Privacy Policy

This policy explains what data is collected when you use the Gastrie iOS app, the gastrie.com website and the QR menus, where that data goes, and what your rights are. Turkish users can also read the KVKK disclosure (in Turkish), which covers processing under Turkish data protection law.

Data we collect

• Account: your name and email address. Your password never reaches us in readable form; it is stored encrypted by our authentication provider.
• Business and menu content: restaurant name, address, opening hours, guest Wi-Fi details; category and product names, descriptions, ingredients, allergen markers, prices and the images you upload.
• AI requests: the messages you write to the Gastrie Assistant, the menu text you send for translation, the photos you take to extract products from a printed menu, and the prompts you give in Studio.
• Purchases: subscription and credit records (product identifier, transaction identifier, status and expiry date). Your card details never reach us — payment is handled entirely by Apple and card data stays with Apple.
• Device and notifications: if you allow notifications, your device's notification address (push token) is stored against your account. If you decline, the app keeps working without notifications.
• Crash reports: if the app stops unexpectedly, we receive the error report, the steps that preceded it, your device model, operating system and app version. Your user identifier is attached to that record; your email address and IP address are not sent.
• Menu statistics: how many times your QR menu was opened — as counts only, broken down by day, hour and table. No identity, device or location of your guests is recorded.
• Server logs: when you open gastrie.com or a QR menu, your IP address and browser information are processed in the server logs of the provider that hosts the site.

Data we do not collect

The app does not access your location, contacts, calendar, health data or microphone. It does not read your advertising identifier (IDFA), contains no ad network, and does not track you across other apps or websites. Searches inside your menu run on your device only and are not sent to us.

How we use your data

• To provide the service and keep your account and menus working,
• To carry out the AI work you request (translation, menu reading, image generation),
• To verify the subscription and credits you purchased,
• To answer your support requests,
• To find and fix errors in the app,
• To meet our legal obligations.

We do not sell or rent your data to third parties for marketing purposes.

Our service providers

We use the providers below to run Gastrie. Each of them processes your data only on our behalf and only for the work listed in this table; none of them uses it for their own advertising. Tap a provider's name to open its own privacy policy.

Each of these providers is required to protect your data with the same or equal protection as described in this policy and required by the App Store guidelines, and is bound to this by its contract and terms of service. The content you submit in the app (photos, menu text, messages) reaches our AI providers (Google Gemini and fal.ai) only after you give permission in the app; you can withdraw it at any time from AI Data Sharing on the Profile screen.

Where your data is stored

Your account, menu content and images are hosted in the European Union (Frankfurt, Germany). The servers of the providers above are located outside Türkiye (mainly in the EU and the US); your data is transferred abroad only to provide the service.

Cookies

On the website we use strictly necessary cookies for session handling and your preferences. See the Cookie Policy (in Turkish) for details. The mobile app uses no cookies.

Security

All data in transit is encrypted with TLS. Restaurants' data is separated at the database level: every record belongs to its owner and another account's query can never reach it. Fields such as the guest Wi-Fi password are never exposed to the role that displays the menu.

Deleting your account

You can delete your account from inside the app: Profile → Delete Account; you do not need to request it from us. After the request your account is held for 7 days: during that time nobody can sign in to it, menus of your restaurants that have no admin to take them over are offline, and you can undo the deletion with the link we email you. The wait protects you if someone else gained access to your account and requested the deletion. After 7 days your account and data are deleted permanently and irreversibly.

Restaurants of yours that have another active member with the Admin role are not deleted: they stay open during the waiting period and on day 7 they are transferred to your longest-serving active admin, so the QR codes on the tables and the menu keep working. Restaurants without an admin are deleted together with all their menu content, images and records, even if the team has members in other roles.

Your rights

You have the right to access, correct and request deletion of your personal data, and to request a copy of it. Write to destek@gastrie.com; for requests under Turkish data protection law, follow the steps in the KVKK disclosure.

Changes

We announce material changes to this policy by email or through the app. The current version is always published on this page.