This Privacy Policy explains what personal data Glutenique collects, why we collect it, how it is used and protected, and what rights you have over your data. Glutenique is a product operated by Roman Creative Studios, a sole trader (paušalni obrt) registered in Croatia, European Union.
1. Who We Are
Glutenique is a gluten-free recipe, meal planning, and shopping list application developed and operated by Roman Creative Studios, a sole trader owned by Laura Roman, based in Croatia (EU). References to "we", "us", or "our" in this policy refer to Glutenique. Roman Creative Studios acts as the data controller for the personal data processed through Glutenique.
Contact: glutenique@gmail.com
2. Data We Collect
We collect only what is necessary to provide the app's functionality:
- Account information: first name, last name, and email address when you register.
- Password: stored as a one-way hash — we cannot read your password.
- Ingredient preferences: ingredients you choose to avoid, selected from a predefined list during onboarding or settings. This is used solely to personalise recipe display (e.g. flagging ingredients you prefer to avoid). It is not medical or allergy data.
- Subscription status: whether you are on a free, trial, or paid plan. Payment is handled entirely by Google Play Billing — we do not receive or store payment card details.
- Push notification token: a device token used to deliver optional notifications (meal plan reminders, new recipe alerts) if you opt in. You can opt in or out of push notifications at any time through your device or app settings.
- App data: data you actively create and store within the app (such as saved recipes, meal plans, and shopping lists). This data is used only to provide core app functionality and is not used for analytics, advertising, or behavioural tracking. We do not track your activity across other apps or services.
We do not collect your precise location, device contacts, microphone, camera, or any sensitive personal data.
3. How We Use Your Data
- To create and manage your account.
- To personalise your recipe feed based on ingredient preferences.
- To manage your subscription and free trial eligibility.
- To send push notifications you have opted into.
- To maintain app functionality (meal plans, shopping lists, cookbooks).
- To prevent abuse of the free trial (see Account Deletion section).
We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.
4. Third-Party Services
Glutenique uses the following third-party services to operate:
- Google Firebase (Cloud Messaging): used to deliver push notifications. Firebase may process your device push token. See Firebase Privacy.
- Google Play Billing: all subscription purchases are processed by Google Play. We receive only subscription status (active/expired), not payment details. See Google Privacy Policy.
- Cloudinary: used to host recipe photographs. Only our own recipe images are stored — no user-generated content is uploaded to Cloudinary. See Cloudinary Privacy Policy.
- RevenueCat: used to manage in-app subscription status. RevenueCat receives your app user ID and subscription transaction data from Google Play. We do not share payment details with RevenueCat. See RevenueCat Privacy Policy.
- Sentry: used for error monitoring and crash reporting on our backend infrastructure. Sentry may process technical data such as stack traces, request metadata, and anonymised user identifiers when errors occur. We have configured Sentry with
send_default_pii=False to minimise personal data transmission. See Sentry Privacy Policy.
These services are bound by their own privacy policies and data processing terms. We use third-party providers that offer GDPR-related protections and data processing agreements where applicable. We only share the minimum data necessary for these services to function and do not use third-party services for advertising or profiling.
5. Legal Basis for Processing (GDPR)
As a Croatian (EU) operator, we process your data on the following legal bases:
- Contract performance: account data, subscription status, and core app functionality.
- Consent: push notifications (you may withdraw consent at any time in app settings or device notification settings).
- Legitimate interest: retaining your email for 90 days after account deletion to prevent free trial abuse.
6. Data Retention
We retain your data for as long as your account is active. If you delete your account:
- Your name, password, preferences, meal plans, cookbooks, and shopping lists are deleted or anonymised within a reasonable technical timeframe following account deletion.
- Your email address is retained for up to 90 days solely to prevent abuse of the free trial period.
- After the 90-day retention period, your email is permanently and irreversibly deleted from our systems.
7. Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and data (via in-app account deletion or by emailing us).
- Withdraw consent for push notifications at any time.
- Data portability — request an export of your data.
- Lodge a complaint with the Croatian Data Protection Authority (AZOP) at azop.hr.
To exercise any of these rights, contact us at glutenique@gmail.com.
8. Data Security
We implement reasonable technical and organisational measures to protect your data, including password hashing, HTTPS-only communication, and access controls. No system is 100% secure, and we cannot guarantee absolute security.
9. Children's Privacy
Glutenique is not intended for children under the age of 16. We do not knowingly collect personal data from children. If we become aware that personal data has been collected from a child without appropriate consent, we will delete it promptly. If you believe that a child has provided us with personal data, please contact us.
10. Changes to This Policy
We may update this Privacy Policy as the app evolves. Material changes will be communicated via in-app notice or email. The effective date at the top of this page will always reflect the latest version.
Continued use of the app after any changes constitutes your acceptance of the updated policy.
11. Contact
For any privacy-related questions or requests: