Privacy & Cookie Policy

Privacy & Cookie Policy

Gluchol Health Technologies Ltd

Effective Date: March 24, 2026
Last Updated: March 24, 2026

1. Introduction

Gluchol Health Technologies Ltd (“Gluchol”, “we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy.

This Privacy & Cookie Policy explains how we collect, use, store, and protect your information when you use the Gluchol mobile application, website, and related services (the “Services”).

Gluchol is a consumer wellness application designed to provide personalised dietary insights. It is not a medical device and does not provide medical advice.

2. Data Controller

Gluchol Health Technologies Ltd is the data controller responsible for your personal data.

Contact:
Email: Support@Gluchol.com
Address: 124 City Road, London, EC1V 2NX

3. Information We Collect

We collect data in three categories:

3.1 Account Information

  • Email address
  • User ID
  • Authentication credentials

3.2 Core Profile Data (Required)

Used to provide baseline functionality:

  • Age range (not date of birth)
  • Gender
  • Country
  • Height
  • Weight

3.3 Optional Profile Data

Used to improve analysis accuracy:

  • Activity level
  • Eating pattern

Providing this information is optional.

3.4 Health Data (Special Category Data – Optional)

Only collected with your explicit consent:

  • Diabetes status
  • Blood pressure status
  • Cholesterol status
  • Ethnicity
  • Family history indicators
  • Sleep quality
  • Smoking status

This data is used solely to provide personalised insights.

You may withdraw consent at any time.

3.5 Usage Data

  • Food scans and analysis history
  • App interactions
  • Feature usage

3.6 Device & Technical Data

  • Device type
  • Operating system
  • App version
  • IP address (for security and regionalisation)

4. How We Use Your Information

We use your data to:

  • Analyse food and estimate dietary impact
  • Provide personalised insights (if enabled)
  • Generate trends and behavioural insights
  • Improve app performance and features
  • Ensure security and prevent misuse

5. Legal Basis for Processing

We rely on the following lawful bases:

Contractual Necessity

To provide core app functionality.

Legitimate Interests

To improve performance, security, and user experience.

Explicit Consent (Article 9 GDPR)

For processing health-related data.

You can withdraw consent at any time via app settings.

6. Data Minimisation & Optionality

Gluchol is designed to function without sensitive health data.

Providing health information is optional and enhances personalisation but is not required to use the app.

7. Cookies & Similar Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device when you use our website. Similar technologies may be used in the mobile app (such as local storage or SDK identifiers).

7.2 Types of Cookies We Use

Essential Cookies

Required for core functionality such as authentication and security.

Analytics Cookies

Used to understand how users interact with our services and improve performance.

Preference Cookies

Store user preferences and settings.

7.3 Mobile App Tracking

In the app, we may use:

  • Device identifiers
  • Local storage
  • Analytics SDKs

These serve similar purposes to cookies.

7.4 Managing Cookies

You can control cookies through:

  • Browser settings (for website use)
  • Device settings (for mobile app tracking)

You may also opt out of analytics where supported.

8. Data Sharing

We do not sell your personal data.

We may share data with:

Service Providers

Including:

  • Cloud hosting providers
  • Analytics providers

These providers process data under strict contractual obligations.

AI Processing

Food images may be processed by third-party AI systems for food recognition.

No personally identifiable or health data is shared with these systems.

9. International Data Transfers

Your data may be processed outside the UK or European Economic Area.

Where this occurs, we ensure appropriate safeguards, such as:

  • Standard Contractual Clauses
  • Equivalent data protection measures

10. Data Retention

We retain your data only as long as necessary:

  • Active accounts: retained while in use
  • Inactive accounts: deleted or anonymised after 24 months
  • Health data: deleted upon withdrawal of consent

11. Data Security

We implement appropriate technical and organisational measures, including:

  • Encryption in transit and at rest
  • Access controls and authentication
  • Audit logging and monitoring

12. Your Rights

Under applicable data protection laws, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Data portability
  • Withdraw consent

To exercise your rights, contact us at:
Support@Gluchol.com

13. Withdrawal of Consent

You can withdraw consent for health data at any time via app settings.

When you withdraw consent:

  • Your health profile data will be deleted
  • Personalised insights will be disabled

14. Children

Gluchol is not intended for individuals under the age of 16.

We do not knowingly collect data from children.

15. Third-Party Links

Our services may contain links to third-party websites or services.

We are not responsible for their privacy practices.

16. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time.

Significant changes will be communicated via the app or website.

17. Contact Us

For privacy-related enquiries:

Gluchol Health Technologies Ltd
Email: Support@Gluchol.com
Address: 124 City Road, London, EC1V 2NX