Tiramisu Privacy Policy

Last Updated: August 9, 2026

Tiramisu ("we," "our," or "the app"), developed and published by Weitzman Labs LLC, is committed to protecting your privacy. This policy explains what information the app handles and how.

Information We Collect

When you sign in and start logging slices, we collect:

  • Your Apple account identifier — provided by Sign in with Apple to create and secure your account. We ask Apple only for your name, which prefills your display name during setup; we never request your email address.
  • Your username, display name, and city — all chosen by you, and all shown on your profile.
  • The slices you log — the restaurant, your gut reaction, where the slice lands in your ranking, the date you ate it, and any note you write.
  • Photos you attach — taken with the camera or chosen from your photo library, and uploaded with the entry. We access the camera and photo library only when you attach a photo, and only the photo you pick.
  • Your follows, bookmarks, and reactions — who you follow, the places on your want-to-try list, and the emoji you leave on other people's entries.
  • Restaurant details from Apple Maps — the name, address, city, and coordinates of a place you log, saved so that everyone's entries for the same restaurant line up on one map pin.

Information We DO NOT Collect

  • We do not store your location. Your device's location is used on the device to center the map and to bias restaurant search toward you; it is never saved or sent to our servers.
  • We do not access your contacts or address book.
  • We do not collect your phone number.
  • We do not send push notifications, and we do not collect a device token.
  • The app contains no analytics, advertising SDKs, or trackers of any kind.
  • We do not sell, rent, or share your information with anyone.

How Your Information Is Used

Your information is used solely to operate the app: signing you in, keeping your ranked list in order, showing your slices on your profile and on the map, letting people find you by username, and delivering the people you follow into your feed. Nothing else.

What Is Public

Tiramisu is a public app. There is no private or followers-only mode, and what you post is visible to everyone using it — not only to the people who follow you.

  • Your profile — username, display name, and city are visible to everyone, including in user search.
  • Your entries — the restaurants you log, your rankings, your notes, and the dates are visible to everyone.
  • Your photos — stored in a public bucket and served from a public web address. Anyone holding that address can open the photo, including outside the app.
  • Your follows, bookmarks, and reactions — visible to everyone.
  • Only you can add, edit, or delete your own content. Please do not post anything you would not want to be public.

Third-Party Services

Tiramisu's backend runs on Supabase, which stores account, entry, and photo data on our behalf. Signing in uses Sign in with Apple, and restaurant search and maps are powered by Apple Maps; both are governed by Apple's privacy policy. Our website is hosted on Vercel and counts page views with Vercel Analytics, which uses no cookies and does not track you across sites. None of these are used for any purpose beyond operating the app.

Data Storage and Security

Your data is stored on Supabase under row-level security: every record can be created, edited, or deleted only by the signed-in account it belongs to. Reads are deliberately open, as described above. Photos are stored in a public bucket, in a folder keyed to your account, which only you can write to. Your sign-in session is held in the device keychain, and all traffic between the app and our servers is encrypted in transit.

Data Deletion

You can permanently delete your account and everything attached to it — profile, entries, photos, notes, reactions, follows, and bookmarks — from inside the app: open the Profile tab, tap the gear icon, then Delete account. Deletion is immediate and irreversible, and requires no email or request to us.

Children's Privacy

Tiramisu is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact Us

Questions about this policy or your data: robby@weitzmanlabs.com

Summary

In short: Tiramisu is a public app. Your account is your Apple sign-in and a username — we never ask Apple for your email, we never touch your contacts, and your location is never stored. Everything you log is visible to everyone, and you can delete all of it yourself, in the app, at any time.