1) Information we collect

We collect the minimum necessary to run Taste Compass and improve your experience.

Account & contact: name, email, password (hashed), preferences.
Profile data: member names, age or birthdate, gender (optional, inclusive options), taste personas, badges.
Kit & survey: kit codes, registration details, survey answers, timestamps.
Usage: device/browser info, pages viewed, referrer/UTM tags, rough location from IP (city/region), crash logs.
Support: messages you send us and related metadata.

We do not collect payment information unless you purchase paid services; when we do, it’s handled by a PCI-compliant provider.

2) How we use your information

Provide core features (login, Members, Test Kits, surveys, results).
Personalize content (e.g., taste persona suggestions, recipe hints).
Maintain security (fraud prevention, abuse detection, auditing).
Analyze and improve product performance and UI.
Communicate with you (service emails, critical updates, support).
Comply with legal obligations and enforce terms.

3) Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we process your data based on:

Contract: to provide the service you request.
Legitimate interests: product analytics, preventing fraud, improving security.
Consent: optional fields (e.g., self-describe gender), cookies beyond strictly necessary.
Legal obligation: record-keeping where required by law.

4) Cookies & analytics

We use cookies and similar technologies to keep you signed in, remember preferences, and understand product usage.

Strictly necessary: session/auth, security, load balancing.
Preferences: UI settings such as theme choices.
Analytics: aggregate insights on flows and feature usage (no sensitive survey content in analytics events).

You can control cookies in your browser; blocking some may impact functionality.

5) Sharing & processors

We don’t sell your personal information. We share it only with:

Service providers (data hosting, email delivery, analytics, error tracking) bound by confidentiality and data processing agreements.
Legal & safety when required by law, to protect rights, prevent fraud, or respond to lawful requests.
Business transfers if we merge, acquire, or sell assets, under equivalent protections.

6) Data retention

We keep personal data only as long as needed to provide the service, comply with legal duties, resolve disputes, and enforce agreements. You may request deletion at any time (see Your rights).

7) Your rights & controls

Access/Export: request a copy of your data.
Correction: update inaccurate or incomplete info.
Deletion: request that we delete your account/data (subject to legal exceptions).
Restriction/Objection (EEA/UK): in certain cases, limit or object to processing.
Consent withdrawal: where processing is based on consent.
Do Not Sell/Share (CCPA/CPRA): we don’t sell your personal information; if we ever introduce ad tech, we’ll present a clear opt-out.

To exercise rights, see Contact. We may verify your request to protect your account.

8) Children’s privacy

Taste Compass isn’t directed to children under 13 (or the minimum age in your jurisdiction). If you believe a child provided personal data, contact us and we’ll take appropriate steps, including deletion where required.

9) International data transfers

We may process data in countries outside your own. Where applicable, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect your information.

10) Changes to this policy

We may update this policy to reflect product, legal, or operational changes. If changes are material, we’ll provide a prominent notice (e.g., in-app banner or email).

11) Contact us

Questions or requests? Reach us at:

Email: privacy@compasstaste.com
Address: Taste Compass, 650 S Pearl St, Columbus, OH, 43206, USA

If you’re in the EEA/UK and have concerns, you may also contact your local supervisory authority.