Privacy Policy

1. What the app collects

• Account. A sign-in identifier and email from Apple or Google, and a name if you type one or Apple shares your first name.
• Your answers. Country, units, household, budget, what you spend on food now, what makes planning hard, how long planning takes, food styles, diets, allergies, liked proteins, appliances, cooking time, meal schedule, shopping day, blocked foods, pantry staples and stores, including any store you ask Garlo to add.
• Your use of Garlo. Plans, swaps, favourites, notes, ratings and shopping lists.
• Food log. Meals you log, calories, and any target you set.
• Subscription. Your status and transactions.

Garlo uses this to plan your meals, keep your account working, fix problems and improve Garlo. Garlo makes an anonymous account when you first open it, and an Apple or Google account is required after you subscribe.

2. Allergy and diet answers

These answers can reveal something about your health or beliefs. Garlo uses them only to choose your recipes. You can change them in the app at any time, and they go when you delete your account.

3. AI and your photos

Only when you use Fridge Chef or Calorie Snap, and only when those features are on, the photo you take or choose goes to Anthropic, an AI provider, for that one request, with no user ID. Garlo doesn't store the photo. Anthropic deletes these requests within 30 days and does not train its models on them. If a request is flagged for breaking its usage rules, it may keep that request for up to 2 years and related safety scores for up to 7 years, or longer if the law requires it.

4. Who receives data

• Supabase. Database and sign-in. Holds the account data above.
• RevenueCat and Apple. Subscriptions. Your Garlo user ID, your purchase and which onboarding version you saw.
• Apple and Google. Sign-in tokens.
• PostHog. Product analytics. Your Garlo user ID, whether your account is linked, codes and counts for what you do in the app, your country, phone region and App Store storefront as codes, some quiz answers as codes (what makes planning hard, and bands for your food spend and planning time), and basic device details its software adds, such as the app version, iOS version and screen size. If you tell Garlo why you cancelled, only the reason you pick from the list is sent, never anything you type.
• Sentry. Crash reports, with default personal data turned off.
• Anthropic. Reading photos in Fridge Chef and Calorie Snap, when those features are on. A photo, with no user ID.

These services may process data outside your country, including in the United States.

5. What we do not do

Garlo doesn't show ads, track you across other apps or sell your data. There is no tracking prompt because there is no tracking.

6. Keeping and deleting data

Garlo keeps your data until you delete your account in the app, under Profile. Deleting removes your Garlo data and deletes that account's records at RevenueCat and PostHog. If either can't be reached, Garlo keeps only your user ID and tries again. If you signed in with Apple, deleting also revokes Garlo's Apple sign-in. If Apple can't be reached after a few tries, your data is still deleted, and you can remove Garlo from your Apple Account's settings. Garlo sends crash reports to Sentry with no user ID attached, and they are not deleted with your account.

AI usage logs, which never hold a photo, are cleared once they are older than 90 days, and usage counters and records of deleted food log entries once they are older than 30 days, the next time Garlo's cleanup runs. Deleting your account removes them sooner. Deleting your account does not cancel your subscription; cancel it in the App Store.

If you sign out or switch account, the old anonymous subscription record at RevenueCat is not removed. It holds no name or email, only the history of a subscription that moved away. For that old anonymous account, its record at PostHog is not removed either. It holds the usage and quiz codes and device details listed in section 4, with no name or email.

7. Your choices and rights

You can ask to see, correct or delete your data by emailing support@garlo.app. There is no self-serve export, so these requests are answered by hand. You can also complain to your local data regulator.

If you email support@garlo.app, your address and message are kept so a reply can be sent. Email to that address passes through Cloudflare's email service.

8. This website

garlo.app sets no cookies, uses no analytics and has no forms. Its host, Cloudflare, receives what any website host receives, such as IP addresses. This section covers the website only. The sections above cover the app.

9. Children

Garlo is not for children under 13, and we don't knowingly collect their data.

10. Changes

If this policy changes, we will update this page and the date at the top.

11. Contact

George Mapili. Email support@garlo.app.