Privacy Policy
Last updated June 20, 2026
Privacy Policy
Last updated: June 20, 2026
Effective Date: June 20, 2026
1. Introduction
This Privacy Policy ("Policy") explains how Banetry ("Guac," "we," "us," or "our") collects, uses, shares, and protects personal information in connection with the Guac mobile application (the "App"), our marketing website at banetry.com, and related services (together, the "Service").
Guac is an AI-powered clean-eating and diet "buddy." You scan a food by photo, barcode, or restaurant menu, and Guac (an avocado mascot) offers an opinion on how clean versus processed a food appears to be, and whether it seems to fit the way of eating you have chosen (for example, keto, paleo, vegan, mediterranean, high-protein, low-sugar, or "eat cleaner"). These assessments are generated by AI based only on the ingredients and other data available for that item. Guac is gamified (a "gains" bar, streaks) and is offered through auto-renewable subscriptions. Guac is not a calorie counter.
This Policy works together with our other documents. Please also read our Terms of Service, which govern your use of the Service and include important disclaimers (including that Guac's assessments are AI opinions and not medical advice), and, where applicable, our Subscription Terms. Capitalized terms not defined here have the meanings given in the Terms of Service.
By using the Service, you acknowledge the practices described in this Policy.
2. Who We Are (Data Controller)
For the purposes of the EU and UK General Data Protection Regulation ("GDPR") and similar laws, the data controller of your personal information is:
Banetry Email: help@banetry.com Website: banetry.com
If you have any questions about this Policy or our data practices, or if you wish to exercise your rights, contact us using the details in Section 16 (Contact).
3. Information We Collect
We aim to collect only what we need to run the Service. The categories of information we collect are described below.
3.1 Information you provide to us
- Food inputs you submit. The food photos, barcodes, and typed food names or descriptions you submit so Guac can analyze them. Photos may incidentally include other content captured by your camera; please avoid submitting images of people, documents, or anything you do not want analyzed.
- Account information (optional). If you create an account using Sign in with Apple or Sign in with Google, we receive a user identifier and, depending on your choices and the provider, your name and email address (or an Apple private-relay email that forwards to you). You can use much of the Service without creating an account.
- Communications. If you contact us for support or feedback, we receive the information you choose to share (such as your message and contact details).
3.2 Information collected automatically
- Random device identifier. We generate a random identifier for your installation so the Service can function and so we can understand usage. This is not your Apple ID and not the Apple IDFA (advertising identifier).
- Product analytics events. Information about how you interact with the App, such as features used, screens viewed, scans performed, streak and "gains" activity, and timestamps. These events help us understand and improve the Service.
- Crash and diagnostic data. Technical information such as crash logs, error reports, performance data, app version, device model, and operating-system version.
3.3 Subscription and transaction information
- Subscription status and transaction information. When you purchase an auto-renewable subscription, we receive subscription and transaction details (such as the product purchased, purchase and renewal dates, and entitlement/subscription status) from Apple and our subscription-management provider, RevenueCat.
- No payment-card data. All payments are processed by Apple through the App Store. We do not receive or store your credit-card or payment-card numbers.
We do not intentionally collect special categories of data. Note, however, that information about the foods you scan and the way of eating you select may indirectly reflect dietary preferences or choices. We treat this information with care and use it only as described in this Policy.
4. How and Why We Use Your Information
We use personal information only for the specific purposes below. For each purpose we also identify our GDPR legal basis (see Section 8 for more on legal bases).
| # | Purpose / Case | What it covers | GDPR Legal Basis |
|---|---|---|---|
| 1 | Provide the Service | Analyze your food photos, barcodes, and typed foods; generate Guac's opinion and "gains"/streak features; deliver core functionality. | Performance of a contract; legitimate interests |
| 2 | Run and secure accounts | Create and manage your account; authenticate you via Sign in with Apple/Google; remember your chosen way of eating and settings. | Performance of a contract; legitimate interests |
| 3 | Process payments and subscriptions | Activate, renew, restore, and manage your subscription; confirm entitlements; handle billing issues. | Performance of a contract; legal obligation |
| 4 | Security and anti-abuse | Protect the Service against fraud, abuse, spam, rate-limit evasion, and unauthorized access; enforce our Terms. | Legitimate interests; legal obligation |
| 5 | Improve the product | Understand usage through analytics; diagnose crashes; debug, test, and improve features and accuracy. | Legitimate interests; consent where required |
| 6 | Comply with the law | Meet legal, tax, accounting, and regulatory obligations; respond to lawful requests. | Legal obligation |
| 7 | Protect rights and safety | Protect the rights, property, and safety of you, us, and others; investigate and address violations. | Legitimate interests; legal obligation |
| 8 | Business transfer | Evaluate, negotiate, or complete a sale, merger, financing, reorganization, or asset transfer (see Section 6). | Legitimate interests |
| 9 | With your consent | Any other use we describe to you and for which you give consent (for example, certain communications). | Consent |
We do not use your personal information for advertising, we show no ads, and we do not use data brokers.
5. AI Processing of Food Inputs
To produce Guac's assessment, the food inputs you submit (photos, barcodes, and typed foods) are sent to Google for analysis using Google's Gemini AI models. The following safeguards apply:
- Not stored on our servers. Your food photos and inputs are sent for analysis and are not stored on our servers.
- Not used to train AI models. Your food photos and inputs are not used to train AI models.
- Query-only caching. To make generic lookups faster and cheaper, we may cache generic food or barcode lookup results keyed only to the query (for example, a barcode number or a food name). This cache is not linked to you, your device, or your account.
- Reference data. To enrich barcode and food lookups, we may use public food databases, including Open Food Facts and USDA FoodData Central. These lookups use the food query, not your identity.
Important — Guac's assessments are AI opinions, not statements of fact. Guac's output is an automated opinion generated from the ingredients and data available for an item. It is not a statement of fact and makes no factual claim, accusation, or disparagement about any brand, product, restaurant, manufacturer, or company. AI can be wrong, incomplete, or out of date. Guac is not medical advice, not a medical device, and has not been evaluated by the U.S. Food and Drug Administration (FDA). You are responsible for your own dietary and health decisions and assume the risks of relying on the Service. See the Terms of Service for the full disclaimers.
6. How We Share Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in the limited circumstances below.
6.1 Service providers and sub-processors
We use trusted third parties to operate the Service. Each acts on our behalf or in its own role as described, and is bound by appropriate contractual obligations. Our sub-processors and key third parties are:
| Sub-processor / Provider | Role | What it handles |
|---|---|---|
| Apple | Platform, payments, authentication | App distribution; App Store payment processing; subscription/transaction info; Sign in with Apple. |
| AI analysis and authentication | Gemini AI analysis of food inputs; Sign in with Google. | |
| Supabase | Backend, database, authentication, hosting | Stores account, settings, analytics, crash data, and query-only caches; powers backend functions and auth. |
| RevenueCat | Subscription management | Manages and reconciles subscription status and entitlements (no card data). |
| Open Food Facts | Public food data | Public ingredient/product reference data for barcode and food lookups. |
| USDA FoodData Central | Public food data | U.S. government public food/nutrition reference data for lookups. |
We may update this list as our providers change; the current version of this Policy reflects our then-current sub-processors.
6.2 Legal, safety, and compliance
We may disclose information if we reasonably believe it is necessary to (a) comply with applicable law, regulation, legal process, or a lawful governmental request; (b) enforce our Terms and other agreements; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of you, us, or others.
6.3 Business transfer
If we are involved in a sale, merger, acquisition, financing, reorganization, bankruptcy, dissolution, or any other transfer of all or part of our business or assets, your personal information may be transferred or disclosed as part of that transaction or the related due diligence. We will require any acquirer or successor to honor the commitments in this Policy or provide you notice and choices as required by law.
6.4 With your consent or at your direction
We may share information for any other purpose disclosed to you at the time and with your consent or at your direction.
7. Cookies and the Website
Our marketing website at banetry.com may use cookies and similar technologies for basic functionality and, where applicable, analytics. The Guac mobile app itself relies on the random device identifier described in Section 3, not on advertising cookies, and serves no ads.
8. Legal Bases for Processing (GDPR / UK GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information only when we have a valid legal basis. Our bases are described in the table in Section 4.
9. Data Retention
We keep personal information only as long as necessary for the purposes in this Policy, then delete or anonymize it. Food photos/inputs are not stored on our servers; query-only caches are kept as needed and are not linked to you; account, analytics, and subscription records are kept as needed for operations, support, and legal/financial recordkeeping.
10. Security
We use technical and organizational measures (access controls, authentication, encryption in transit, rate limiting, and reputable infrastructure) to protect personal information. No system is completely secure, and we cannot guarantee absolute security. Keep your sign-in credentials and device secure.
11. International Data Transfers
We and our sub-processors may process your information in countries other than yours, including the United States. Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable).
12. Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, to data portability, and to withdraw consent. California and certain other U.S. state residents have rights to know/access, delete, and correct personal information, and to opt out of sale/sharing. We do not sell or share your personal information (as those terms are defined under California law), so there is nothing to opt out of. We will not discriminate against you for exercising any right.
To exercise a right, contact help@banetry.com. We may need to verify your identity, and we will respond within the timeframes required by law. You may also lodge a complaint with your local data-protection authority.
13. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us at help@banetry.com and we will take reasonable steps to delete it.
14. Third-Party Services and Links
The Service relies on third parties (Apple, Google, Supabase, RevenueCat) and may link to third-party services. Their privacy practices are governed by their own policies.
15. Changes to This Policy
We may update this Policy from time to time. When we make material changes, we will update the Effective Date and, where appropriate, provide additional notice. Continued use after an update means you acknowledge the revised Policy.
16. Contact Us
Questions, concerns, or requests? Contact us at:
Banetry Email: help@banetry.com Website: banetry.com
This Privacy Policy should be read together with the Guac Terms of Service and Subscription Terms.
Questions? help@banetry.com