Privacy Policy
1. Who we are
This Privacy Policy describes how Gluto.ai and its affiliates (“Gluto,” “we,” “us,” or “our”) collect, use, and share information when you use the Gluto website, mobile apps, AI assistants, maps, product checks, education, community, and related services (collectively, the “Service”).
2. Information we collect
Information you provide:
- Account details — username, email address, and (optionally) a phone number and password.
- Profile and preferences — questionnaire and onboarding answers about your dietary needs (for example, celiac disease, gluten sensitivity, or gluten-free preferences) used to personalize guidance.
- Content you submit — chat messages, questions, reviews, saved places, and other content you enter into the Service.
- Camera and product images — when you use barcode scanning or product checks, we process the barcode or image you capture to look up product information. Images are used to perform the check and are not published to other users.
Information collected automatically:
- Location — with your permission, approximate or precise device location (or a location you enter) to show gluten-free places near you. You can disable location access in your device settings.
- Usage and device data — app screens viewed, features used, IP address, device type, operating system, app version, identifiers, timestamps, and activity logs used for security, analytics, and product improvement.
- Optional activity history (consent-based) — with your permission, we save your search queries, content pages viewed, and ad interactions to your account to personalize the Service and show your history back to you. These streams are controlled by the toggles on the My Data & Privacy page and are off unless you enable them.
3. How we use your information
- Provide, operate, secure, and maintain the Service;
- Personalize recommendations, guidance, and educational content to your needs;
- Answer your questions through our AI assistants and look up restaurants and products;
- Send service-related messages (such as verification codes, security notices, and account updates);
- Measure usage, troubleshoot, and develop new features;
- Detect, prevent, and address fraud, abuse, and security issues;
- Comply with legal obligations and enforce our Terms.
4. How we share information
We do not sell your personal information. We share information only as described here:
- Service providers — vendors who host our infrastructure and process data on our behalf (for example, cloud hosting, email/SMS delivery, and analytics) under contractual confidentiality and security obligations.
- Product and location data sources — to check products and find places, we may query third-party sources such as Open Food Facts and mapping/geolocation providers. Your queries are subject to those providers' own privacy practices.
- Legal and safety — when required by law, or to protect the rights, safety, and security of Gluto, our users, or the public.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.
5. AI assistants
Gluto uses artificial intelligence and automated systems to answer questions, summarize, and score results. When you interact with an assistant, your messages and relevant context are processed to generate a response. Do not submit sensitive information you do not want processed for this purpose. AI outputs may be imperfect and are for general informational purposes only — always verify ingredients, preparation, and cross-contamination yourself and consult a qualified healthcare professional when needed.
6. Data retention
We keep personal information for as long as your account is active or as needed to provide the Service, and thereafter as required for security, legal compliance, dispute resolution, and enforcement of our agreements. We may retain de-identified or aggregated data that no longer identifies you.
7. Your choices and rights
- Access and correction — you can view and update your profile information in the app.
- My Data dashboard — signed-in users can visit My Data & Privacy to see everything we store about their activity (product scans, product lists, search history, dining history, saved content, ad interactions), download a machine-readable copy, and permanently erase individual categories.
- Granular consent — optional data streams (personalization/activity history, ad measurement, anonymized research) are off until you turn them on, and you can change your choices anytime on the My Data page. Every consent change is recorded in an audit trail.
- Account and data deletion — you can delete your account directly in the app (Profile → Delete Account), which removes your account and associated personal data, except information we must retain by law. You may also email us to request deletion.
- Location and camera — you can grant or revoke location and camera permissions at any time in your device settings.
- Marketing — you can opt out of promotional messages at any time (for example, by replying STOP to SMS or using the unsubscribe link in emails). We may still send transactional messages.
- Regional rights — depending on where you live (for example, the EEA/UK under GDPR or California under the CCPA/CPRA), you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object or lodge a complaint with a regulator. To exercise these rights, contact us using the details below.
8. Security
We use administrative, technical, and organizational measures designed to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your credentials confidential and notify us of any suspected unauthorized access.
9. Children's privacy
The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.
10. International transfers
We may process and store information in countries other than where you live. Where required, we use appropriate safeguards for such transfers.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version with an updated effective date, and, where required, provide additional notice. Your continued use of the Service after an update constitutes acceptance where permitted by law.
12. Contact us
Questions or requests about this Privacy Policy or your data: support@gluto.ai