Privacy Policy
Last updated October 24, 2026
This policy covers the Formaitre apps (Flow, Loom, Canon and Star) and formaitre.com, run by Formaitre LLC ("Formaitre", "we"). It explains what we collect, why, and the choices you have.
What we collect
Your account
Your email address, your password (stored only as a secure hash), your name, and, if you add them, a profile photo and certification files. If you use Sign in with Apple, Apple may give us a private relay email address instead of your own.
Your restaurant's information
What you and your team enter: the restaurant's details, team members and roles, wines and other items, inventory counts, recipes, allergen information, training content, Pre-Shift notes and, in Loom, information about the restaurant's guests. Your restaurant controls this information; we store and process it on the restaurant's behalf to run the apps.
How the apps are used
A record of important changes (who changed what, and when), so your team can see history and approvals. For AI features, we log how much each request used, to apply usage limits. If you allow notifications, a push token for your device.
We do not use advertising trackers, and we do not sell personal information.
How we use it
- To run the apps: sign-in, your restaurants, roles, approvals, and syncing between your team's devices.
- To send account emails, such as email confirmation and password resets.
- To keep the service secure, for example by limiting repeated sign-in attempts.
- To provide AI features you choose to use (see below).
- To answer you when you contact us.
AI features
Some features, such as drafting a Pre-Shift or describing a wine in a chosen voice, send the relevant text to our AI provider, Anthropic, to generate a response. We send only what the feature needs. Anthropic processes it to produce the response and does not use it to train its models under our commercial terms. Your restaurant's API keys and AI settings are never stored in the apps.
Who we share it with
Only service providers that help us run Formaitre, under agreements that protect your information:
- Supabase: database, sign-in and file storage (servers in the United States).
- Anthropic: AI features, only when you use them.
- Our email provider: to deliver account emails.
- Apple: push notifications and the App Store.
Within a restaurant, people see what their roles allow. For example, guest contact details are visible only to roles with permission to see private guest information. We may disclose information if the law requires it.
How long we keep it
We keep your account while you use it. When a restaurant is deleted, its information can be restored for 30 days and is then permanently deleted. Backups roll over after a short period.
Your choices
- Delete your account at any time from Settings in any Formaitre app. This deletes your account, profile and personal files. Content you created for a restaurant stays with that restaurant without your name.
- See or correct your information in the apps, or ask us at hello@formaitre.com.
- Guests of a restaurant who want to see or remove information a restaurant keeps about them should contact that restaurant; we will help the restaurant respond.
Security
Information is encrypted in transit, access is limited by each person's role, and every restaurant's data is kept separate from every other restaurant's.
Children
Formaitre is made for restaurant professionals and is not intended for children under 16.
Changes and contact
We will post any changes on this page and update the date above. Questions: hello@formaitre.com.