Gustamo

Privacy policy

Effective date:

In brief: Gustamo stores the recipes, week plans and grocery lists you add in Google's Cloud Firestore, under a random user ID it creates when you first open the app, so that they stay in sync between phones and reach the members of your household; signing in with Apple or Google is optional. Photos and screenshots are read on your device to find the recipe text, and a recipe link is opened by your device directly from the website you chose. Usage statistics and crash reports are optional: in the European Economic Area (which includes the European Union), Canada, Türkiye, Vietnam and Brazil both stay off until you allow them, in the United Kingdom usage statistics do, and you can turn either off at any time in Settings, then Privacy choices.

1. Who we are

Gustamo is made by IOCODO LLC, a limited liability company registered in Wyoming, United States. We decide why and how the data described on this page is used, so under European data protection law we are its controller.

Postal address: 30 N Gould St Ste N, Sheridan, WY 82801-6317, United States
Email: support@iocodo.com

Use this email for anything about your data, including the requests described in Your rights.

2. What this policy covers

This policy covers the Gustamo app on iOS and Android, and this page. Gustamo is a meal planner that turns your own recipes into a weekly plan and a grocery list sorted by supermarket aisle, shared with your household.

Here, "personal data" means any information about you as a person who can be identified, directly or indirectly. That includes identifiers such as a user ID, an installation ID or an App Check token, even when they do not contain your name.

3. Data kept on your device

Gustamo keeps the following on your device, in the app's own storage:

  • the full-size photos you add to your recipes
  • your settings, including your privacy choices
  • a copy of your recipes, week plans, grocery lists and household that Cloud Firestore keeps so that the app works without a connection, with the changes you make offline until they are sent

We do not receive any of this, unless another section of this policy says otherwise. If you back up your device with iCloud or Google, the backup can include a copy of this data, under Apple's or Google's terms. Uninstalling the app deletes this data from your device.

To find a recipe in a photo or screenshot you import, the app reads its text on your device, with Apple's Vision framework on iPhone and iPad and with Google's ML Kit on Android. The image and the text found in it are not sent anywhere for this; on Android, ML Kit sends Google the usage metrics described in Who receives data.

When you import a recipe from a link, your device opens that page directly from the website you chose, as a browser does, and the app keeps the recipe it finds there together with the page's address. That website receives your IP address and the usual technical details of a page request, under its own privacy policy, and so does the website a recipe's picture comes from, each time the app shows that picture.

4. Accounts and sign-in

Gustamo uses Firebase Authentication, a Google service, to recognise your account.

Firebase Authentication gives your installation a random user ID when you first open the app. It does not contain your name or email address, but it is a pseudonymous identifier: it links the data the app keeps on our servers to your installation.

If you sign in with Google, we receive from Google your email address, the name and profile picture of your Google account and a Google user ID, and Firebase Authentication stores them to keep you signed in.

If you sign in with Apple, we receive an Apple user ID and, the first time only, the name and email address you choose to share. If you choose to hide your email address, Apple gives us a private address that forwards to yours.

5. What we use data for, and on what legal basis

European data protection law (the GDPR and the UK GDPR) requires a legal basis for each use of personal data. For each use, here is the data involved and the basis we rely on.

  • Running the app: keeping your recipes, week plans, grocery lists and household in your account, in sync between phones and shared with the members of your household

    Data: your random user ID; what you add to the app (recipes with the address of the page each one came from and a small copy of each photo you add, week plans, grocery lists and their check marks, the aisles you choose for ingredients, your household's name and members, invite codes); and, if you sign in with Apple or Google, the account details described in Accounts and sign-in.

    Legal basis: Performance of our contract with you, that is, providing the app you asked for (GDPR art. 6(1)(b)).

  • Keeping the app configured and confirming that requests come from the genuine app

    Data: installation identifiers, the app's version, the operating system version, your device's language, country setting and time zone, App Check tokens and an attestation from Apple's App Attest or Google Play Integrity.

    Legal basis: Performance of our contract with you, that is, providing the app you asked for (GDPR art. 6(1)(b)).

  • Reading recipes from the photos and screenshots you import

    Data: the image, which the app reads on your device and does not send; on Android, the device and app information, per-installation identifiers and performance metrics that ML Kit sends to Google, described in Who receives data.

    Legal basis: Performance of our contract with you, that is, providing the app you asked for (GDPR art. 6(1)(b)).

  • Counting how the app is used

    Data: usage events, device model, operating system version, an approximate location that Google derives from your IP address (the app has no access to your device's location), the app-instance identifier and installation identifiers.

    Legal basis: Your consent, which the app asks for before this starts in the European Economic Area, the United Kingdom, Canada, Türkiye, Vietnam and Brazil (in the European Union and the European Economic Area, GDPR art. 6(1)(a); in the United Kingdom, the same article of the UK GDPR). In other countries it is on unless you turn it off. Everywhere, you can turn it off at any time in the app (Settings, then Privacy choices).

  • Fixing crashes

    Data: crash reports with their diagnostics (memory and disk state), a record of each app session start, device model, operating system and app version, and installation identifiers.

    Legal basis: Your consent, which the app asks for before this starts in the European Economic Area, Canada, Türkiye, Vietnam and Brazil (in the European Union and the European Economic Area, GDPR art. 6(1)(a)). In other countries it is on unless you turn it off. Everywhere, you can turn it off at any time in the app (Settings, then Privacy choices).

  • Fixing crashes in the United Kingdom

    Data: crash reports with their diagnostics (memory and disk state), a record of each app session start, device model, operating system and app version, and installation identifiers.

    Legal basis: Our legitimate interests (GDPR art. 6(1)(f)): finding and fixing the crashes you hit, which in the United Kingdom rests on article 6(1)(f) of the UK GDPR. The app does not ask first there, because the Privacy and Electronic Communications Regulations (PECR) allow storing and reading this data on your device without consent when it is needed only to find and fix technical faults. Crash reports are on unless you turn them off in the app (Settings, then Privacy choices). You can object at any time by writing to us.

  • Answering you when you write to us

    Data: your email address, your message, anything you attach and, when you write from the app, the app version, the operating system and its version.

    Legal basis: Our legitimate interests (GDPR art. 6(1)(f)): answering your request, and keeping a record of how we handled it. You can object at any time by writing to us.

  • Keep a record of the terms of use you accepted

    Data: your user ID, the version of the terms and a SHA-256 fingerprint of their exact text, the language they were shown in, when you accepted them (by our server's clock), the app's build number, whether your phone runs iOS or Android, and which acceptance screen you saw and how you accepted; the record does not include your IP address.

    Legal basis: Our legitimate interests (GDPR art. 6(1)(f)): proving which terms of use you accepted, if a legal claim about them arises. You can object at any time by writing to us.

6. Who receives data

We use these service providers to run Gustamo. Each one receives only the data listed, for the purpose listed:

  • Firebase Authentication (Google LLC)

    What for: creates your random user ID when you first open the app and, if you choose to, links it to your Apple or Google account, so that you can find your data again on another phone or after reinstalling the app.

    Data: your random user ID; if you sign in with Apple or Google, the account details described in Accounts and sign-in; and the IP address and user agent of each sign-in request, which Firebase Authentication keeps for a few weeks.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase Authentication privacy information

  • Cloud Firestore (Google LLC)

    What for: stores your recipes, week plans, grocery lists and household, and keeps them in sync between your phones and the phones of your household.

    Data: the recipes you save, with the address of the page each one came from and, for a photo you add, a small copy of 60 KB at most; your week plans; your grocery lists, with each check mark, who made it and when; the aisles you choose for ingredients; your household's name, its members and the name each member shows there; invite codes; the terms of use you accepted; and your random user ID.

    Google LLC processes this data on our behalf, under its data processing terms. Cloud Firestore privacy information

  • Google Analytics for Firebase (Google LLC)

    What for: counts how the app is used.

    Data: the events Firebase records by itself (such as app opens and sessions) and events the app records about which features are used (such as importing a recipe), never the text of your recipes or lists; an app-instance identifier, the installation identifier, device model, operating system version and an approximate location that Google derives from your IP address (the app has no access to your device's location).

    Google LLC processes this data on our behalf, under its data processing terms. Google Analytics for Firebase privacy information

  • Firebase Crashlytics (Google LLC)

    What for: reports crashes so we can fix them.

    Data: crash reports and diagnostics (device model, operating system, app version, memory and disk state), a record of each app session start, and installation identifiers.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase Crashlytics privacy information

  • Firebase Remote Config (Google LLC)

    What for: keeps the app configured, for example switching a feature off remotely.

    Data: an installation identifier and its token, the app's version, the operating system version, and the language, country setting and time zone of your device; while usage statistics are on, also when you first opened the app, as Google Analytics recorded it.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase Remote Config privacy information

  • Firebase Installations (Google LLC)

    What for: gives your installation of the app the identifier that the Firebase services above use.

    Data: an installation identifier and its authentication token, the app it belongs to and the platform.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase Installations privacy information

  • Firebase App Check (Google LLC)

    What for: confirms that requests come from the genuine app.

    Data: a short-lived App Check token and an attestation of the app and the device, from Apple's App Attest, which Firebase checks with Apple, or from Google Play Integrity, which Google Play produces under its own terms from the app's name, version and signing certificate and from information about the device.

    Google LLC processes this data on our behalf, under its data processing terms. Firebase App Check privacy information

  • Sign in with Apple (Apple Inc.)

    What for: lets you sign in with your Apple Account, if you choose to.

    Data: Apple confirms who you are and gives us an Apple user ID and, the first time only, the name and email address you choose to share, or a private address that forwards to yours.

    Apple Inc. decides for itself how it uses this data, under its own privacy policy. Sign in with Apple privacy information

  • Google Sign-In (Google LLC)

    What for: lets you sign in with your Google Account, if you choose to.

    Data: Google confirms who you are and gives us your Google user ID, email address, name and profile picture.

    Google LLC decides for itself how it uses this data, under its own privacy policy. Google Sign-In privacy information

  • Google ML Kit (Google LLC)

    What for: reads the text of photos and screenshots on Android devices, on the device.

    Data: the image and the text found in it stay on your device; ML Kit sends Google information about the device (manufacturer, model, operating system version and build), the app's package name and version, per-installation identifiers, and metrics about each use (such as speed, image format and size, and error codes), which Google uses to measure, maintain and improve ML Kit and to detect misuse.

    Google LLC decides for itself how it uses this data, under its own privacy policy. Google ML Kit privacy information

  • GoDaddy Professional Email (GoDaddy Operating Company, LLC)

    What for: receives and keeps the emails you send to support@iocodo.com and our replies.

    Data: your email address, your message and anything you attach, and our replies.

    GoDaddy Operating Company, LLC processes this data on our behalf, under its data processing terms. GoDaddy Professional Email privacy information

Apple (App Store) and Google (Google Play) also handle your download, any purchase and the integrity checks the app asks them for, under their own privacy policies.

We do not sell your personal data.

7. Where data is processed

IOCODO LLC is registered in the United States. Our service providers may process your personal data in the United States and other countries where Google, GoDaddy or their subcontractors have facilities.

Where European, UK or Swiss data protection law requires a safeguard for this, we rely on:

  • the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework, for providers certified under them (you can check a provider on dataprivacyframework.gov)
  • the Standard Contractual Clauses approved by the European Commission, with the UK Addendum and the Swiss adjustments, which are part of our providers' data processing terms

You can ask us for a copy of these safeguards at support@iocodo.com.

8. How long we keep data

Here is how long we keep each kind of personal data. Items marked automatic are deleted on a fixed schedule, without anyone having to ask.

  • Your recipes, week plans, grocery lists, aisle choices and household

    Until you delete them, or until you delete your account in the app. Deleting your account also removes what you added to a shared household; the other members keep what they added.

  • Your account (the random user ID and, if you signed in with Apple or Google, the details we received)

    Until you delete your account in the app; Firebase then removes it from its live and backup systems within 180 days.

  • IP addresses of sign-in requests

    A few weeks, in Firebase Authentication. automatic

  • Invite codes

    Until the person who created the code deletes it or their account; a code stops working once it expires.

  • Usage events in Google Analytics

    2 months. automatic

  • Identifiers linked to your usage statistics in Google Analytics (the app-instance and installation identifiers)

    Up to 14 months after the app last sent usage statistics. automatic

  • Crash reports

    90 days. automatic

  • Installation identifiers

    Until you delete your account in the app, which asks Firebase to delete them; Firebase then removes them within 180 days.

  • Emails you send us, and our replies to you

    Until we have handled your request, then for up to 12 months, to answer follow-up questions and to show how we handled it.

  • Record of the terms of use you accepted

    As long as your account exists, and for 6 years after you delete your account, to prove which terms you accepted if a legal claim arises.

When you delete your account or ask us to delete your data, we delete it as described here, unless the law requires us to keep part of it.

9. How we protect data

Data travels between the app and our service providers over encrypted connections (HTTPS).

Our providers encrypt the data they store for us, and the access rules of our database limit what each user can read and change. Access to our systems is limited to the people who run Gustamo, and only to run and support it.

If a security incident puts your personal data at risk, we tell you and the competent authorities when the law requires it.

10. Your rights

Wherever you live, you can ask us to:

  • tell you what personal data we have about you, and give you a copy
  • send that copy to you, or to another company, in a machine-readable format
  • correct data that is wrong or incomplete
  • delete your data
  • stop or limit a use of your data, including any use based on our legitimate interests

To ask, write to support@iocodo.com. It is free. We reply within one month, and we may ask you to confirm that the data is yours before we act.

You can also withdraw any consent you gave, at any time, in the app (Settings, then Privacy choices). This does not affect what we did with your data before you withdrew it.

Deleting your data

You can delete your account and its data:

  • in the app, for your account, what you added to a shared household (the other members keep what they added) and everything else stored under your account on our servers, except the record of the terms of use you accepted: Settings, then Delete account
  • on the web: iocodo.com/apps/gustamo/delete-account.html
  • by email: write to support@iocodo.com with the subject "Delete my data"

Usage statistics and crash reports that were already sent are deleted on their own, within the periods in How long we keep data.

What the app keeps on your device is deleted when you uninstall the app.

Complaints

You also have the right to complain to an authority:

If you are in Brazil, you have the rights listed in article 18 of the LGPD (Lei 13.709/2018), and you can use them as described above.

11. Privacy rights in US states

Several US states, including California, Colorado, Connecticut, Oregon, Texas and Virginia, give their residents privacy rights. We give the same rights to everyone in the United States:

  • to know what personal information we collect, use and disclose, and to get a copy of it
  • to correct it
  • to delete it
  • to opt out of the sale of your personal information, of its use for targeted advertising and of profiling that has legal or similarly significant effects
  • to appeal if we turn down your request
  • not to be treated differently for using any of these rights

The personal information we collect comes from you and from the app on your device. Why we use it and who receives it are described in What we use data for and Who receives data. We do not sell your personal information. In the current version of Gustamo, we do not use or share it for targeted advertising.

To use these rights, write to support@iocodo.com, or have someone you authorise write for you. We reply within one month (these state laws allow up to 45 days). If we turn your request down, you can appeal by replying with the word "Appeal" in the subject. We answer an appeal within 45 days, and if you still disagree you can contact the attorney general of your state.

12. Notices for some countries

Canada

The service providers listed in Who receives data collect and keep data for us. They may process it outside Canada, in the United States and other countries where Google, GoDaddy or their subcontractors have facilities. The courts and authorities of those countries can have access to it under their laws.

Japan: information the app sends to other companies

When you use Gustamo, the app sends this information from your device to other companies:

  • Firebase Authentication (Google LLC)

    Information sent: your random user ID; if you sign in with Apple or Google, the account details described in Accounts and sign-in; and the IP address and user agent of each sign-in request, which Firebase Authentication keeps for a few weeks.

    Our purpose: to create your random user ID when you first open the app and, if you choose to, to link it to your Apple or Google account, so that you can find your data again on another phone or after reinstalling the app.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Cloud Firestore (Google LLC)

    Information sent: the recipes you save, with the address of the page each one came from and, for a photo you add, a small copy of 60 KB at most; your week plans; your grocery lists, with each check mark, who made it and when; the aisles you choose for ingredients; your household's name, its members and the name each member shows there; invite codes; the terms of use you accepted; and your random user ID.

    Our purpose: to store your recipes, week plans, grocery lists and household, and to keep them in sync between your phones and the phones of your household.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Google Analytics for Firebase (Google LLC)

    Information sent: the events Firebase records by itself (such as app opens and sessions) and events the app records about which features are used (such as importing a recipe), never the text of your recipes or lists; an app-instance identifier, the installation identifier, device model, operating system version and an approximate location that Google derives from your IP address (the app has no access to your device's location).

    Our purpose: to count how the app is used.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Firebase Crashlytics (Google LLC)

    Information sent: crash reports and diagnostics (device model, operating system, app version, memory and disk state), a record of each app session start, and installation identifiers.

    Our purpose: to report crashes so we can fix them.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Firebase Remote Config (Google LLC)

    Information sent: an installation identifier and its token, the app's version, the operating system version, and the language, country setting and time zone of your device; while usage statistics are on, also when you first opened the app, as Google Analytics recorded it.

    Our purpose: to keep the app configured, for example switching a feature off remotely.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Firebase Installations (Google LLC)

    Information sent: an installation identifier and its authentication token, the app it belongs to and the platform.

    Our purpose: to give your installation of the app the identifier that the Firebase services above use.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Firebase App Check (Google LLC)

    Information sent: a short-lived App Check token and an attestation of the app and the device, from Apple's App Attest, which Firebase checks with Apple, or from Google Play Integrity, which Google Play produces under its own terms from the app's name, version and signing certificate and from information about the device.

    Our purpose: to confirm that requests come from the genuine app.

    Purpose of Google LLC: it uses the information only to provide this service to us.

  • Sign in with Apple (Apple Inc.)

    Information sent: Apple confirms who you are and gives us an Apple user ID and, the first time only, the name and email address you choose to share, or a private address that forwards to yours.

    Our purpose: to let you sign in with your Apple Account, if you choose to.

    Purpose of Apple Inc.: its own purposes too, described in its privacy information.

  • Google Sign-In (Google LLC)

    Information sent: Google confirms who you are and gives us your Google user ID, email address, name and profile picture.

    Our purpose: to let you sign in with your Google Account, if you choose to.

    Purpose of Google LLC: its own purposes too, described in its privacy information.

  • Google ML Kit (Google LLC)

    Information sent: the image and the text found in it stay on your device; ML Kit sends Google information about the device (manufacturer, model, operating system version and build), the app's package name and version, per-installation identifiers, and metrics about each use (such as speed, image format and size, and error codes), which Google uses to measure, maintain and improve ML Kit and to detect misuse.

    Our purpose: to read the text of photos and screenshots on Android devices, on the device.

    Purpose of Google LLC: its own purposes too, described in its privacy information.

In Settings, then Privacy choices, you can turn off usage statistics (Google Analytics for Firebase) and crash reports (Firebase Crashlytics). The other transmissions cannot be turned off in the app; Sign in with Apple receives data only when you choose to sign in with Apple; Google Sign-In receives data only when you choose to sign in with Google; Google ML Kit receives data only when you import a recipe from a photo or screenshot on an Android device.

Korea: personal information, entrustment and transfer abroad

Personal information: under Korea's Personal Information Protection Act (the Act), the personal information we process is the recipes, week plans, grocery lists and household information stored in your account, including the name each member shows in a household; if you sign in with Apple or Google, the name, email address and user ID we receive; and the emails you send to support@iocodo.com. The installation and app-instance identifiers, App Check tokens, usage events, crash reports, the metrics ML Kit sends to Google and the device information listed in Who receives data cannot be linked to you with anything we hold, and we handle them without identifying you.

Processed without your consent: we process everything listed above as personal information without asking for your consent, on the basis of article 15(1)(iv) of the Act, which covers what is needed to carry out our contract with you (our terms of use) or to act on your request.

Entrustment and transfer abroad: we entrust the work below to these companies, which receive the personal information outside Korea. The legal basis for the transfer is article 28-8(1)(iii) of the Act: we entrust this work to them to carry out our contract with you, and this policy discloses the details the Act lists. Each company uses the information only to do this work for us, and keeps it for the periods in How long we keep data.

  • Google LLC

    Work entrusted: storing your account, recipes, week plans, grocery lists and household in Cloud Firestore, and signing you in with Firebase Authentication.

    Personal information transferred: your random user ID; if you sign in with Apple or Google, the name, email address and user ID we receive; the recipes, week plans, grocery lists, check marks, aisle choices, household name, members' names and invite codes you add; the record of the terms of use you accepted; and the IP address of each sign-in request.

    Countries: the United States.

    When and how: whenever the app saves or syncs your data and when you sign in, over an encrypted connection (HTTPS).

    Contact: 1600 Amphitheatre Parkway, Mountain View, California 94043, United States, privacy contact form.

    How to refuse: storing this data with Google is how Gustamo keeps your recipes, plans and lists and shares them with your household: to refuse, do not use the app, and delete your account in the app to remove what is already stored.

    If you refuse: you cannot use Gustamo.

    Sub-processors: the list published by Google LLC

  • GoDaddy Operating Company, LLC

    Work entrusted: receiving and keeping the emails you send to support@iocodo.com and our replies.

    Personal information transferred: your email address, your message and anything you attach, and our replies.

    Countries: the United States and other countries where GoDaddy does business, which GoDaddy's privacy notices do not name.

    When and how: when you send us an email or we reply to you, over the internet.

    Contact: Office of the Data Privacy Officer, 100 S. Mill Ave, Suite 1600, Tempe, AZ 85281, United States, privacy@godaddy.com.

    How to refuse: do not write to us by email; to remove the emails you already sent, ask us to delete them.

    If you refuse: we cannot answer you by email, and the app works the same.

    Sub-processors: the list published by GoDaddy Operating Company, LLC

Where we process it: we have no servers of our own: the companies above store this personal information for us, in the countries named for each.

Destruction: when the period in How long we keep data ends, or when you ask us, we delete the personal information without delay, permanently and so that it cannot be recovered. We keep none of it on paper.

Automatic collection: the app collects information automatically through the software development kits (SDKs) of these services. What each one collects is listed in Who receives data, and how long it is kept in How long we keep data.

  • Firebase Authentication
  • Cloud Firestore
  • Google Analytics for Firebase
  • Firebase Crashlytics
  • Firebase Remote Config
  • Firebase Installations
  • Firebase App Check

Sign in with Apple receives data only when you choose to sign in with Apple; Google Sign-In receives data only when you choose to sign in with Google; Google ML Kit receives data only when you import a recipe from a photo or screenshot on an Android device: that is not automatic collection.

How to refuse: usage statistics (Google Analytics for Firebase) and crash reports (Firebase Crashlytics) are on by default in Korea, and you can turn them off at any time in Settings, then Privacy choices. The other services in this list are needed for the app to work: to refuse them, stop using the app and delete it. You can also write to us at support@iocodo.com.

Your requests: you can make the requests described in Your rights. If you are in Korea, we answer within 10 days, not one month. A legal guardian of a child under 14 can make the same requests for the child.

Privacy officer: IOCODO LLC, Privacy team, support@iocodo.com. You can also send complaints about how we handle personal information to this address.

México: aviso de privacidad

Si usas Gustamo en México, esta página es nuestro aviso de privacidad integral. Esto es lo que la ley mexicana nos pide decirte:

Responsable: IOCODO LLC, con domicilio en 30 N Gould St Ste N, Sheridan, WY 82801-6317, Estados Unidos. Puedes escribirnos a support@iocodo.com.

Datos personales que tratamos: los enumeramos, uso por uso, en la parte donde explicamos para qué usamos los datos y, servicio por servicio, en la lista de quién los recibe.

Para qué los usamos: para que Gustamo funcione y para responderte cuando nos escribes. Estos usos son necesarios para darte el servicio.

Además, de forma opcional y con tu consentimiento, los usamos para:

  • estadísticas de uso (Google Analytics for Firebase)
  • reportes de fallas (Firebase Crashlytics)

Cómo limitar el uso de tus datos: en Settings, then Privacy choices puedes desactivar cuando quieras las estadísticas de uso y los reportes de fallas. La app sigue funcionando igual. También puedes escribirnos a support@iocodo.com.

Derechos ARCO: puedes pedirnos acceso a tus datos, su rectificación o su cancelación, y oponerte a su uso. Escríbenos a support@iocodo.com y dinos qué derecho quieres ejercer y sobre qué datos. Te respondemos en un máximo de 20 días hábiles.

Tecnologías que recopilan datos automáticamente: mientras usas la app, los componentes de software (SDK) de estos servicios recopilan datos por sí solos:

  • Firebase Authentication
  • Cloud Firestore
  • Google Analytics for Firebase
  • Firebase Crashlytics
  • Firebase Remote Config
  • Firebase Installations
  • Firebase App Check

En la lista de quién recibe los datos puedes ver qué recopila cada uno. En Settings, then Privacy choices puedes desactivar Google Analytics for Firebase y Firebase Crashlytics. Para que los demás dejen de recopilar datos, tendrías que dejar de usar la app y desinstalarla.

Cambios a este aviso: los publicamos en esta página, con la fecha de la nueva versión. Si un cambio afecta la forma en que usamos los datos que ya tenemos de ti, te avisamos antes en la app.

South Africa

If you are in South Africa, you can object at any time to our use of your personal information. In Settings, then Privacy choices, you can turn off usage statistics (Google Analytics for Firebase) and crash reports (Firebase Crashlytics); for any other use, write to us at support@iocodo.com. You can also lodge a complaint with the Information Regulator: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191, South Africa; email POPIAComplaints@inforegulator.org.za; telephone 010 023 5200.

Việt Nam: chuyển dữ liệu cá nhân xuyên biên giới

Khi bạn dùng Gustamo tại Việt Nam, dữ liệu cá nhân của bạn được chuyển ra nước ngoài và được xử lý tại đó. Gustamo là ứng dụng của IOCODO LLC, một công ty tại Hoa Kỳ.

Bên nhận dữ liệu: IOCODO LLC và các nhà cung cấp dịch vụ của chúng tôi, gồm:

  • Google LLC
  • Apple Inc.
  • GoDaddy Operating Company, LLC

Nơi xử lý: Hoa Kỳ và các quốc gia khác nêu tại phần về nơi xử lý dữ liệu trên trang này.

Mục đích xử lý: vận hành Gustamo và trả lời khi bạn liên hệ với chúng tôi.

Ngoài ra, tùy theo lựa chọn của bạn, dữ liệu còn được dùng cho:

  • thống kê việc sử dụng ứng dụng (Google Analytics for Firebase)
  • báo cáo sự cố để chúng tôi khắc phục lỗi (Firebase Crashlytics)

Phần về bên nhận dữ liệu trên trang này cho biết mỗi dịch vụ nhận những dữ liệu nào và để làm gì. Bạn có thể bật hoặc tắt thống kê sử dụng và báo cáo sự cố bất cứ lúc nào trong ứng dụng, tại Settings, then Privacy choices.

13. Children

Gustamo is not meant for children under 13.

The app never asks for your year of birth. Where it asks for your consent to usage statistics and crash reports, the Allow button states the age from which your consent counts in your country, between 13 and 18; if you are younger, choose "Don't allow", and both stay off.

If you think a child has given us personal data, write to support@iocodo.com and we will delete it.

14. "Do Not Track" and other companies

Some browsers and devices can send a "Do Not Track" signal. There is no common standard for responding to it, so neither Gustamo nor this page changes what it does when it receives one. The choices described in this policy are how you control your data.

In the current version of Gustamo, only the service providers listed in Who receives data receive data from the app, for the purposes listed there. We do not let other companies use Gustamo to collect personal data about your activity over time and across other apps and websites.

15. Changes to this policy

We update this policy when Gustamo or the law changes, and the date at the top shows when the current version took effect. If a change affects how we use data we already have about you, we tell you in the app before it applies, and we ask for your consent again where the law requires it.

This version was last updated on .

Earlier versions: 2026-10-06

16. Contact

IOCODO LLC
Postal address: 30 N Gould St Ste N, Sheridan, WY 82801-6317, United States
Email: support@iocodo.com