Privacy Policy

BiteWorthy keeps the data we need to make the dietary filter work and not much more. We don’t sell or share your personal information. We don’t share it with advertisers. The list of third-party services we use is short and named below. You must be at least 13 years old to use BiteWorthy.

• Account: email address, hashed password, OAuth identifier (if you sign in with Apple or Google), display handle. Optional photo.
• Dietary profile: the ingredients and tags you mark “avoid,” the dietary preset (e.g. Celiac) you picked, your strictness setting, and any taste signals (ingredients/tags you like or dislike) you add to improve your picks. Stored against your account so it follows you across devices.
• Reviews: the rating, body, and optional photo you submit on a dish. Reviews are public — see “What’s public” below. Photos are stored on Cloudflare R2 (see “Where data lives”).
• Restaurant visits: when you open a filtered restaurant page while signed in, we record one row per (user, restaurant, day) so you can find it again in My filtered menus. Anonymous browsing creates no such row.
• Suggested edits: if you submit a fix to a dish (e.g. “this actually contains dairy”), we keep the suggestion + its decision history for the moderation queue.
• Waitlist: if you join the launch waitlist, we store your email address so we can tell you when BiteWorthy is available.

• Real name (unless you put it in your display handle).
• Phone number.
• Address or GPS coordinates.
• Device fingerprints, advertising IDs, or cross-app tracking signals.

Your reviews — the rating, text, and any photo — appear publicly next to your display handle on the dish page and on your profile at /u/your-handle. Your dietary profile is never shown publicly: what you avoid, your presets, your strictness, and your taste signals stay private to your account. Be aware that a pattern of public reviews can let someone infer your preferences.

If you share a filtered menu link, the link itself encodes your avoid-lists and strictness so the recipient sees the same filter. It does not include your identity, email, or taste signals — but treat a shared link like any private link, since anyone who has it can read those filter settings.

• Neon Postgres (AWS, US East): your account, profile, review text, suggestions, and visit history.
• Hetzner (Ashburn, USA): the servers that run the API.
• Cloudflare R2: review photos and the cropped per-dish photos that the ingestion pipeline extracts from menu images.
• Anthropic: when a menu is being ingested, the menu image is sent to Anthropic Claude for OCR + structuring. The image leaves our servers but is not used to train the model. We do not send your reviews or profile to Anthropic.
• Postmark: outbound email (claim verification, password reset). The recipient address and message body pass through Postmark; we don’t store the message itself.
• PostHog: product analytics. See “Your rights and controls” for exactly what we send and how to opt out.

• Account & dietary profile: kept for as long as your account is open; removed when you delete it (see below).
• Reviews & suggested edits: kept as part of the shared menu graph; if you delete your account we delete or anonymize them.
• Restaurant-visit history: kept for as long as your account is open. After you delete your account it’s removed from active systems within 30 days and fully purged within 12 months.

• Access / export your data: email privacy@bite-worthy.com and we’ll send a JSON archive within 30 days.
• Delete your account: same email, same window. We remove your personal data within 30 days and delete or anonymize your reviews. Some records may be retained where the law requires it.
• Correct your data: update your dietary profile any time in the app; for anything else, email us and we’ll fix it.
• Opt out of analytics: on web, analytics are on by default — turn them off with the toggle in /profile/settings, and we honor your browser’s Do-Not-Track signal automatically. On mobile, analytics are off by default and only fire if you enable them in Settings → Analytics. When analytics are on and you’re signed in, the funnel events (e.g. app_open, menu_filtered) are linked to your account and include coarse signals such as your strictness setting, which dietary preset you use, and counts of hidden/visible items. We never send review text, your email, or your specific avoid-lists.
• We do not sell or share your personal information, and we will not discriminate against you for exercising any of these rights.

BiteWorthy is available in the United States at launch. If you’re in the EU or UK, additional rights may apply — contact us and we’ll honor them.

BiteWorthy is for diners managing their own or their family’s dietary needs. You must be at least 13 to create an account. If we learn we’ve collected personal data from a child under 13, we delete it. BiteWorthy is not directed at children under 13.

We’ll update the date at the top when this page changes. Material changes get a highlighted note on the homepage and an email to active accounts.

Email privacy@bite-worthy.com for anything in this policy, including data access, deletion, or correction requests. For copyright takedowns, see Terms § Copyright & DMCA.