Glütty Ltd, based in London, is the data controller for the information described here. We run the Glütty app at askglutty.com.

• Your account: email address, name, profile photo if you add one, and sign-in records.
• Your taste: the cuisines and rooms you pick, and places you save.
• Your meals: who was at the table, dishes ordered, shared-dish splits, bill lines and amounts, ratings, recaps and any meal photos you upload.
• Your membership: subscription status, renewal date and payment history. Your card details go straight to our payment provider: we never see or store them.
• Messages you send us: if you use the Talk to us form, we keep your name, email address, the type of enquiry and what you wrote, so we can reply.
• Free menu translation: the menu photos or pages you upload without an account, plus a count of how many you have used today so we can apply the daily limit. These are not tied to an account.
• Technical basics: device and browser information, and error reports when something breaks.

To run your account and dinners, take payment for membership, keep your history and taste read working, prevent abuse, and fix things that go wrong. Our legal grounds are performing our contract with you, our legitimate interest in running and protecting a safe service, and complying with tax and accounting law.

Sharing is the point of Glütty. If you join a meal, the other people at that table can see your name, what you ordered, dishes you share and your part of the bill.

Photos you upload, whether of menus or of the food, may show other people or other diners' orders. Please don't upload photos of people who wouldn't want you to.

When Glütty suggests where your group eats next, those suggestions are built from the ratings people in that group have given. Everyone in the group can see the suggestions and how each person voted.

Anyone can translate a menu free, without signing up, up to a small number of photos or pages a day. Those images are sent to our AI reader to pull out the dishes and explain them, and they are not attached to any account. To keep the free limit fair we count usage against your device and connection rather than your identity.

We use a small number of trusted providers, and only for what they're needed for:

• Stripe: payments, cards, receipts and tax. Stripe holds your card details, not us.
• Lovable Cloud: hosting, database and file storage for your account and dinners.
• AI providers, reached through Lovable's AI gateway: reading menus, explaining dishes and generating dish pictures. Menu text and photos you send are processed for that purpose.
• Perplexity and Firecrawl: looking up restaurants and reading public menu pages. We send restaurant names, addresses and website links, not your personal details.
• Our email provider: sending sign-in and password reset emails, and passing on messages you send through the Talk to us form so we can answer them.
• Your calendar, only if you choose it: tapping add to calendar sends the restaurant, date and time to Google, Outlook or whichever calendar you pick. Nothing is sent unless you tap it.

We do not sell your data. We do not run advertising. We do not share your meals with restaurants or anyone else, unless the law requires it or we need it to defend a legal claim.

Some of our providers process data outside the UK. Where that happens, the transfer is covered by the UK's approved safeguards, such as standard contractual clauses.

• Account and dinner data: for as long as your account exists. If your membership lapses, we keep it so everything is there if you come back.
• If you ask us to delete your account: removed within 90 days, apart from anything we're legally required to hold.
• Payment and invoice records: 6 years, because UK tax law requires it.
• Messages sent through the Talk to us form: up to 24 months, so we have a record of what was asked and answered.
• Free translation uploads: processed and then discarded. The daily count resets each day.
• Error logs: up to 12 months.

Under UK data protection law you can ask us for a copy of your data, correct it, delete it, take it elsewhere, or object to how we use it. Email support@askglutty.com and we'll respond within one month. If you're unhappy with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk.

We use only what the app needs: keeping you signed in, remembering demo mode and holding your place in a meal. No advertising or tracking cookies.

Access to your data is restricted at the database level so only you, and the people at your table, can see what's yours. Payments run through a certified provider. We take this seriously, but no online service is perfectly secure, and we can't promise otherwise.

Glütty is for people aged 18 and over. We don't knowingly collect data from children.

If we change anything meaningful here, we'll update the date at the top and tell members in the app before it takes effect.