Privacy Policy
Last updated: 23 May 2026
Gluten, Not For Me (“the app”, “we”, “us”) is published by Adrien Pennetier. This policy explains exactly what we collect, what we don't, and what we do with it. We've tried to write it in plain English.
1. The short version
- We do not run any server. We do not have a user database.
- Your scan history stays on your device, mirrored to your iCloud account so it survives a reinstall.
- The app uses Apple's Sign In with Apple — we never see your real Apple ID password.
- Product data is fetched from the public Open Food Facts database. We send them only the barcode you scan.
- We do not sell, share, or rent your data. There are no analytics SDKs and no ad networks in the app.
2. Data we receive when you sign in
The app uses Sign In with Apple. When you authenticate, Apple gives us:
- A stable, anonymous user identifier (e.g.
000123.abcdef…). This identifier only works inside this app — Apple does not share it with anyone else. - Your name only on the first sign-in, and only if you choose to share it. You can use Apple's hide-my-email relay.
- An email address, optionally relayed by Apple so we never see your real one.
This information is stored on your device only. It is not transmitted to any server we control.
3. Data we store on your device
- Your last 100 product scans (barcode, product name, ingredients, gluten verdict).
- Your free-scan counter and subscription status.
- Your display name and email (as provided by Apple at sign-in).
4. Data stored in your iCloud
To make sure your scan history survives an app reinstall or a device change, we mirror a JSON copy into Apple's iCloud Key-Value Storage service, tied to your Apple ID. We do not host this data — it lives in your personal iCloud, on Apple's servers.
If you sign out of iCloud or disable iCloud for Gluten, Not For Me in iOS Settings, the mirror stops. The local copy on the device continues to work.
5. Data sent to third parties
Open Food Facts
When you scan a barcode, we make a single anonymous HTTPS request to world.openfoodfacts.org with that barcode to fetch ingredient information. The request contains no user identifier and no IP address beyond what is standard with any HTTP request. Open Food Facts is a non-profit, open-data project — review their own legal & privacy page.
Apple StoreKit
When you subscribe to Premium, the payment is processed entirely by Apple via StoreKit. We never see your payment method, billing address, or any financial information. Apple only tells our app whether the subscription is active or not.
6. What we never collect
- No location data.
- No contacts, photos, microphone, or other sensitive permissions outside the camera (which is used only locally to read barcodes — frames never leave the device).
- No advertising identifiers.
- No third-party analytics or tracking SDKs.
7. Children
The app is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has used the app under false pretences, contact us and we will help delete any local data through the in-app sign-out and clear-history features.
8. Your rights (GDPR)
Because we don't run a server, there is no remote profile to access, rectify, or delete. You can fully exercise your GDPR rights from within the app:
- Right of access: open the History tab to see everything we know about you.
- Right to erasure: delete the app from your device, or tap “Clear History” inside the app, and revoke the Sign In with Apple grant from your Apple ID settings.
- Right to portability: your scan history is plain JSON in iCloud Key-Value Storage — you can export it via macOS Console > iCloud Logs.
For anything not covered by the above, contact penra.contact@gmail.com.
9. Medical disclaimer
Gluten detection is performed by checking the Open Food Facts ingredient list and allergen tags against a list of gluten-containing grains. It is a useful aid, but it is not a substitute for medical advice or for reading product labels yourself. We are not responsible for misinformation in the underlying Open Food Facts database. Always double-check before consuming a product if you have severe celiac disease.
10. Changes
If we change this policy, we'll bump the “Last updated” date at the top. If the change is material, we'll show a banner inside the app the next time you open it.
11. Contact
Adrien Pennetier — penra.contact@gmail.com