Token Labs Limited
Privacy Policy
We built Gutty to help you understand processed food and track what you eat. This policy describes what we collect, why we collect it, and the choices you have.
Who we are
Gutty is operated by Token Labs Limited ("we", "us"). This policy explains how we handle information when you use the Gutty iPhone app and the website at guttyai.com.
What we collect
Account information. If you create an account, we store your email address and authentication data through our identity provider (Supabase Auth). You may also sign in with Apple or Google. Food and usage data. When you log food, we store diary entries, nutrition estimates, processed scores, recipes you create, and optional food photos. Guests keep diary data on device until you sign in; signed-in users sync it to our servers. Photo analysis. When you scan food with the camera, images are sent to our servers for AI analysis and may be matched against Open Food Facts. We meter daily scan usage in our database. Images uploaded while signed in are stored in private cloud storage linked to your account. Guest scan photos may also be retained in cloud storage (without an account) so we can review scan quality and misuse — the same retention as signed-in scan covers, with no automatic expiry. Device and technical data. We collect standard app and web logs (IP address, user agent, request metadata) for security, rate limiting, and debugging. Guest photo-scan limits use a hashed form of your IP address — we do not store raw IPs in product analytics tables. Purchases. iOS subscriptions are processed by Apple and RevenueCat. We receive entitlement status, not your full payment card details. Analytics. With your consent on the website, we use cookies for analytics (PostHog). The iOS app may send product analytics events to the same provider. You can reject non-essential cookies on the web.
How we use information
We use your information to provide food logging, processed scores, calorie tracking, sync across devices, subscription features, customer support, fraud prevention, and to improve the product. We do not sell your personal information.
Legal bases (UK / EEA)
Where applicable, we rely on: performance of a contract (providing the app you asked for); legitimate interests (security, product improvement, aggregated analytics); and consent (non-essential cookies on the web). You may withdraw consent at any time.
Sharing
We use service providers that process data on our behalf, including hosting (Vercel), database and auth (Supabase), AI analysis (OpenAI), food reference data (Open Food Facts), payments (Apple, RevenueCat), analytics (PostHog), and email delivery where used. They may only use data as instructed by us.
Retention
We keep account and diary data while your account is active. You may delete your account from the app, which triggers deletion of server-side data subject to backup retention limits. Guest data on device is removed when you uninstall the app.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your data, and to object to or restrict certain processing. Contact us at support@guttyai.com. You may also complain to your local data protection authority.
Children
Gutty is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children.
Changes
We may update this policy. We will post the new version on this page and update the "Last updated" date.
Contact
Questions about privacy: support@guttyai.com.