Privacy Policy

Last updated: 27 August 2026. This page describes how Gluten Zero handles personal information in the product today. It is not legal advice. Whether the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply to Gluten Zero remains a matter for qualified Australian counsel.

Data we collect

• Profile data — Name (optional), coeliac severity, dietary preferences, allergies (onboarding and settings).
• Scan history — Product barcodes, ingredients analysed, risk results (when cloud sync is enabled).
• Symptom journal — Self-reported symptoms, severity, suspected foods, and notes you enter.
• Analytics — Consent-gated usage events (feature use, scan counts). We do not send chat message content to analytics.
• Community contributions — User-submitted restaurant/product reports (moderated).
• Account & billing — Email and authentication identifiers when you create an account; payment metadata via Stripe.

Label scanning & OCR

• On your device: OCR text extraction runs locally using Tesseract.js before cloud analysis.
• Sent to our servers: Ingredient text, barcode, severity/allergy context, and optionally a label image you choose to upload for cloud vision analysis.
• Stored: Scan results in your account (if sync enabled) and locally on your device. Diagnostic scan traces may be retained server-side for reliability; these are not shown to other users.
• External AI: Ingredient text and optional label images may be processed by third-party vision/text AI providers outside Australia.

AI chat

• When sent: Each assistant message and recent conversation turns are transmitted to our server and may be forwarded to external AI providers.
• What is included: Your text (which may contain health information you type), profile severity/allergies, and conversation history from your current session.
• Redaction: We redact obvious contact details (email addresses and phone numbers) before sending text to external AI providers. Clinically relevant information you include may still be transmitted.
• Persistence: Chat is held in your browser during the session. We do not store a permanent server-side chat log by default. AI memory preferences may be stored if you use features that save them.
• Providers: Google, OpenAI, Anthropic, Mistral, and/or OpenRouter — see AI Transparency.

Storage & security

Data is stored locally on your device and optionally synced to Supabase (encrypted in transit via TLS). Row-level security is intended to limit access to your own records. Live two-user isolation testing on staging remains a release gate. Optional error monitoring (Sentry) may receive crash reports when configured. We do not sell personal health data.

Cross-border processing

AI providers, analytics, error monitoring, and payment processors may process data outside Australia. We minimise data sent and disclose this processing here and in-app.

Retention & deletion

• You may export or delete your account from Settings.
• Account deletion removes active profile, scans, journal, saved items, AI memory, and related records from our live database.
• Limitations: Database backups, replicas, and third-party AI provider logs may retain copies for their own retention periods. Contact privacy@glutenzero.com.au for assistance.

Your rights

You may request access, correction, or deletion by using in-app tools or contacting privacy@glutenzero.com.au.

Security contact

Report security issues to security@glutenzero.com.au.