Privacy Policy

Effective Date: July 18, 2026

Introduction

GlutenOrNot ("we," "our," or "the app") is a free tool that helps people with celiac disease check ingredient labels for gluten. This Privacy Policy explains how we handle your information when you use our web app at glutenornot.com or our iOS mobile app.

Information We Collect

Information We Do NOT Collect

We want to be clear about what we don't collect:

• No user accounts, emails, or personal identifiers
• No device IDs or advertising identifiers
• No precise location — we never access GPS; anonymous analytics include only an approximate region derived from your IP address (see below)
• No advertising or cross-site tracking of any kind
• No record of what you scanned on our servers — ingredient text and images are discarded after processing
• No images are stored — photos are processed and immediately discarded

Anonymous Analytics

To understand whether the app is working — how many scans happen, and how often lookups fail — we record one small, anonymous event per scan. Each event contains: the verdict (safe / caution / unsafe), the scan type (photo or barcode), whether the scan succeeded and why it failed if it didn't, the analysis confidence, the app platform (iOS or web), the detected language, technical quality measurements (the photo's file size and a count of how many characters of text were readable — never the text itself), and an approximate region (city level, derived from your IP address — the IP itself is never stored, only a one-way hash used to approximate unique-device counts). These events contain no ingredient text, no product names, no photos, and no personal identifiers, and they are not linked to any account or identity. They are processed by PostHog (see Third-Party Services below).

Information Stored Locally on Your Device

The app stores a small amount of data on your device: a simple scan counter (how many labels you've scanned), a flag remembering whether we've asked you to rate the app, and, in the iOS app, your recent scan results (the verdict and analysis for your last 50 scans, so you can look them up again — never the photos themselves). This data:

• Never leaves your device
• Is not linked to any personal information
• Can be cleared in the app (Recents → Clear) or by uninstalling the app or clearing app data

Information Processed (But Not Stored)

When you scan an ingredient label, your photo is temporarily processed to analyze the ingredients. Here's how it works:

• Your photo is sent to our server over an encrypted connection (HTTPS)
• We use Google Cloud Vision API to extract text from the image
• The extracted text (not the image) is sent to Anthropic's Claude API for analysis
• You receive a verdict (safe, caution, or unsafe)
• The image and text are not stored — they are discarded after processing

Third-Party Services

We use the following third-party services to provide the app's functionality:

Google Cloud Vision API

We use Google Cloud Vision to perform optical character recognition (OCR) on your photos. Google processes the image to extract text. We do not send any personal identifiers to Google. For more information, see Google Cloud Vision's data usage policy.

Anthropic Claude API

We use Anthropic's Claude to analyze extracted ingredient text. Only the text from your label is sent to Anthropic — not the original image or any personal information. For more information, see Anthropic's privacy policy.

PostHog (Analytics)

We use PostHog to process the anonymous per-scan analytics events described above (verdict, scan type, outcome, confidence, platform, detected language, technical quality measurements, approximate region — no ingredient text, photos, or personal identifiers). For more information, see PostHog's privacy policy.

Sentry (Mobile App Only)

Our iOS app uses Sentry for crash reporting. If the app hits an error, technical details are sent to Sentry so we can fix the bug — device model, OS version, the error message, and a screenshot of the app at the moment of the error. For more information, see Sentry's privacy policy.

Expo (Mobile App Only)

Our iOS app is built with Expo, which provides standard app update functionality. Expo may collect basic crash reports and app update information. For more information, see Expo's privacy policy.

Vercel (Web App Only)

Our web app is hosted on Vercel. Vercel may collect basic server logs including IP addresses for security and performance purposes. For more information, see Vercel's privacy policy.

Data Retention

We do not retain your data. Images are processed in real-time and immediately discarded. We have no database of user scans or personal information.

The only data that persists is your local scan counter and your recent scan results, both stored on your device and never transmitted to us.

Data Security

All data transmitted between your device and our servers is encrypted using HTTPS. We do not store sensitive data, which minimizes security risks.

Children's Privacy

GlutenOrNot is not directed at children under 13 years of age. We do not knowingly collect personal information from children. Since we don't collect personal information from any users, this naturally extends to children as well.

Your Rights

Since we don't collect or store personal data, there is no personal information for us to access, correct, or delete. Your scan counter and recent scan results are stored locally on your device and can be cleared in the app (Recents → Clear) or by uninstalling the app or clearing app data.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

privacy@glutenornot.com

App Store Information

GlutenOrNot is available as a free app. We do not display advertisements or sell user data. The app is provided as-is to help the celiac community.