Privacy Policy

1. Introduction

Welcome to GlucoForager ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

Personal Information

When you use GlucoForager, we may collect:

• Email address (if you choose to create an account)
• Name (optional)
• Recipe preferences and saved recipes

Health Information

Because GlucoForager is built around diabetes-friendly nutrition, we also collect health-related information you choose to provide, including:

• Diabetes type / status
• Dietary preferences, restrictions, and food allergen or exclusion choices

This is treated as sensitive health information under applicable law (see Sections 9–11 for the specific rights and protections that apply to it).

Automatically Collected Information

We may automatically collect:

• Device information (type, operating system, unique device identifiers)
• Push notification token, if you enable notifications
• Usage data (features used, time spent in app)
• App performance data (crash reports, errors)

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Personalize your experience with diabetes-friendly recipe suggestions
• Improve our AI algorithms and app functionality
• Communicate with you about updates, features, and offers
• Ensure app security and prevent fraud
• Comply with legal obligations

4. AI & Photo Processing

When you use our AI food recognition or recipe generation features:

• Food photos and recipe text are processed by our AI service providers: OpenAI, Google Gemini, DeepSeek, and Runware (for AI-generated recipe images)
• Food photos are used to detect ingredients and are not retained on our servers once that processing step completes
• Only the detected ingredients, not the photo itself, are used to generate recipe suggestions

5. Data Sharing & Third Parties

We do not sell your personal information. We share information only with service providers who help us operate GlucoForager, including:

• Subscription billing: RevenueCat, and the Apple App Store / Google Play, to process and manage your subscription
• AI processing: OpenAI, Google Gemini, DeepSeek, and Runware, as described in Section 4
• Email delivery: Resend, to send account and transactional emails

Each of these providers processes information only as needed to perform their service for us.

6. Data Retention

We retain your account information for as long as your account is active. If you request deletion, we delete your account and associated personal data within 30 days as described in Section 14, unless we are required to retain certain information for legal, security, or fraud-prevention purposes.

Food photos submitted for AI recognition are not retained after processing, as described in Section 4.

7. International Data Transfers

Our AI and service providers are based in the United States. If you are located in the European Economic Area, the United Kingdom, or elsewhere outside the US, using GlucoForager means your information may be transferred to and processed in the US. We rely on the safeguards each provider makes available for these transfers.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, please note that no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights (GDPR & UK GDPR)

Under the General Data Protection Regulation (GDPR) and UK GDPR, you have the right to:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request restriction of processing
• Right to data portability: Request transfer of your data
• Right to object: Object to processing of your data

We process most account information under our contract with you (to provide the app) and to meet legal obligations. Health information described in Section 2 is processed only on the basis of your explicit consent, which you may withdraw at any time by contacting us or deleting your account.

To exercise these rights, contact us at hello@glucoforager.com. We will respond within one month.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Right to know: Request what personal information we have collected about you
• Right to delete: Request deletion of your personal information
• Right to correct: Request correction of inaccurate personal information
• Right to opt out of sale or sharing: We do not sell or share your personal information
• Right to limit use of sensitive personal information: Your health information (Section 2) is sensitive personal information under the CPRA; we use it only to provide the app's core features

We will not discriminate against you for exercising any of these rights. To exercise them, contact us at hello@glucoforager.com.

11. Washington Consumer Health Data

Washington's My Health My Data Act treats certain health-related information as "consumer health data." Diabetes type/status and related dietary and food-exclusion preferences described in Section 2 fall into this category.

• We collect and use this data only as needed to provide GlucoForager's diabetes-friendly recipe features
• We do not sell consumer health data
• We do not use consumer health data for geofenced advertising
• You may withdraw your consent to our collection or use of this data at any time by contacting us or deleting your account (Section 14)

To exercise these rights, contact us at hello@glucoforager.com.

12. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

14. Account Deletion

You can request deletion of your account and associated personal data at any time.

• Email us at hello@glucoforager.com with the subject "Delete My Account".
• Include the email address associated with your GlucoForager account.

We will delete your account and associated personal data within 30 days, unless we are required to retain certain information for legal, security, or fraud-prevention purposes.

15. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

Email: hello@glucoforager.com