Privacy Policy
Last updated: June 2026
1. Who We Are
Essentiala Ltd ("Essentiala", "we", "us", "our") is a limited company registered in England and Wales (company number 16924554). We are the data controller for personal information collected through this website and our mobile applications, which include StudyFlow and Tastora (together, "our apps").
You can contact us at any time at info@essentiala.online.
2. Scope of This Policy
This policy explains what personal data we collect, how and why we use it, who we share it with, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to this website and to every app we publish, unless a specific app provides its own separate notice.
3. What Data We Collect
Depending on how you use our website and apps, we may collect:
- Account data — when you first open one of our apps we create an anonymous, device-linked account so you can use the app immediately. If you choose to sign in (for example with Sign in with Apple, Google, or an email address), we collect the identifier or email address associated with that sign-in method.
- Content you create or submit — recipes, links, images, notes and other content you add to or generate within our apps. In Tastora this includes the social media links, images, or dish names you submit for recipe extraction, and the recipes, cookbooks, shopping lists and meal plans you save.
- Subscription data — if you purchase a subscription, we receive confirmation of your purchase and your subscription status from Apple and our subscription provider. We do not receive or store your card or payment details.
- Usage and device data — basic information about how our apps are used, such as features accessed, session activity, app version, device type and operating system, and crash and diagnostic reports.
- Contact data — if you email us or use a contact form, we receive your name, email address and the contents of your message.
- Newsletter data — if you opt in to our newsletter, we collect your email address and your marketing preferences.
We do not intentionally collect special category data (such as health data). Please do not submit such information to our apps.
4. How We Use Your Data and Our Lawful Bases
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Create and maintain your account and provide the app's core features | Performance of a contract |
| Process the content you submit, including AI recipe extraction | Performance of a contract |
| Manage subscriptions, billing status and access to paid features | Performance of a contract |
| Maintain, secure, debug and improve our apps | Legitimate interests |
| Analyse aggregated, anonymised usage to improve the experience | Legitimate interests |
| Respond to your enquiries | Legitimate interests |
| Send you our newsletter and marketing, where you have opted in | Consent |
| Comply with our legal obligations | Legal obligation |
You can withdraw consent for marketing at any time (see section 7).
5. AI Processing
Some features of our apps use artificial intelligence. In Tastora, the links, text or images you submit are sent to our AI provider (Anthropic) to identify and structure recipe information. In StudyFlow, content you upload is processed to generate study questions.
Content is sent to our AI provider only to perform the feature you requested and to return a result to you. We do not use your personal content to train our own models, and our AI provider processes the content as our processor under contract.
Important: AI-generated output — including recipe ingredients, quantities, steps, nutritional values and allergen information in Tastora — is produced automatically and may be inaccurate or incomplete. It is provided for general information only and must not be relied on for medical, dietary, health or allergen decisions. Always verify independently, particularly if you or others have allergies or specific dietary requirements.
6. Who We Share Your Data With
We use the following trusted third-party processors to operate our services. Each only processes data on our instructions:
| Processor | Purpose |
|---|---|
| Supabase | Secure authentication and storage of app data |
| Anthropic | AI processing for recipe extraction and question generation |
| RevenueCat | Subscription management and entitlement checks |
| Apple | App Store payments, account services, and Sign in with Apple |
| Sign-in, where you choose to sign in with Google | |
| beehiiv | Delivery of our email newsletter, where you opt in |
We may also disclose information where required by law, to protect our rights, or in connection with a business sale or reorganisation. We do not sell your personal data, and we do not use third-party advertising or tracking cookies on our website.
7. Newsletter and Marketing
If you opt in, we send our newsletter via beehiiv. Every email contains an unsubscribe link, and you can opt out at any time by clicking it or by emailing us. Unsubscribing does not affect your use of our apps.
8. Data Retention
We keep personal data only for as long as necessary:
- App account and content — retained while your account is active. When you delete your account (see section 10), your data is deleted within 30 days.
- Contact correspondence — kept for up to 24 months.
- Newsletter data — kept until you unsubscribe.
- We may retain limited information for longer where required to meet legal, accounting or fraud-prevention obligations.
9. Your Rights Under UK GDPR
You have the right to: access your data; have inaccurate data corrected; have your data erased; restrict or object to processing; data portability; and withdraw consent at any time. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, email info@essentiala.online. We will respond within one month.
10. Accessing or Deleting Your Data
You can permanently delete your account and all associated data directly within our apps (in Tastora: More → Delete Account). You can also email info@essentiala.online from the address linked to your account to request deletion. We will action verified requests within 30 days.
11. International Transfers
Where any processor transfers data outside the UK, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement (or the Addendum to the EU Standard Contractual Clauses).
12. Data Security
We use industry-standard measures — including encryption in transit, access controls, and Row Level Security on our database — to protect your data. No system is completely secure, but we work to protect your information and will notify you and the ICO of any breach where legally required.
13. Children
Our apps are not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.
14. Cookies
Our website uses only the minimal cookies necessary for it to function. We do not use third-party advertising or tracking cookies.
15. Changes to This Policy
We may update this policy from time to time. The "Last updated" date above reflects the latest version, and significant changes will be notified where appropriate.
16. Contact
Essentiala Ltd — registered in England and Wales, company number 16924554.
Email: info@essentiala.online