often varies; message and data rates may apply. You can withdraw it at any time in the same three ways, and withdrawing does not affect anything sent before. So that we can show you asked, we keep a record of that consent: which version of the wording you were shown, when, a scrambled form of your invitation link (never the link itself), and the IP address and browser description the request came from. That record is kept only for as long as we rely on your consent, is never shown to anybody or used for anything else, and is erased with the invitation.
• How to stop the messages. Reply STOP to any text, use the opt-out link in it, or email privacy@jointasted.com. Any one of them stops every message we would start — the invitation, every reminder, and anything later.
• How a lead is erased. Email privacy@jointasted.com with the number; we may ask you to confirm you control it. We then delete the invitation record and everything attached to it — the number, who invited you, the restaurant and the day, the web link, that it was opened or answered, and any record of your consent — and delete your profile at Customer.io, which is the copy that holds your number. That removal is done by hand, within thirty days. We also remove the number from every address book uploaded to us. The one thing we keep is the number itself, on a suppression list, with no name and no link to anybody, so that it cannot be invited or stored again — erasing that entry is what would make you invitable a second time. If you never ask, the invitation record is deleted when the person who sent it deletes it or their account. If you never answered, you were never sent a reminder at all.
• If you do join with that number, the invitation becomes part of your own account — it is how a referral and any welcome credit are credited — and everything in this Policy applies to you as a user, including Deleting your account.

Reports and blocks

You can report a post, a comment, or a person from its menu in the app, and block a person from their profile or from any of their posts or comments. A report records who made it, what was reported, the reason, and any note you add. Reports are reviewed by our team, and the person you reported is not told who reported them. Nobody is notified about a block either, although a person you have blocked will find that your profile is no longer available to them. You can see and undo your blocks under Settings → Blocked people.

A block hides the two of you from each other everywhere in the app — posts, comments, likes, search, suggestions and contacts — and removes any follow between you. Reported content stays up until a reviewer decides; if it breaks our Terms, the reviewer removes it, and the decision is recorded with who made it and why.

Automatic data collection

We log basic technical information needed to operate and debug the Service, such as your app version, device model and operating system version. Our servers report errors to Sentry; the app itself contains no crash-reporting SDK.

Usage events and notifications

The app sends usage events — for example, that you opened a restaurant, started a post, liked a post, or opened the receipt scanner — to RudderStack, and our servers send events about your account, such as a receipt being approved, a reward being credited, or somebody following you. Events are linked to your account by a random identifier (before you sign in, to a random identifier for the app on your phone), not by your name, and carry basic device information such as app version, device model, operating system, and language. They are used to understand how the app is used, to fix problems, and to decide which notifications to send.

Usage events are collected from everyone who uses the app, and they are on by default. You can turn them off with Share usage data in Settings (from version 2.1 of the app), or by emailing privacy@jointasted.com.

RudderStack forwards these events to Customer.io, which sends our push notifications and other messages to you. To reach you, Customer.io holds your phone number, your first name, your city, the date you joined, your notification settings, whether you have a Tasted Card, whether you have a submission in progress, and your device’s push token. It never receives your sign-in code, a receipt total, your balance, your contacts, or a card number. Your sign-in code is sent only through our SMS provider, Telnyx.

This is not limited to people who use the app. Until version 2.7 everything in this section described the app and our servers acting for somebody who had an account. It no longer does: when a Tasted user invites a phone number that has no account, our servers send events about that invitation as well, and Customer.io is given that phone number — the number of a person who has never used Tasted and has agreed to nothing. It sends that person nothing unless they ask, on the invitation’s page, to hear more. That is set out in full, with the lawful basis and how to end it, in If somebody invites you by phone number.

Advertising

There are no advertising SDKs in the Tasted app. We do not collect your device’s advertising identifier, we do not track you across other companies’ apps or websites, and there is no interest-based advertising. We do not sell your personal information.

Sensitive personal information

Some information described here is sensitive under applicable law — financial account information, and precise geolocation while the app is open, saved with a photo or receipt you submit, or used in the background on your phone if you allow location “Always” for heads-ups. We collect and use it only for the purposes described in this Policy, including providing the Service and complying with law. We do not use sensitive personal information to infer characteristics about you, and we do not disclose it for any purpose other than those set out here.

2. The Tasted Card: identity verification and card data

This section applies if you apply for or hold a Tasted Card. Nothing here is needed to browse restaurants, post, or earn Tasted Cash from a receipt.

Identity verification

When you apply for a card, we share your full legal name, mobile phone number, residential address, and date of birth with mCards and TBO Bank to support the application and identity verification.

We receive the outcome of the verification so we can confirm whether you are eligible to receive and use a Tasted Card.

mCards and TBO Bank have their own responsibilities. They are not simply service providers to Tasted, and they handle your personal information under their own privacy notices: TBO Data Privacy and mCards Data Privacy.

Card and transaction data

If you hold a card, mCards sends us information about it so we can operate the rewards program. We receive:

• Transaction data, by webhook — the merchant, the amount, and the status of each transaction;
• Card status — whether the card is pending, active, frozen, or closed.

We use these to credit and debit your Tasted Cash balance, to apply Tasted Cash at a participating restaurant, to tell you about a transaction, and to detect fraud.

We never receive or store your full card number, its expiration date, its CVV, or its PIN. Those are held by the issuing bank and mCards and are never sent to us.

What we tell restaurants

Nothing that identifies you. A partner restaurant is told how many visits and how much spending a campaign produced, in aggregate. We do not give a partner your name, phone number, email address, card details, or your transactions.

3. Bank account connections

Linking a bank account is optional, and only for the Tasted Card. Earning Tasted Cash never needs one: it works from your post and your receipt.

If you hold a card, you can link a bank account as its backup payment. A card payment is approved only in full, so when a bill at a participating restaurant is more than your Tasted Cash, or you pay anywhere else, the rest is paid from that account; without one, the payment is declined. The link is made through Plaid Inc., in Plaid’s own screen, and your information is also handled under Plaid’s End User Privacy Policy and the privacy notices of mCards and TBO Bank. You can remove the link at any time.

You never give us your bank login. You sign in through Plaid or directly with your bank, and Tasted never sees, receives, or stores your bank username or password.

4. Financial privacy and the card program

Information we collect and handle in connection with the Tasted Card is nonpublic personal information under the Gramm-Leach-Bliley Act (“GLBA”) and its implementing regulations. That has two consequences worth stating plainly.

• It is protected by federal financial privacy rules, in addition to everything in this Policy.
• It is exempt from some state privacy rights. Most US state privacy laws, including the California Consumer Privacy Act, exempt information subject to the GLBA. We may therefore decline all or part of an access or deletion request that relates to it — see section 7.

The issuing bank and mCards have their own privacy notices, which govern their handling of your information and are not replaced by this Policy. Both are linked from our legal page.

5. How we use your personal information

We use personal information for the following purposes:

• Providing the Service — creating and maintaining your account, showing restaurants near you, publishing what you post, and operating the app.
• Operating the rewards program — verifying that a visit really happened by reviewing your post and your receipt, and crediting your Tasted Cash balance.
• Issuing and servicing the Tasted Card — verifying your identity for the issuing bank, enabling issuance, applying Tasted Cash at checkout, sending you transaction notifications, and preventing fraud on the card.
• Preventing fraud and abuse generally — detecting duplicate or fabricated submissions and other misuse, so that rewards go to people who actually visited.
• Finding people you know — if you share your contacts, showing you who is already on Tasted, telling you when a contact joins, and crediting invitations. See Your contacts.
• Carrying an invitation to a number that has no account — texting the one invitation we may send if the one from your friend went unanswered, recording whether it was opened and answered so the person who invited them knows, and sending messages to a person who asked for them. See If somebody invites you by phone number.
• Keeping the community safe — reviewing reports, removing content that breaks our Terms, acting against abusive accounts, and honoring your blocks.
• Support and communication — responding to you, and sending service-related messages such as the outcome of a submission or a notice that Tasted Cash is about to expire.
• Improving the Service — understanding which features are used and fixing errors.
• Compliance and legal — complying with law, including anti-money-laundering and sanctions obligations and record-keeping requirements; enforcing our terms; and protecting our rights and the rights of others.

6. How we share your personal information

We share personal information with:

• The issuing bank and mCards, Inc., where you apply for or hold a Tasted Card — for identity verification, card issuing, and transaction processing. This includes the identity data in section 2. They are not our service providers: they are independent parties with their own legal obligations and their own privacy notices.
• Mastercard International Incorporated, as the payment network, to the extent a card transaction requires it.
• Apple and Google, when you add the card to Apple Pay or Google Pay.
• Service providers who process information on our behalf and only on our instructions:
  • Supabase — our database and file storage, including photos and receipt images;
  • Vercel — hosting for our servers and this website;
  • Telnyx — sending text messages: your sign-in code, the one invitation from us a person you tag or invite by phone number may receive, and messages to a person who asked for them;
  • RudderStack — collecting usage and account events, and passing them to Customer.io;
  • Customer.io — sending push notifications and other messages to you, and messages to a phone number somebody invited, once that person has asked for them (If somebody invites you by phone number);
  • Intercom — the support conversations you start from the app;
  • Sentry — error reporting from our servers;
  • logo.dev — the university logos shown in the app.
  Service providers we use lists each of them with the information it handles, where, and the data processing terms it publishes. We will update that list before adding a new provider that processes personal information.
• Google, for restaurant information and for finding restaurants near the area of the map you are looking at (Google Places). Our servers send Google that area and any search text, not your name, phone number, or account. Google handles these requests under its own terms and privacy policy, as an independent controller rather than as our service provider.
• Partner restaurants, in aggregate only, as described in section 2.
• Other users, where you choose to publish. Content you post — a dish photo, a rating, a comment — is visible to other users alongside your display name and profile photo. Your phone number, identity data, card, and transactions are never visible to other users. People who have your phone number saved and share their contacts with Tasted can see that you are on Tasted, under your display name. We never send anybody your number.
• Professional advisors, such as lawyers, auditors, and accountants, where needed.
• Authorities and others, where we believe disclosure is required by law or necessary to protect the rights, safety, or property of any person.
• In a business transaction, such as a merger, financing, or sale of assets, in which case this Policy will continue to apply to the transferred information unless you are told otherwise.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

7. Your privacy rights and choices

Access or update your information. You can review and change your profile in the app, under Settings.

Close your card. See the Cardholder Agreement.

Delete your account. In the app, go to your profile, open Settings, and tap Delete account. You can also email privacy@jointasted.com and we will do it for you. Deleting your account forfeits unredeemed Tasted Cash. What is deleted and what is kept is set out below.

Deleting your account

The app asks you to type DELETE to confirm, because it cannot be undone. When you confirm:

• Your sign-in is removed at once. Your phone number and every session are deleted from our sign-in system, you are signed out on every device, and your account identifier is never reused. If you sign up again with the same number, you start as a new person.
• Your content and relationships are deleted, normally within minutes: your profile (name, photo, bio, neighborhood, university); your posts with their photos and the location saved with them, and everybody’s likes and comments on them; your comments and likes on other people’s posts; tags and mentions of you; who you follow and who follows you; your lists, drafts, and rankings; your blocks; the contacts you uploaded and your own number’s link to your account; invitations you sent, including the numbers you invited and anything recorded about those invitations (If somebody invites you by phone number); and every photo and receipt image you uploaded. If one of our systems is briefly unavailable, the deletion is recorded as owed and retried automatically until it completes.

What we keep, and why:

• Records of Tasted Cash and the submissions behind it. We are required to keep payment and accounting records, and the amounts restaurants were charged depend on them. We keep the amount, the restaurant, and the date, linked only to your deleted account’s identifier, which no longer points to any person. We remove the receipt image, the location and time a receipt was captured, and your link to the post. A submission still waiting for review is rejected.
• A one-way hash of your phone number, if you received a welcome credit, so that deleting and re-creating an account cannot be used to collect the welcome credit twice. Nothing else is attached to it. A hash of a phone number can in principle be reversed by trying every possible number, so we treat it as personal information and use it for nothing but that check.
• Referral reward records, detached from you, if we have already bought or shipped a physical reward for you. Your shipping address is erased. A reward not yet shipped is forfeited.
• Reports — reports you made stay, without your note, so a reviewer can still act on them; reports about you or your content are closed; and the record of any content a reviewer removed is kept as the moderation record.

Within thirty days of the deletion, we also remove your profile from Customer.io, which holds your phone number so it can message you. We also delete your support conversations and your contact record at Intercom within the same thirty days. Information held by mCards or the issuing bank for the Tasted Card is governed by their own policies and the retention rules in section 8.

Depending on where you live, applicable law may give you the right to:

• Access a copy of the personal information we hold about you, in a portable form.
• Delete personal information we collected from you.
• Correct inaccurate personal information.
• Limit our use of sensitive personal information.
• Opt out of any “sale” or “sharing” of personal information, or of profiling with legal effects. As stated above, we do not sell or share personal information for advertising and we do not carry out such profiling, so there is nothing to opt out of.
• Appeal a decision we make on a request, where your state provides for it.

To exercise these rights, email privacy@jointasted.com or write to us at the address in How to contact us. Making a privacy request explains how each request works, what to include, and which parts are done by hand. We may need to verify your identity before acting, for example by confirming the request from the phone number on your account. You may use an authorized agent. We will not discriminate against you for exercising a privacy right.

These rights are not absolute. In particular, information subject to the Gramm-Leach-Bliley Act is exempt from most state privacy requests, and we are required to retain certain anti-money-laundering and card program records regardless of a deletion request — see section 4 and section 8. Where we decline all or part of a request, we will tell you why.

Notification and marketing messages. You can turn off push notifications in your device settings. To stop marketing messages from us, email privacy@jointasted.com. If you are in the EEA, the UK or Switzerland, we send you marketing only if you have opted in (see section 15). You will continue to receive service-related messages — your sign-in code, the outcome of a submission, a card transaction notification, a notice that Tasted Cash is about to expire — because they are part of the service and not marketing.

8. How long we keep your information

We keep personal information for as long as needed to provide the Service and for the purposes described in this Policy. In particular:

• Receipt images and posts are kept while your account is open, as the record of a reward we granted, and deleted with your account, or earlier if you ask.
• Tasted Cash records are kept for at least as long as the value is live — six months from the day it is credited — and afterwards as a financial record.
• Card and transaction data, and identity verification data, are retained for the period the issuing bank’s requirements and federal law demand. For a card program that is normally five to seven years after the card relationship ends. This retention survives a deletion request.
• Identity verification data held by mCards and the issuing bank is retained by them, under their own policies and obligations, not ours.
• Contacts you uploaded are kept until you delete your account or ask us to delete them, as described in Your contacts.
• An invitation to a number with no account, and its Customer.io profile, are kept until the person who sent it deletes it or their account, or until the number’s owner asks us to erase it — then within thirty days. The number alone stays on the suppression list. See If somebody invites you by phone number.
• A shipping address for a referral reward is deleted thirty days after the reward is delivered.
• When you delete your account, we delete and keep what is set out in Deleting your account.

9. Security

We use reasonable organizational and technical measures designed to protect personal information, including encryption in transit, access controls, and keeping credentials server-side, never in the app. Payment credentials — the card number, CVV, and PIN — are never held by Tasted at all. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

11. Other sites and services

The Service may link to websites and services we do not operate, including mCards and the issuing bank. This Policy does not apply to them, and we are not responsible for their practices.

12. Changes to this Privacy Policy

We may update this Policy. When we do, we will raise the version number and the “Last updated” date above, and for material changes we will provide additional notice, such as in the app or by message.

13. How to contact us

Mysite.ai, Inc.
21 Miller Alley, Suite 210
Pasadena, CA 91103
United States

Privacy requests: privacy@jointasted.com
Everything else: support@jointasted.com

Our registered agent for service of process is at 3500 S DuPont Highway, Dover, DE 19901, United States. That address does not handle privacy requests.

14. US state privacy notice

This section provides additional information for residents of states with comprehensive privacy laws, including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others as those laws take effect.

In the past 12 months we have collected the categories of personal information described in section 1 and section 2: identifiers (your phone number and, for cardholders, your legal name, address, and date of birth); commercial information (submissions, Tasted Cash, and card transactions); financial information received from mCards, Inc. and TBO Bank; sensitive personal information (precise geolocation while the app is open or saved with a photo or receipt); internet or network activity, including usage events within the app; audio/visual information (photos you submit); the names and phone numbers in your address book, if you choose to share them; and inferences we draw to operate the Service.

We collect it from you, from mCards, Inc. and TBO Bank, automatically from your device, and — for a phone number — from other users who share their contacts, tag that number in a post, or invite it to a meal. We use and disclose it for the purposes set out in section 5 and section 6, which for an invited number includes disclosing it to Customer.io, which sends that number nothing unless its owner asks to hear more (If somebody invites you by phone number).

We have not sold personal information, and we have not shared personal information for cross-context behavioral advertising, in the past 12 months. We do not have actual knowledge of selling or sharing the personal information of consumers under 16 years of age. We do not use sensitive personal information for any purpose other than those permitted without a right to limit.

Residents may exercise the rights described in section 7, and may designate an authorized agent. Where your state provides a right to appeal a decision on a request, email privacy@jointasted.com with “Privacy appeal” in the subject line and we will respond within the period your state requires.

Much of the information we handle for the card program is subject to the Gramm-Leach-Bliley Act, and information subject to that Act is exempt from these state rights. We may therefore decline all or part of a request that relates to exempt information. See section 4.

Notice of financial incentive

Tasted Cash is a financial incentive under the California Consumer Privacy Act: you receive something of value for taking part in a program that involves collecting personal information. This is the notice that Act requires.

• What the program is. You eat at a participating restaurant, post a photo and a rating, and submit your receipt. Once it is verified, Tasted Cash is credited to your balance and can be spent with a Tasted Card at a participating restaurant. The full terms are in the Terms.
• What it is worth. It depends entirely on where you eat and how often. Each participating restaurant sets its own reward rate, a percentage of your eligible spend that can change by the hour, and the app shows it before you go. Tasted Cash expires six months after it is credited.
• The personal information involved. Your phone number, the photo and rating you post, your receipt, and — if you get a card — your legal name, address, date of birth, and card transaction data. Section 1 and section 2 describe these.
• How to join, and how to leave. You opt in by taking part. You can stop at any time by submitting nothing further, or by deleting your account as described in section 7. Deleting your account forfeits unredeemed Tasted Cash.
• Why the incentive is permitted, and what we think your data is worth. We do not sell personal information and we do not use it for advertising, so we place no resale value on it. Tasted Cash exists because a participating restaurant pays us to bring it customers and funds the reward out of that — it is the price of an introduction, not the price of your data. Our good-faith estimate of the value of the personal information to us is therefore the reward itself, and the method of calculating it is simply the amount the restaurant agrees to pay back on a qualifying visit. The incentive is reasonably related to that value because it is that value.

15. If you are in the EEA, the UK or Switzerland

This section applies if you are in the European Economic Area (the European Union, Iceland, Liechtenstein and Norway), the United Kingdom, or Switzerland. It gives you the information the EU General Data Protection Regulation (“GDPR”), the UK GDPR and the Swiss Federal Act on Data Protection require. The rest of this Policy applies to you too; where the two conflict, this section wins.

Who is responsible for your information

The controller of your personal information is Mysite.ai, Inc., 21 Miller Alley, Suite 210, Pasadena, CA 91103, United States. For anything about your personal information, including exercising a right below, email privacy@jointasted.com.

We are appointing representatives in the European Union and the United Kingdom under Article 27 of the GDPR and the UK GDPR. Until their details are listed here, you can reach us directly at privacy@jointasted.com, and you may always contact your supervisory authority.

What we use your information for, and our legal basis

The GDPR requires a legal basis for each use of your information. Ours are these.

To perform our contract with you — the Terms (Article 6(1)(b)):

• creating and running your account, including signing you in with a code sent to your phone number;
• publishing what you choose to post — photos, ratings, comments, lists, and who you follow — and showing you what other people post;
• operating the rewards program: reviewing a receipt you submit, crediting Tasted Cash, and recording the claim;
• sending you the service messages the Service needs, such as the outcome of a submission, and answering you when you contact support.

Our legitimate interests (Article 6(1)(f)), where your interests and rights do not override them:

• Security and fixing problems — logging basic technical information and reporting server errors to Sentry.
• Preventing fraud and abuse — checking that a receipt matches a real visit, including the time and place saved with it; detecting duplicated or fabricated submissions; and keeping a one-way hash of a phone number that received a welcome credit so it is not paid twice.
• Keeping the community safe — reviewing reports, removing content that breaks the Terms, honoring blocks, and keeping the record of moderation decisions.
• Understanding how the app is used (first-party product analytics) — the usage events the app sends to RudderStack, and the events our servers send about your account, described in section 1. They are collected from everyone who uses the app, linked to a random identifier rather than your name, and used by us to improve the Service and, through Customer.io, to decide which notifications to send you — never for advertising. You can object at any time: turn off Share usage data in Settings (from version 2.1 of the app), or email privacy@jointasted.com, and the app stops sending usage events from your phone.
• Helping people find each other — letting people who have your number saved see that you are on Tasted; and, for a person who is not on Tasted, keeping the number and name a user uploaded from their address book, so that the user can see when that person joins and an invitation still counts. See Your contacts and If you are not a Tasted user below.
• Carrying an invitation sent to a number with no account — texting the one invitation we may send if a friend’s went unanswered, giving it a web page, and recording whether it was opened and answered so the person who sent it is told, for which Customer.io is given that number. The interest is that of the person inviting, and ours, in letting people invite their friends to a meal. The limits in If somebody invites you by phone number — one text from us ever, no reminders and no marketing on this basis, a stop honored at once — are what the balancing produced, and you can object or ask for erasure at any time, which we act on without asking why. Messages you ask for on the invitation’s page are sent on your consent instead (Article 6(1)(a)), which you can withdraw at any time.
• Complying with the law outside Europe, and legal claims — keeping records that laws outside the EEA, the UK and Switzerland require of us, such as US tax and accounting law, and establishing, exercising or defending legal claims.

Your consent (Article 6(1)(a)), which you can withdraw at any time:

• Access to your contacts, given through your device’s permission prompt. Turn it off in your device settings; to delete what was already uploaded, email privacy@jointasted.com.
• Your device’s location, given through its permission prompt, used to show restaurants near you and saved with a photo or receipt as described in Location. Turn it off in your device settings. If you allow location “Always”, which enables heads-ups, it is used in the background, on your phone only, as described there; turn heads-ups off with Offers you saved in the app’s notification settings, or change Tasted’s location access in your device settings.
• Push notifications, given through your device’s permission prompt. Turn them off in your device settings.
• Marketing messages. If you are in the EEA, the UK or Switzerland, we send you marketing texts and marketing push notifications only if you have opted in. Allowing notifications on your phone is not, by itself, agreeing to marketing. You can stop them at any time by emailing privacy@jointasted.com, and marketing push notifications also stop when you turn notifications off in your device settings.

Withdrawing consent does not affect what we did before you withdrew it, and the rest of the Service keeps working.

A legal obligation (Article 6(1)(c)):

• Accounting records. Records of Tasted Cash and the submissions behind it are kept after you delete your account, with your identity removed, because accounting and tax law requires them. See Deleting your account.
• Responding to a lawful request from a court or public authority.

What you have to give us. A phone number is needed to create an account, because it is how you sign in. Everything else is optional; a receipt is needed only to earn Tasted Cash.

No decisions by machine alone. A person on our team decides every receipt and every report. We do not make decisions about you based solely on automated processing that have legal effects on you or affect you similarly significantly.

If you are not a Tasted user

We may hold your phone number, and the name somebody saved it under, because a Tasted user shared their address book with us, tagged your number in a post, or invited that number to a meal. We did not get it from you, so this is what we do with it:

• Where it came from: a Tasted user — from their contacts, if they chose to share them, from a post in which they tagged your number, or from an invitation they sent it. See Your contacts and If somebody invites you by phone number.
• Why, and on what basis: so that the user can invite you and see when you join Tasted, and so that their invitation still counts if you do. Our legal basis is the legitimate interests of that user, and ours, in letting people invite their friends (Article 6(1)(f)). We never show the saved name to anyone else. Your number is not sent to our analytics providers for any other purpose — the one exception is the invitation itself: if a user invited your number, Customer.io is given it, as described in If somebody invites you by phone number, and sends you nothing unless you ask it to — processing you have not agreed to and can end at any moment.
• Whether we contact you: only if a user tags your number in a post or invites it to a meal. An invitation to a meal usually reaches you as a text from that person’s own phone. If you have not opened or answered it after a few hours — or if they tagged your number in a post — we send you at most one invitation, ever, saying who tagged or invited you and where, through our SMS provider Telnyx. No reminders and no marketing, unless you ask for them on the invitation’s page. Replying STOP, using the opt-out link, or emailing us ends all of it at once.
• How long: until the user who uploaded, tagged or invited it deletes it or their account, or until you ask us to erase it. An erasure also removes your profile at Customer.io, within thirty days.
• Your rights: everything listed below, including the right to object and the right to erasure. Email privacy@jointasted.com with the number and we will erase it from every uploaded address book and from the invitation and its Customer.io profile, keeping it only on a suppression list so that it is not stored again and is never sent an invitation or a reminder.

Transfers to the United States

We are based in the United States, and your information is processed there and in the other countries where our service providers (section 6) operate. Those countries may not have data-protection law equivalent to yours. Where the law requires a safeguard for such a transfer, we rely on the European Commission’s Standard Contractual Clauses — with the UK’s International Data Transfer Addendum and the adjustments Swiss law requires — or another lawful transfer mechanism. Service providers we use says which each provider relies on. You can ask for a copy of the safeguards that apply by emailing privacy@jointasted.com.

Your rights

You have the right to:

• Access the personal information we hold about you, and get a copy of it;
• Rectification — have inaccurate information corrected, and incomplete information completed;
• Erasure — have your information deleted, including by deleting your account as described in Deleting your account, subject to the records we must keep;
• Restriction — ask us to stop using your information, other than storing it, while a question about it is resolved;
• Portability — receive the information you gave us, where we use it under our contract with you or your consent, in a structured, machine-readable format, and have it sent to another company;
• Object to any use based on our legitimate interests, including analytics and contact matching — and to direct marketing at any time, without giving a reason;
• Withdraw your consent at any time, where we rely on it; and
• Complain to a supervisory authority. In the EEA, that is the data protection authority where you live, where you work, or where you think the problem happened — the European Data Protection Board lists them. In the UK it is the Information Commissioner’s Office, and in Switzerland the Federal Data Protection and Information Commissioner. We would be glad to hear from you first.

To exercise a right, email privacy@jointasted.com — Making a privacy request explains how. It is free. We answer within one month, which we may extend by two further months for a complex request or many requests, and we will tell you if we do. We may need to confirm it is you first, for example from the phone number on your account.

The limits that US law puts on privacy rights, described in section 4, section 7 and section 14, do not limit your rights under this section. Where we keep something despite a request to erase it, we will tell you what and why.

How long we keep your information

• Your account, profile, posts, comments, likes, follows and lists — until you delete them or your account. After you delete your account they are normally gone within minutes.
• Photos, receipt images, and the time and place saved with them — while your account is open, as the record of what you posted and of the rewards we granted, and deleted with your account, or earlier if you ask. A post you delete leaves the app at once.
• Contacts you uploaded — until you delete your account or ask us to delete them.
• An invitation sent to a number with no account — the number, who invited them, the restaurant, the day, the web link and whether it was opened and answered — until the person who sent it deletes it or their account, or the number’s owner asks for erasure. Its Customer.io profile is removed within thirty days of such a request. The number alone remains on the suppression list, so it cannot be invited again.
• Records of Tasted Cash and claims — while the value is live, and afterwards, with your identity removed, for as long as accounting and tax law requires.
• The one-way hash of a phone number that received a welcome credit — for as long as we offer a welcome credit, and used for nothing but that check.
• A shipping address for a referral reward — deleted thirty days after the reward is delivered.
• Reports and moderation records — kept as the record of what was reported and what was decided. When a reviewer removes content, the removed content is kept in that record, seen only by our team, in case the decision is disputed.
• Your profile at Customer.io — removed within thirty days of deleting your account.
• Support conversations at Intercom — kept while your account is open, so we can answer follow-ups, and deleted within thirty days of deleting your account. An anonymous conversation is deleted when you ask, or once it is no longer needed.
• Technical logs and error reports — only as long as we need them to run and fix the Service.