GlutenTrace is a gluten-scanning app made by the family behind Renmel. This policy explains what information the app collects, why, and what rights you have.
Data controller
GlutenTrace is operated by Daniel Nygaard Rasmussen as a private individual. Questions about this policy or your data can be sent to danielnygaardrasmussen@outlook.dk.
What we collect
GlutenTrace does not require an account to use the core scanning features. Your selected condition (coeliac disease / wheat allergy / gluten sensitivity) and your scan history are stored locally on your device and are never sent to our servers unless you choose to submit a product for review.
Camera access
The camera is used only to scan barcodes. We do not store, transmit, or analyze camera images beyond reading the barcode itself.
Product lookups
When you scan a barcode, the code is sent to Open Food Facts (and, where enabled, other food-database providers such as USDA FoodData Central) to retrieve product information. See their respective privacy policies for how they handle this data.
Scanned barcodes
When you scan a product, the app sends the barcode and whether the product was found to our server. We store only the barcode, the result, the date, and how many times it was scanned that day. We do not store who scanned it, no device ID, no location and no time of day. We use this to see which products are in demand so we can add them first, and to keep a copy of the product's ingredient list from Open Food Facts, so the app can answer even when Open Food Facts cannot be reached. The copy is Open Food Facts data (ODbL license).
Report a changed package
If you report that a package no longer matches the answer, the app sends only the barcode and we count reports per day. No user or device ID is sent.
Product submissions
If you submit a product for review, the barcode, notes, and any photos you provide are sent to our database and may be reviewed by our team before being published.
Subscriptions
Subscription purchases are processed by Apple via the App Store, using RevenueCat to manage subscription status. We do not receive or store your payment card details.
Data sharing
We do not sell your data. We use trusted service providers to operate the app - Apple (payments), RevenueCat (subscription management), and Supabase (product submissions). Some providers may process data outside the EU/EEA, in which case this happens under valid transfer safeguards such as the EU-US Data Privacy Framework or the EU's Standard Contractual Clauses.
Your rights (GDPR)
If you are in the EU/EEA, you have the right to access, correct, or delete your data, object to or restrict processing, request data portability, and withdraw consent at any time. Contact us at the email above. You can also lodge a complaint with your local data protection authority (in Denmark: datatilsynet.dk).
Changes
We may update this policy from time to time. The latest version will always be available at this address.
Related
See also our Terms of Use and Medical Disclaimer.