Back

    Privacy Policy

    Effective date: 2026-09-08 · Last updated: 2026-10-11 · Version 1.2

    Legal seller and data controller

    Sangchan Yoo trading as TasticOz (ABN 34 390 709 434; "we", "our") respects your privacy. Sangchan Yoo is the legal seller and data controller responsible for personal information processed by TasticOz. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It describes our current practices and is pending formal legal review; it is not legal advice. By using the Service, you agree to the practices described below.

    1. Information We Collect

    • Account information: your email address and an account ID created by our backend provider. If you sign in with Google or Apple, we receive the email address and account identifier those providers return — we never receive your password.
    • Saved content: bookmarked restaurants, saved day-trip courses, your custom travel routes and any shareable list links you create.
    • Reviews and comments: text, star rating and the display name you choose to publish alongside them.
    • Preferences: language selection, selected city and newsletter city preferences (stored in your browser and, where relevant, with your account).
    • Approximate location: only when you explicitly tap "Find Nearby". Your coordinates are used in your browser to sort results and are not stored on our servers.
    • Usage analytics: page views and basic in-app events, including a randomly generated session ID, page path, referrer, language, city section and browser user-agent string.
    • Security logs: authentication attempt outcomes (with the email address stored in hashed form), error codes and timing, used to detect abuse.
    • Reports you submit: issue reports including any optional contact email, description and uploaded screenshots.
    • Newsletter: your email address, language and selected cities if you subscribe.
    • Device and network data: standard server logs kept by our hosting and backend providers, which include IP address and browser details.
    • Membership and payment: subscription status and plan. Card details are never handled or stored by TasticOz — they are processed by our payment provider.

    We do not use AI features that send your personal information to AI providers. AI is used only in internal editorial and data-verification tools operated by our team, on venue information — not on user accounts or user activity.

    2. How We Use Information

    • To operate, maintain and improve the Service.
    • To authenticate users and protect against abuse and fraud.
    • To personalise your experience (language, saved venues, routes).
    • To send newsletters and service emails you have asked for.
    • To measure aggregate usage and to serve advertising.

    3. Cookies, Local Storage & Advertising

    We store your login session, language choice and an analytics session ID in your browser's local storage. Where advertising is enabled, we use Google AdSense; Google and its partners may use cookies and similar technologies to serve ads based on your prior visits to this and other websites.

    You can opt out of personalised advertising via Google Ads Settings or aboutads.info. Paid members browse the Service without ads.

    You can opt out of personalised advertising via Google Ads Settings or aboutads.info. Paid members browse the Service without ads.

    4. Third-Party Services

    We rely on the following providers. Each has its own privacy policy:

    • Lovable Cloud (Supabase) — authentication, database, file storage, serverless functions and hosting infrastructure. Receives your account and saved data.
    • Google Sign-In / Apple Sign In — optional social login. They confirm your identity and return your email and an account identifier.
    • Google Analytics 4 — aggregate site usage statistics (pages viewed, page title, referrer, language, device and approximate location). Google may set analytics cookies; you can opt out with the Google Analytics Opt-out Browser Add-on.
    • Google AdSense — advertising, where enabled. Receives ad-serving signals from your browser.
    • Google Maps / Places — venue data and geocoding. Called from our servers about venues; we do not send your account details. Map links you open are handled by Google under their policy.
    • OpenStreetMap / Leaflet — map tiles rendered in your browser; your IP address is visible to the tile provider.
    • Google Gemini AI (and, for internal editorial tools, OpenAI) — used by our team for venue research, content drafting, verification and translation of venue content. User personal data is not sent.
    • Email delivery provider — sends account, newsletter and transactional emails; receives your email address.
    • Paddle — payment and subscription processing (merchant of record) when membership is enabled. Handles your billing details directly.

    We do not sell your personal information.

    5. Data Retention & Security

    We keep your account data while your account is active. Analytics and security log entries are kept in aggregate form for product and abuse-prevention purposes. Records we may be required to keep for legal, tax or accounting reasons (such as payment records) are retained for the period required by law. We use encrypted transport, row-level database security and role-based access controls, but no system is 100% secure.

    6. Deleting Your Account

    You can delete your account at any time from the Account page. Deletion removes your login, bookmarks, saved courses, custom routes, shared lists, reviews, comments, push-notification subscriptions and newsletter subscription. Issue reports and analytics records are kept but are disconnected from your account. Records subject to a legal retention obligation are kept only for as long as required.

    7. Your Rights

    Depending on your jurisdiction (Australian Privacy Principles, GDPR, CCPA), you may have the right to access, correct, export or delete your personal information. Contact us at the address below to exercise these rights.

    8. Children's Privacy

    The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have, please contact us.

    9. Changes to This Policy

    We may update this policy from time to time. Material changes are reflected in the effective date, last updated date and version number shown at the top of this page.

    10. Contact

    Questions or requests regarding this Privacy Policy can be sent to privacy@tasticoz.com.