GloupsPrivacy Policy
Last updated 6 November 2026
1. Who we are
This policy explains how Gloups handles your information when you use the Gloups mobile app and the website at gloups.app. Gloups is published by Maxime Bourmaud, a sole trader (entrepreneur individuel) registered in France under SIREN 991 631 607 and based in La Garnache, who is the data controller.
Gloups has no accounts, emails, or passwords. Your phone is identified by a random number created the first time you open the app. The app asks for your explicit consent to health data processing before you set it up, and we record the date and version of that consent so we can show it was given.
2. What we collect
| Information | Examples | When |
|---|---|---|
| Profile | Sex, height, weight, birth year, activity level, goal, target weight | When you set up the app or edit your profile |
| Food preferences | Diet, allergies, dislikes, usual portions | When you tell the app or the coach |
| Meals | Text or photo of a meal, foods recognised, quantities, nutritional values, barcodes scanned | When you log a meal |
| Water and weight | Amounts, weigh-ins, dates | When you log them |
| Apple Health data | Read: active calories, steps, weight, height, sex, date of birth. Written: meal calories, protein, carbohydrates, fat, and weigh-ins | Only for the types you allow in Apple Health |
| Coach conversations | Your messages and the coach's replies | When you talk to the coach |
| Subscription status | Whether a subscription is active. We never see your payment method | If you subscribe through the App Store |
| Technical data | IP address, request logs, anonymous app events, crash reports | Automatically, when the app reaches the server |
3. Where your information is stored
Your information is stored on a private server in France, run by the publisher of Gloups. An encrypted copy of the backups is kept in Cloudflare's EU storage. The app also keeps some information on your phone so it can work smoothly.
Some processing happens outside France and the EU. Section 5 lists who is involved, and section 12 explains the transfers.
4. How we use your information
| Purpose | Information used | Legal basis (GDPR) |
|---|---|---|
| Providing your diary, targets, and progress | Profile, food preferences, meals, water, weight | Contract, Art. 6(1)(b) |
| Processing health data, including Apple Health data | Health-related information in your profile and logs | Explicit consent, Art. 9(2)(a) |
| Estimating meals and running the AI coach | See section 6 | Contract, Art. 6(1)(b), and explicit consent, Art. 9(2)(a) |
| Keeping the service working and secure | Technical data, backups | Legitimate interests, Art. 6(1)(f) |
| Managing a subscription | Subscription status | Contract, Art. 6(1)(b) |
| Meeting a legal duty | What the law requires | Legal obligation, Art. 6(1)(c) |
Health data is never used for advertising or marketing. Gloups doesn't sell or rent your information, and it doesn't share it with advertisers.
6. AI features
Meal estimates and the coach use a third-party AI model. Only what the feature needs is sent, without your name or contact details, because Gloups doesn't ask for them.
| Feature | What's sent to the AI model |
|---|---|
| Meal estimate | Your meal photo or description |
| Coach | Your message, your conversation, and your context: goal, targets, recent meals and calories, weight trend, habits, diet, allergies, and dislikes |
We currently use DeepSeek V4.1 Flash through OpenCode Go. OpenCode's documentation lists this model as not used for training, with 0 days of retention, under a zero-retention agreement it renews monthly. These are the provider's commitments. This choice may change, and if the provider or its terms change, we'll update this page.
Your nutritional data comes from ANSES-CIQUAL and Open Food Facts, which are public databases. Our server queries them directly, so nothing personal is sent to them.
AI can be wrong. Check estimates before you rely on them. Gloups and its coach don't give medical advice and don't replace a health professional. If you have an eating disorder, are pregnant, or have a medical condition or treatment, talk to a professional.
7. Your choices
| Choice | How |
|---|---|
| Edit your profile | In Settings, at any time |
| Stop sharing Apple Health data | In Apple Health, under data access for Gloups |
| Delete a meal and its photo | From the meal, in your diary |
| Erase coach conversations | From the coach screen |
| Erase everything | In Settings, with “Effacer toutes mes données” (Erase all my data) |
| Withdraw consent | Erase everything from Settings, or email us |
8. Security and retention
| Information | Kept for |
|---|---|
| Profile, logs, and conversations | Until you erase them |
| Record of your consent | Until you erase your data |
| Meal photos | Until you delete the meal |
| Backups | Up to 90 days, then erased |
| Anonymous app events | 90 days. They hold the screen, timing, error type, platform, and version, with no ID or health data |
| Crash reports | 14 days. They hold the error type and code location, with no error message, screen content, ID, or health data |
| Server logs and traces | Up to 7 days |
| IP addresses for rate limits | Briefly, in memory only |
Erasing your data from Settings removes your profile, meals, photos, weight, and conversations from the phone and the server immediately. Removing the app from your phone doesn't erase what's on the server, so use Settings first.
Traffic is encrypted in transit, sign-in tokens are kept in your phone's secure storage, and backups are encrypted. No system is perfectly secure. If a breach puts your data at risk, we'll tell you and the authorities as the law requires.
9. This website and other sites
This website sets no cookies and runs no analytics or advertising. Its fonts and images come from gloups.app itself. The early access form opens your own email app, so we only receive what you choose to send. Cloudflare processes requests to deliver the site.
Our roadmap at gloups.canny.io is run by Canny, under its own privacy policy. Other sites we link to are also responsible for their own practices.
10. Minors
Gloups is for adults. The app doesn't accept a birth year under 18, and we don't knowingly collect information from anyone younger. If you think a minor has used Gloups, email us and we'll erase it.
11. Your rights
If you're in the European Economic Area, the UK, or Switzerland, data protection law gives you these rights. We apply them to everyone who uses Gloups.
| Right | What it means |
|---|---|
| Access | Get a copy of your information |
| Rectification | Correct what's wrong |
| Erasure | Have your information deleted |
| Restriction | Limit how we use your information |
| Portability | Receive your information in a reusable format |
| Objection | Object to processing based on legitimate interests |
| Withdraw consent | Withdrawing doesn't affect earlier processing |
We reply within one month, and may extend this by two months for complex requests. Because Gloups has no accounts, we may ask you to confirm the request comes from your device.
You can complain to your local data protection authority. In France, that's the CNIL at cnil.fr.
12. International transfers
AI requests and subscription data are handled outside the EU, as listed in section 5, including in the United States and possibly in other countries. Those countries may not offer the same protection as EU law. These transfers are needed to provide the features you choose to use. You can avoid AI transfers by not using meal estimates or the coach.
13. Automated processing
Gloups calculates your calorie target and generates estimates and coaching automatically. These help you follow your own habits and have no legal or similarly significant effect on you.
14. Changes to this policy
We'll update the date at the top of this page when this policy changes. If a change is significant, we'll tell you in the app before it applies.
Questions or requests: [email protected]