How we handle your data inside the glüf app

 

This notice covers the glüf mobile app on iOS and Android. It explains what data we hold, why we hold it, and what you can do about it. It's written in plain English. If anything's unclear, email us at privacy@gluf-app.com.

​

Who we are

Glüf Ltd is the data controller responsible for your personal data.

Registered office: 11 Hicks Close, Oxford, OX44 7BN, United Kingdom

Company registered in England and Wales

Privacy contact: privacy@gluf-app.com

​

1. What we collect when you use the glüf app

 

Account information

When you sign up to glüf, we collect your name and email address. If you choose to share more (a profile photo, a bio, location preferences), that's optional and you control it.

​

Reviews and ratings you submit

When you rate a restaurant in the app, we store the rating, your written review if you add one, and the date. Your name (or your chosen display name) appears alongside it so other glüfers know it's a real person.

​

Location data (optional)

If you grant the app location access, we use it to show restaurants near you. You can grant or skip this at any time in your phone's settings. If you skip it, the app still works, you just search manually.

​

How you use the app

We collect basic usage data: which screens you open, which restaurants you view, whether the app crashes. This helps us fix problems and improve the product. We do not sell this data.

​

2. Public restaurant reviews we aggregate from third parties

 

We collect open-source data from various data sources available across the internet for the purposes of providing up-to-date information about gluten-free dining venues in glüf.

We do not actively seek, store or process personal datasets to enhance our ratings.

​

Our lawful basis for this is legitimate interests under UK GDPR Article 6(1)(f). We've carried out a documented Legitimate Interests Assessment which is available on request from privacy@gluf-app.com.

 

In short: we believe people with coeliac disease have a serious need for accurate restaurant information, the reviews were posted publicly with the intent of helping others make restaurant decisions, and our data minimisation pipeline means individual reviewers cannot be identified from anything we hold.

​

If you're a reviewer who'd like to object to your public reviews being aggregated by glüf, email privacy@gluf-app.com and we'll handle it.

3. How we use your data

 

We use the data we collect to:

• Run the glüf app and keep your account working

• Show you restaurants near you (if you've granted location access)

• Display your reviews to other glüfers

• Build and refine our gluten-free ratings

• Fix bugs and improve the product

• Send you transactional emails (password resets, important account or safety notices)

• Send you marketing emails, but only if you've explicitly opted in

• Respond to anything you contact us about

 

We do not sell your personal data. We do not use it for advertising on third-party platforms.

​

4. Who we share your data with

 

We share data only with the service providers we need to run glüf. These include:

• Supabase (database and authentication)

• Hosting and analytics providers necessary to run the app

• Email infrastructure providers (only when we send you an email)

 

Each of these providers is bound by contractual data protection terms. We do not share your data with restaurants, advertisers, or any third party not listed above, unless we are legally required to.

5. Where your data is held

 

Most of our data is held within the UK or European Economic Area. Where data is processed outside the UK or EEA (for example, by a US-based service provider), we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

​

6. How long we keep your data

 

We keep your account data for as long as you have a glüf account. If you delete your account, we delete your personal data within 30 days, except where we are legally required to retain certain records (for example, financial transactions, which we keep for 6 years).

 

Anonymised data (data that no longer identifies you) may be kept indefinitely for analysis and product improvement.

​

7. Your rights

 

Under UK GDPR you have the right to:

• Access the personal data we hold about you

• Correct anything that's wrong

• Delete your data (the "right to erasure")

• Restrict how we use your data

• Object to our processing, especially where we rely on legitimate interests

• Receive your data in a portable format

• Withdraw consent at any time (where consent is our lawful basis)

 

To exercise any of these, email privacy@gluf-app.com. We'll respond within one calendar month.

 

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, but we'd appreciate the chance to put things right first.

​

8. Children

 

The glüf app is not intended for children under 13. We do not knowingly collect data from anyone under 13. If you're a parent or guardian and believe your child has given us their data, email privacy@gluf-app.com and we'll delete it.

​

9. Changes to this notice

 

We may update this notice from time to time. If we make significant changes, we'll let you know through the app or by email. The "last updated" date at the top will always tell you when it was last revised.

​

10. Contact us

 

Privacy questions, data requests, or anything else:

privacy@gluf-app.com

Glüf Ltd

Registered office: 11 Hicks Close, Oxford, OX44 7BN, United Kingdom

Company registered in England and Wales

 

glüf reduces risk. It does not guarantee safety. Always inform restaurant staff of your dietary needs.