Privacy Policy

What We Don't Collect

GutGuard does not collect, store, or share:

• Your name, email, or any personal identity
• Your location
• Advertising IDs or cross-app tracking identifiers

There are no user accounts. You never sign in. We have no way to identify who you are.

What Happens When You Scan

When you scan an ingredient label, the following is sent to our server for analysis:

• Ingredient data - the text, photo, or URL you provide
• Session identifier - a random ID generated on your device, used only to count scans for your subscription tier
• Your profile preferences - your selected goal, sensitivities, and avoidances, so the analysis can be personalised

This data is processed in real time to generate your analysis. A record of each scan (the ingredients submitted, the analysis result, and your anonymous session ID) is stored on our server so we can improve analysis quality over time. If you submit a photo, the image is also saved. These records are not linked to any personal identity.

Third-Party Processing

To analyse ingredients, your scan data is sent from our server to Anthropic's Claude API, an AI language model. This means Anthropic processes the ingredient text (or image) you submit. Anthropic's API usage policy states that data sent via their API is not used to train their models. You can read Anthropic's privacy policy for full details.

Analytics and Crash Reporting

GutGuard collects anonymous product analytics to understand how the app is used and to improve the experience. This data is aggregated and cannot be used to identify individual users. No personal data is collected.

We also collect crash diagnostics to fix bugs and improve stability. Crash data is not linked to your identity.

We do not use advertising networks, behavioural tracking, or any tools that build individual user profiles.

Data Retention

Scan records stored on our server are retained indefinitely to improve analysis quality. These records contain only the ingredients submitted, the analysis result, and an anonymous session identifier. They are not linked to any personal identity and cannot be traced back to you.

You can request deletion of data associated with your session by contacting us at the email address below.

Legal Basis for Processing

We process scan data and anonymous analytics under the legitimate interest basis (UK GDPR Article 6(1)(f)) to operate and improve GutGuard. We have assessed that this processing does not override your rights, given that no personal data is collected and all records are anonymous.

On-Device Storage

Your analysis history, profile preferences, and subscription status are stored locally on your device. This data is not synced to any cloud service. Deleting the app removes all local data.

Subscriptions

GutGuard offers subscriptions through Apple's App Store, including an annual plan with a free trial. All payment processing is handled entirely by Apple. We do not receive or store any payment information, billing details, or Apple ID data.

Camera and Photo Library

GutGuard requests access to your camera and photo library solely to photograph or select ingredient labels for analysis. Photos are sent to our server for processing and may be stored alongside the analysis record as described above.

Your Rights

Under UK GDPR, you have the right to request access to, correction of, or deletion of any data we hold. Since we do not collect personal identifiers, the only data associated with you is your anonymous session ID. If you contact us with your session ID, we can delete the corresponding scan records.

Children's Privacy

GutGuard is not directed at children under 13. We do not knowingly collect any information from children.

Changes to This Policy

If we make material changes to this policy, we will update the date at the top of this page. Since we don't collect contact information, we cannot notify you directly. We recommend checking back occasionally.

Contact

Questions about this policy? Get in touch at hom@recursivelycurious.co.uk.