Privacy Policy

Gut Score is operated by Token Labs Limited ("we", "us"). This policy explains how we handle information when you use the Gut Score iPhone app and the website at gutscore.org.

Account information. If you create an account, we store your email address and authentication data through our identity provider (Supabase Auth). You may also sign in with Apple or Google. Food and usage data. When you log food, we store diary entries, nutrition estimates, processed scores, recipes you create, and optional food photos. Guests keep this data on device until you sign in; signed-in users sync it to our servers. Photo analysis. When you scan food with the camera, images are sent to our servers for AI analysis and may be matched against Open Food Facts. We meter daily scan usage in our database. Images uploaded while signed in are stored in private cloud storage linked to your account. Device and technical data. We collect standard app and web logs (IP address, user agent, request metadata) for security, rate limiting, and debugging. Guest photo-scan limits use a hashed form of your IP address — we do not store raw IPs in product analytics tables. Purchases. iOS subscriptions are processed by Apple and RevenueCat. We receive entitlement status, not your full payment card details. Analytics. With your consent on the website, we use cookies for analytics (PostHog). The iOS app may send product analytics events to the same provider. You can reject non-essential cookies on the web.

We use your information to provide food logging, processed scores, calorie tracking, sync across devices, subscription features, customer support, fraud prevention, and to improve the product. We do not sell your personal information.

Where applicable, we rely on: performance of a contract (providing the app you asked for); legitimate interests (security, product improvement, aggregated analytics); and consent (non-essential cookies on the web). You may withdraw consent at any time.

We use service providers that process data on our behalf, including hosting (Vercel), database and auth (Supabase), AI analysis (OpenAI), food reference data (Open Food Facts), payments (Apple, RevenueCat, Stripe for web billing where applicable), analytics (PostHog), and email delivery where used. They may only use data as instructed by us.

We keep account and diary data while your account is active. You may delete your account from the app, which triggers deletion of server-side data subject to backup retention limits. Guest data on device is removed when you uninstall the app.

Depending on where you live, you may have rights to access, correct, delete, or export your data, and to object to or restrict certain processing. Contact us at support@gutscore.org. You may also complain to your local data protection authority.

Gut Score is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children.

We may update this policy. We will post the new version on this page and update the "Last updated" date.

Questions about privacy: support@gutscore.org.