Hi there! We built GunaFood to help you explore the ancient wisdom of Ayurvedic food classification — Sattvic, Rajasic, and Tamasic. We believe privacy is a fundamental right, and we want to be completely transparent about how we handle your data.
The short version: your personal content stays on your device, usage data is tied to a random device identifier rather than your name or email, and we will never sell your data.
We use PostHog to understand how people use the app. This helps us figure out which features are helpful and where people get stuck. We collect:
This data is tied to a random identifier generated on your device — not to your name, email, or an account. The app has no accounts and never asks for contact details. Because the identifier is device-scoped, this data is pseudonymous rather than anonymous: events from the same device are grouped together, but nothing in them tells us who you are. Like any internet service, PostHog also receives your device’s IP address when the app sends data; it may be used to derive an approximate location (such as country or city), never your precise location.
Starting with app version 1.1.0, we record visual replays of in-app sessions so we can improve the product and debug problems — for example, seeing exactly where a screen misbehaves or where a flow confuses people. Here is what that means in practice:
Session replays are tied to the same device-scoped identifier as our usage analytics, and you can ask us to delete them at any time (see “Your Rights” below).
Nobody likes crashes, and Sentry helps us fix them quickly. When a crash occurs, we receive:
No personal data is included in crash reports.
The following data is stored on your device using AsyncStorage:
We cannot retrieve these on-device records ourselves. If you delete the app, this locally stored data is permanently erased.
We work with a small number of third-party services. Here’s exactly what each one does:
| Service | Purpose | Data Shared |
|---|---|---|
| PostHog | Usage analytics & session replay | Screen views, feature usage, app lifecycle events, device platform & model, OS & app version, masked session recordings, device-scoped identifier |
| Sentry | Crash reporting | Device type, OS version, stack traces |
Our analytics and session replay data are processed by PostHog Inc. on its US cloud (servers located in the United States). We never share your name, email, or contact information with these services — the app doesn’t collect them in the first place.
GunaFood does not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction). The app has no accounts and never asks anyone — child or adult — for a name, email address, or other contact details.
If you are a parent or guardian and believe your child has somehow provided us with personal information, please contact us at the email below and we will promptly address it.
We’re working on new features that will involve additional data handling. We will update this policy before these features launch, but here’s what’s planned:
Photos may be sent to the Google Gemini API for AI-powered food classification. Photos are processed transiently and are not stored by us or by Google beyond what is needed to return a result. You will always be asked for camera permission first.
Barcode data may be sent to the Open Food Facts API to look up food information. These lookups are transient and not stored.
We plan to offer optional accounts via Supabase so you can sync your data across devices. This would involve collecting your email address and storing your meal logs on our servers. Account creation will always be optional.
RevenueCat will manage subscriptions. RevenueCat processes purchase data through the app stores (Apple/Google) — we don’t handle payment information directly.
We will notify you of any changes to this policy and request any new permissions before collecting additional data.
We take reasonable measures to protect any data we process. All analytics, session replay, and crash data are transmitted using industry-standard encryption (TLS/HTTPS). On-device data benefits from your device’s built-in security features.
Depending on where you live, you may have rights regarding your data under laws like GDPR, CCPA, or similar regulations. Here is how they apply to GunaFood:
Uninstalling the app stops all future analytics and session replay collection from your device; data collected before that remains with PostHog until you ask us to delete it.
We may update this policy as we add features or as privacy laws evolve. When we do:
If you have questions, concerns, or just want to say hi:
We aim to respond to all privacy-related inquiries within 7 business days.