Privacy Policy

Gluglu · Last updated 28 May 2026

Gluglu helps people with celiac disease and gluten sensitivity scan products, analyze ingredients, and find safe places to eat. We built it privacy-first: most of your data never leaves your device. This policy explains exactly what we collect, why, and your choices.

The website

When you visit wearegluglu.com we measure how the page is used: which sections are read, how far people scroll, how fast the page loads, and whether the sign-up form is completed. This is first-party and stays with us. It is never sold or shared.

We store nothing on your device for this. No cookies, no browser storage, no advertising identifiers. Each visit is measured on its own and cannot be linked to any other visit, to your email, or to you. We do not record mouse positions, keystrokes or screen recordings.

If you join the waitlist we keep your email address and the language you used, so we can write to you when the app launches. Unsubscribe in one tap and it is deleted.

Waitlist (wearegluglu.com)

If you join the waitlist we store your email address, the language you chose and the date, in Google Firebase (Firestore). We use it to send one launch email and occasional big-news updates. We never sell or share it. Email hello@gluglu.app to be removed at any time.

Data stored only on your device

• Scan history & saved/safe lists : the products you scan and places you save are stored locally on your iPhone. We do not upload them.
• Account profile : if you use Sign in with Apple, your name and email (if you choose to share them) are stored in the device Keychain, not on our servers.
• Preferences : diet mode, onboarding answers, and notification settings are kept in on-device storage.
• Symptom / glutening logs : any health notes you record stay on your device.

Data processed by third parties

• Location : when you open the map we use your location while you use the app to show nearby gluten-free places. Your location is sent to Apple Maps and Google Places to return results; we do not store your location on our servers.
• Barcode lookups : scanned barcodes are sent to Open Food Facts to retrieve product and ingredient data.
• Restaurant data : place details, ratings, and photos are retrieved from Google Places and Apple Maps.
• Community content : places, reviews, and recall reports you submit are stored in Google Firebase (Firestore) so other users can see them. These are public contributions.
• Anonymous identity : we create an anonymous Firebase account (a random ID) so the app can write your contributions. It is not linked to your name or email.
• Optional app usage counts : in the updated app, usage collection is off by default. You can enable or stop it in Settings. If enabled, we send feature-use event names (for example, "a scan completed"), timestamps, app version and platform to Firebase Firestore. These event records do not include your account ID, scanned products, venue details, symptoms or onboarding health answers. Automatic Google Analytics collection is disabled in this release. Firebase still processes connection and authentication information to provide the service. Turning this setting off stops new usage events; it does not delete records already received. Older app versions used a different analytics implementation, so please update before relying on these controls.
• Purchases : subscriptions and the lifetime unlock are processed by Apple. We never see your payment details.

Camera and photos

The camera is used to read barcodes. If a barcode won't scan, you can photograph the ingredient list : that image is analyzed on your device using Apple's Vision framework and is not uploaded.

Health data

Gluten verdicts are informational and best-effort, not medical advice. Always read the product packaging and consult a medical professional for dietary decisions. Symptom logs you keep are stored only on your device.

Children

Gluglu is not directed at children under 13 and we do not knowingly collect their data.

Your choices

• You can revoke camera or location access anytime in iOS Settings.
• You can delete your account and wipe local data from Settings → Delete Account in the app.
• You can request deletion of community content you submitted by emailing us.

Contact

Questions or deletion requests: hello@gluglu.app.

---