Last updated: 2026-08-26
The short version. GlutenGuide does not store your email address, does not store your location, and never asks whether you have been diagnosed with anything. We keep the smallest amount of data that lets the app work, and you can delete all of it from inside the app at any time.
GlutenGuide is operated by Mustafa Ilter, Türkiye. For anything in this document, write to ilter6282@gmail.com.
This table is written from the actual database schema, not from intent.
| Data | Why |
|---|---|
| An internal account ID (a random UUID) | To link your contributions to your account |
| Your sign-in provider (Apple or Google) and the permanent ID that provider gives us | So you can sign back in as the same person |
| Display name and profile image, if you set one | Shown next to your contributions |
| Interface language and country | To show content in your language and apply the right labelling rules |
| One preference: whether cross-contact matters to you | To decide how cautious your verdicts should be |
| Your posts, notes, recipes and photos | They are the content you chose to publish |
| Your votes on places, and whether you were physically near the place when you voted | To weigh verifications and to detect abuse |
| Products you marked as seen at a place, with the date | So the next person can find gluten-free products near them; the date shows how fresh the sighting is |
| Accounts you blocked, and reports you filed | Safety features required by the app stores |
| Subscription product and expiry date | To know whether Pro features are active |
| Feedback you send, with device model and app version | To reproduce the problem you are describing |
Where the GDPR applies: we process your account data to perform the contract you enter when you create an account (Art. 6(1)(b)), and we process reports, blocks and abuse signals on the basis of our legitimate interest in keeping the service usable and safe (Art. 6(1)(f)). Publishing a post or a verification is your own act; you can delete it.
| Service | What reaches them |
|---|---|
| Apple / Google (sign-in) | They tell us you signed in; we tell them nothing about your use of the app |
| RevenueCat (subscriptions) | Your internal account ID and purchase events. No name, no email |
| Apple App Store / Google Play | Payment is handled entirely by them. We never see your card |
| Cloudflare R2 (photo storage) | Photos you upload |
| Hetzner (Germany) | Hosts the database and API |
Product information comes from Open Food Facts and place information from OpenStreetMap contributors, both under the ODbL. These are sources we read; nothing about you is sent to them.
We do not sell data, and we do not share it for advertising.
On servers in Germany (EU). Photos are stored by Cloudflare, which may replicate them across regions.
Account data stays until you delete your account. Content you published stays until you delete it or we remove it under the rules below. Reports are kept while the report is being handled and for a period afterwards, so that repeat abuse can be recognised.
You can delete your account from Profile › Delete account at any time; see what deletion removes. If you cannot sign in, write to ilter6282@gmail.com from a device where you are still signed in, or describe your account well enough for us to find it — remember that we have no email address on file, so we may need another way to be sure it is yours.
Where the GDPR or a similar law applies, you also have the right to access, correct, restrict or object to processing, to receive a copy of your data, and to complain to your local data protection authority.
GlutenGuide is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, write to us and we will remove it.
If this policy changes in a way that matters, we will change the date above and, for material changes, tell you in the app before the change takes effect.