LEGAL
Privacy Policy
Son güncelleme: 22 August 2026
This policy explains what data is collected when you use the Gastrie iOS app, the gastrie.com website and the QR menus, where that data goes, and what your rights are. Turkish users can also read the KVKK disclosure (in Turkish), which covers processing under Turkish data protection law.
Data we collect
- Account: your name and email address. Your password never reaches us in readable form; it is stored encrypted by our authentication provider.
- Business and menu content: restaurant name, address, opening hours, guest Wi-Fi details; category and product names, descriptions, ingredients, allergen markers, prices and the images you upload.
- AI requests: the messages you write to the Gastrie Assistant, the menu text you send for translation, the photos you take to extract products from a printed menu, and the prompts you give in Studio.
- Purchases: subscription and credit records (product identifier, transaction identifier, status and expiry date). Your card details never reach us — payment is handled entirely by Apple and card data stays with Apple.
- Device and notifications: if you allow notifications, your device's notification address (push token) is stored against your account. If you decline, the app keeps working without notifications.
- Crash reports: if the app stops unexpectedly, we receive the error report, the steps that preceded it, your device model, operating system and app version. Your user identifier is attached to that record; your email address and IP address are not sent.
- Menu statistics: how many times your QR menu was opened — as counts only, broken down by day, hour and table. No identity, device or location of your guests is recorded.
Data we do not collect
The app does not access your location, contacts, calendar, health data or microphone. It does not read your advertising identifier (IDFA), contains no ad network, and does not track you across other apps or websites. Searches inside your menu run on your device only and are not sent to us.
How we use your data
- To provide the service and keep your account and menus working,
- To carry out the AI work you request (translation, menu reading, image generation),
- To verify the subscription and credits you purchased,
- To answer your support requests,
- To find and fix errors in the app,
- To meet our legal obligations.
We do not sell or rent your data to third parties for marketing purposes.
Our service providers
We use the providers below to run Gastrie. Each of them processes your data only on our behalf and only for the work listed in this table; none of them uses it for their own advertising.
| Provider | Used for | Data sent |
|---|---|---|
| Supabase | Hosting, database, file storage, authentication | Account, menu content, images, purchase records |
| Google (Gemini) | Assistant, extracting products from a menu photo, translation | Assistant messages, menu text, menu photos |
| fal.ai | Studio image generation | Image prompts and the product photos to be processed |
| Sentry | Error and crash reporting | Error record, user identifier, device information |
| Expo | Notification delivery and app updates | Notification address (push token) |
| Apple | In-app purchases | Purchase verification record (card data does not reach us) |
Where your data is stored
Your account, menu content and images are hosted in the European Union (Frankfurt, Germany). The servers of our AI and error-reporting providers may be located outside it; such transfers are made solely to provide the service.
Cookies
On the website we use strictly necessary cookies for session handling and your preferences. See the Cookie Policy (in Turkish) for details. The mobile app uses no cookies.
Security
All data in transit is encrypted with TLS. Restaurants' data is separated at the database level: every record belongs to its owner and another account's query can never reach it. Fields such as the guest Wi-Fi password are never exposed to the role that displays the menu.
Deleting your account
You can delete your account from inside the app: Profile → Delete Account. Deletion is immediate and irreversible; you do not need to request it from us.
Restaurants that have a team are not deleted — they are transferred to your longest-serving active administrator, so the QR codes on the tables and the menu keep working. Restaurants that belong to you alone are deleted together with all their menu content, images and records.
Your rights
You have the right to access, correct and request deletion of your personal data, and to request a copy of it. Write to destek@gastrie.com; for requests under Turkish data protection law, follow the steps in the KVKK disclosure.
Changes
We announce material changes to this policy by email or through the app. The current version is always published on this page.