GastroLens

PRIVACY POLICY

GastroLens

Last Updated: [Insert Date]

1. Introduction

Welcome to GastroLens ("GastroLens", "we", "us", or "our").

GastroLens is an AI-powered mobile application that allows users to upload images of dishes in order to receive structured culinary preparation guidance, techniques, and plating suggestions.

This Privacy Policy explains how we collect, use, process, store, and protect your information when you use the GastroLens mobile application (the "App").

[Your Legal Name] acts as the Data Controller for the purposes of applicable data protection laws.

By using GastroLens, you agree to the practices described in this Privacy Policy.

Developer:
[Your Legal Name], Autónomo
Spain
Contact: [Your Support Email]

2. Information We Collect

We collect only the information necessary to operate and improve GastroLens.

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Authentication provider data (Email, Apple, or Google sign-in)
  • A unique user identifier

We do not collect passwords directly when using third-party authentication providers such as Apple or Google.

2.2 Uploaded Images

When you use GastroLens:

  • You upload images of dishes.
  • These images are stored securely.
  • The associated AI-generated analysis results are stored together with the image.

You may delete individual scans at any time within the app.

2.3 AI-Generated Content

The structured culinary analysis generated by the AI (including dish identification, preparation steps, techniques, variations, and nutrition estimates) is stored in your account unless deleted by you.

2.4 Subscription Information

GastroLens offers a monthly subscription managed through Apple In-App Purchases and RevenueCat.

We do not collect or store your payment card details. Payment processing is handled by Apple.

We may store subscription status information necessary to determine access to premium features.

2.5 Technical Information

For operational and security purposes, we may collect:

  • IP address
  • Device type
  • Operating system version
  • App usage timestamps
  • Basic error logs

We do not use third-party advertising or behavioral tracking SDKs.

3. How We Use Your Information

We use collected information to:

  • Provide AI-based culinary analysis
  • Store and display your scans
  • Manage your subscription access
  • Authenticate your account
  • Improve service reliability
  • Ensure security and prevent misuse

We do not sell your personal data.

3A. Legal Basis for Processing (EU Users)

Where EU data protection laws apply, we rely on the following legal bases to process your information:

  • Processing necessary for the performance of a contract, including providing the App and its core features.
  • Legitimate interests, including security, fraud prevention, and service improvement.
  • Compliance with legal obligations, including billing, tax, and regulatory requirements.
  • Consent, where applicable, such as when you choose to use third-party authentication providers.

4. AI Processing Disclosure

GastroLens uses third-party AI service providers, including OpenAI, to process uploaded images and generate culinary guidance.

When you upload an image:

  • The image is transmitted securely to our AI provider.
  • The AI system analyzes the image.
  • A structured response is generated and returned.

Processing may occur in the United States or other jurisdictions where our service providers operate.

AI-generated results are automated outputs and may not be accurate, complete, or suitable for all situations.

5. Data Storage

We use Supabase as our cloud infrastructure provider for:

  • Authentication
  • Database storage
  • Secure image storage

All data is transmitted using encrypted connections (HTTPS).

Uploaded images and generated results are stored securely until deleted by the user or upon account deletion.

6. Data Retention

We retain your account data and stored scans while your account remains active.

You may:

  • Delete individual scans at any time
  • Delete your entire account from within the app

When you delete your account:

  • All associated images
  • All AI-generated results
  • All stored preferences
  • All subscription records linked to your account

are permanently deleted from our database, except where limited retention is required for legal or billing compliance.

We do not automatically delete inactive accounts.

7. Account Deletion

You may delete your account at any time from within the application settings.

Account deletion is permanent and cannot be reversed.

8. Subscription & Payments

Subscriptions are managed through Apple In-App Purchases.

  • Subscriptions renew automatically unless canceled through Apple.
  • Refunds are handled by Apple according to Apple's policies.
  • GastroLens does not process or store payment card information.

RevenueCat is used to manage subscription status.

9. International Data Transfers

Because we use global cloud infrastructure and AI providers, your information may be processed outside your country of residence, including in the United States.

We take reasonable measures to ensure appropriate data protection safeguards are in place.

10. Security

We implement reasonable technical and organizational safeguards to protect your data, including:

  • Encrypted transmission (HTTPS)
  • Access control mechanisms
  • Restricted administrative access

However, no digital system can guarantee absolute security.

11. Nutrition & Professional Disclaimer

Any nutrition information provided is an estimate only.

GastroLens does not provide:

  • Medical advice
  • Dietary advice
  • Allergy guarantees
  • Professional culinary certification

Always use your own judgment when preparing food.

12. Children's Privacy

GastroLens is not intended for children under the age of 13.

We do not knowingly collect personal data from children.

13. Your Rights Under Applicable Data Protection Law

Depending on your location and applicable law, you may have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object (where applicable)
  • Right to withdraw consent (where processing is based on consent)
  • Right to lodge a complaint with a supervisory authority in the EU

You can exercise your rights by contacting [Your Support Email].

14. Changes to This Policy

We may update this Privacy Policy from time to time.

If changes are significant, we will update the "Last Updated" date and, where appropriate, notify users within the app.

15. Contact

If you have questions about this Privacy Policy or your data, contact:

[Your Support Email]