Travel and Eat like a Local

Privacy Policy

Last Updated: 12 October 2026

Welcome to Notitia.blog. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose and safeguard information when you visit our website, use NOTITIA Traveller Pal, subscribe to our newsletter or interact with our services.

1. Information We Collect

We may collect personal information such as your name, email address, city or country of residence, information submitted through forms or surveys, account registration information, and subscription or membership information.

We may collect technical information such as IP address, browser type and version, device information, operating system, referring website, pages visited, and access date and time.

We use cookies and similar technologies to support website functionality, analyse traffic, remember preferences and improve the user experience.

Scan My Food: When you request food identification, the app processes a compressed version of your selected photograph and sends it to Google Gemini. Where available, the city and country currently selected in the app may also be sent to assist identification. This processing occurs before any later choice to save your original photograph.

Optional private storage (not yet launched): Once the feature is released, you may separately choose to store your original photograph and a preview in a private Saved Library. The choice will not be preselected. We will record the choice, the applicable consent version and the time of the decision. If you decline, the original photograph will not be uploaded to the private photo bucket; dish information may still be saved with a generic or curated image. Declining storage does not reverse identification processing already requested.

2. How We Use Your Information

We use information to provide and improve our services, manage user accounts and subscriptions, deliver newsletters and updates, respond to enquiries and support requests, analyse usage and performance, prevent fraud, abuse and security threats, and comply with legal obligations.

We use photographs submitted for Scan My Food to provide the requested identification. Where optional private storage is affirmatively selected after the feature launches, we use the stored original and preview to make the photograph available in the user's Saved Library. We do not automatically publish privately stored photographs to Community, use them in other users' results or recommendations, use them for marketing, or use them to train NOTITIA's own AI models. General references to improving our services do not override these restrictions on privately stored photographs.

3. Email Marketing

If you subscribe to our newsletter or provide your email address through our website, we may send updates, travel content, promotional offers and service-related communications. You may unsubscribe using the link in our emails or by contacting us directly.

4. Sharing of Information and Service Providers

We do not sell your personal information. We may share information with service providers that help operate our website and services, including website hosting, analytics, email marketing, payment processing and customer support providers, for authorised purposes and subject to applicable safeguards.

Scan My Food sends the compressed image and, where available, selected city/country context to Google Gemini for identification. Our app uses Supabase for relevant backend services and, when released, private photograph storage. These providers and authorised service personnel may process information to provide, maintain, secure and support the services or meet legal obligations.

The founder has confirmed that NOTITIA uses a paid Gemini API account. Under Google's published terms applicable to paid API services, prompts, images and responses are not used to improve Google's products. Google may still log or temporarily cache information for limited safety, abuse prevention and legal purposes under its terms. This is not a zero-retention commitment. The runtime API key's association with the billed project has not yet been independently confirmed and must be checked before publication of an unconditional paid-service claim.

5. International Data Transfers

Your information may be transferred to or processed outside your country of residence. We take steps intended to provide safeguards required by applicable law. The reviewed Supabase project is hosted in Singapore, while Supabase may use globally distributed infrastructure. Google or its service providers may process or temporarily cache data in other countries. The applicable contractual transfer safeguards and provider arrangements require final verification before publication.

6. Data Retention

We retain personal information for as long as necessary for the purposes described in this Policy, to meet legal obligations, resolve disputes and enforce agreements, subject to applicable retention requirements.

Saved Library (planned change): Once the approved permanent-save changes are deployed, new saved dishes and existing saved dishes still visible at migration will remain available until the user deletes them, subject to lawful retention and service availability. Already-expired hidden records are not automatically restored. This is not a description of the current live retention feature until deployed.

Private photographs (planned feature): Where the user chooses optional storage, the original and preview are retained for the Saved Library until removal or applicable account deletion. On deletion, NOTITIA's workflow requests removal of the active objects through the Supabase Storage API. We cannot promise immediate erasure from all browser caches, previously downloaded copies, separate backup systems or third-party records. Where Supabase Smart CDN applies, invalidation may take up to 60 seconds; applicability to this project is not yet verified. Supabase documents that database backups do not include Storage objects, but separate object-storage backup/retention arrangements have not been verified. Images previously sent to Gemini remain subject to Google's applicable processing, caching and logging terms.

7. Security

We implement reasonable administrative, technical and organisational measures intended to protect personal information against unauthorised access, disclosure, alteration or destruction. No internet transmission or electronic storage method is completely secure, and we cannot guarantee absolute security.

If private photograph storage is launched, photographs will be held in an access-restricted bucket associated with the user's account. Other ordinary app users will not be authorised to view the files through the app; relevant service providers and authorised operators may still process them as described above. This protection must be verified in the live release before it is advertised as available.

8. Your Rights and Requests

Depending on your location and applicable laws, you may have rights to access personal information, correct inaccurate information, request deletion, restrict or object to processing, request portability, or withdraw consent.

For privacy requests, including photograph-only removal without deleting dish details, contact feedback@notitia.blog. Withdrawing optional photo storage does not undo earlier identification processing.

Account deletion: The live app does not currently provide a self-service account-deletion control. Contact feedback@notitia.blog to request deletion. Requests may require identity verification and resolution of billing or lawful retention requirements. Deleting an app account does not itself cancel external subscription billing.

Published Community content: Under the proposed, not-yet-released account-deletion workflow, published reviews and comments may remain after deletion with the account link removed and the display name shown as “Deleted User”. Profile and dish-image links are intended to be cleared. Text and context may still identify the author; this is not guaranteed anonymity. Contact us if retained contributions contain personal information that requires review. This proposed behaviour must not be represented as live until deployed.

9. Children's Privacy

Our services are not directed to children under the age required by applicable law. We do not knowingly collect personal information from children.

10. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices or content and encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on this page with the revised effective date. Material changes will be communicated or subject to renewed acceptance where required by applicable law. General policy acceptance does not replace a separate, affirmative per-photograph storage choice.

12. Contact Us

For questions about this Policy or to exercise privacy rights, contact feedback@notitia.blog. Website: https://notitia.blog.