Gourmang SASU is the data controller. Its registered office is at 47 Avenue du Général de Gaulle, 93170 Bagnolet, France. You can contact us at support@gourmang.com.

1. Data and purposes

We use account and age information to manage access; nutrition profiles, goals, logs and photos for tracking and planning; and sharing, support, subscription and notification data for those features. Required information enables the account or feature concerned. App stores handle payments. Optional dictation may process audio remotely; we receive the text.

Device, network, usage and account data, diagnostics and session recordings help secure, troubleshoot and improve Gourmang. Recordings can show screens, with selected sensitive fields masked. We send usage data to Google to measure our campaigns.

We rely on our contract to provide the service, legitimate interests for security, abuse prevention, moderation and necessary diagnostics, and legal obligations for required records and rights requests.

Non-essential tracking requires consent where applicable; health data normally requires explicit consent. Accepting this policy or the terms is not consent to either.

3. Recipients and transfers

Authorised staff and hosting, AI, communications, diagnostics, analytics and subscription providers receive relevant data. AI providers and intermediaries receive submitted text or images and relevant nutrition and goal information. Shared content reaches your chosen recipients; approved food contributions are public.

Main storage and product analytics are hosted in the EU. Providers may process data outside the EEA; contact us for transfer locations and safeguards.

4. Retention and deletion

Account data and nutrition summaries remain until account deletion. We keep diary entries for 10 days, detailed coaching meals for 180 days, AI usage records for 90 days and internal analytics for 90 days after sending them. Completed support conversations expire after 90 inactive days; unused AI recipes after 90 days, unless favourited or still in use.

Unused images become eligible for deletion after 14 days; deleted files remain recoverable for 7 days. Account deletion removes its data and requests deletion of linked analytics. Backups, public contributions, shared copies, store records and Google measurement data may remain.

5. Rights and changes

Subject to applicable law, you may request access, correction, deletion, restriction or portability, object to legitimate-interest processing, and withdraw consent without affecting earlier lawful processing. Contact support@gourmang.com. We respond within one month; permitted extensions are explained within that period. You may complain to the CNIL or your local supervisory authority.

We update this policy when practices change, notify you of material changes and obtain any required consent before new processing starts.