Legal
Privacy policy
Last updated: 2026-10-02 · Effective 2026-10-02
1. Who we are
Taarof is made by Juunam (société à responsabilité limitée simplifiée (SARL-S) under Luxembourg law), RCS Luxembourg B308227, rue des Aubépines 29, L-1145 Luxembourg, Luxembourg. We are the data controller for everything described here. Write to hello@taarof.app about anything in this policy.
2. What Taarof is
A private log of what you have eaten and tried. You photograph something, Taarof names it, and it lands on your list. Your list, ratings, notes and photos are private to you. Nobody else sees them, and we do not publish them.
3. What we collect
Account: your email address (sign in with email code), or an Apple sign-in identifier and — only if you choose to share it — the email Apple gives us, which may be a relay address. Your log: the names of things you tried, when, an optional star rating, an optional note and an optional photo. Where: if you let the app use your location on the confirm screen, the nearest restaurant to you; we store the restaurant, not your position. Device data only when the app crashes (see Crashes).
4. Photos and camera
The camera is used only when you tap the + button. A photo is stored in private storage that only your account can read, under a link that expires. When you delete a tasting its photo is deleted; when you delete your account every photo is deleted. To name what is in a photo, the photo is sent once to OpenAI (United States) with no account information; it is not used to train their models and is not kept beyond the request. If you prefer, type the name instead — the photo then stays on your device and with us only.
5. Location
Location is asked for only when you tap Where? on the confirm screen, or when a photo looks like a plated dish. We use it once, to find eating places within 150 metres. To do that your approximate coordinates are sent to OpenStreetMap's Overpass service (operated by the OpenStreetMap Foundation at overpass-api.de, with Kumi Systems as a fallback). We do not store your coordinates. You can always type a place instead, and the app works fully with location off.
6. The shared catalogue
Names of products, dishes and places are shared between all Taarof users so that the same thing is only entered once. Product names come from barcodes via Open Food Facts; place names from OpenStreetMap; the rest from what people type. Only names, categories and locations of places are shared — never your tastings, ratings, notes or photos. This catalogue is available as open data under the Open Database Licence (ODbL) on request.
7. Where your data is stored
On Supabase servers in the European Union (Frankfurt). Supabase processes data on our behalf under a data-processing agreement. Transfers to OpenAI (United States) happen only for the photo-naming step above and only for the photo itself.
8. What we don't do
No advertising, no tracking across apps or websites, no selling of personal data, no social feed. We do not read your list for any purpose other than showing it back to you and keeping the service running.
9. Crashes
If the app crashes we may record what went wrong: the error, the app version and update, the device model and iOS version. This record carries no account identifier and is used only to fix the problem.
10. Paid features
Taarof is free to use. If we add paid extras they will be sold through Apple's in-app purchase; Apple handles payment and we receive only a receipt showing which feature you bought. There are no paid features today.
11. Your rights and deleting your data
You can delete your account from Settings in the app; this immediately and permanently erases your account, your list and your photos. You can also ask us at hello@taarof.app for a copy of your data, to correct it, to delete it, or to object to how we use it, and we will answer within one month. You may complain to the Luxembourg data protection authority (CNPD) or your local authority.
12. Legal basis
We process your account and your list to provide the service you signed up for (contract). We ask your permission before using the camera and location (consent), and you can withdraw it in iOS Settings at any time. Crash records are processed in our legitimate interest in keeping the app working.
13. Age
Taarof is for people aged 16 and over. We do not knowingly keep an account for anyone younger; tell us and we will delete it.
14. Changes
If this policy changes in a way that matters to you, the app will tell you before the change applies. The date at the top is the date of the current version.
15. Contact
Juunam, rue des Aubépines 29, L-1145 Luxembourg, Luxembourg · hello@taarof.app