Version: 0.5 · Prepared on: 2026-11-07 · Effective from: 10 November 2026
1. Controller and contact
PINGÜINO GLOBAL S.L., tax ID B19879501, Carrer dels Caputxins 11, 07002 Palma, Illes Balears, Spain, is the controller for gellatti personal data. Contact: info@gellatti.com. Accounts and purchases are intended for people aged at least 18.
2. Data, purposes and legal bases
| Activity | Necessary data and purpose | Legal basis |
|---|
| Account and access | Email, identifier, preferences and necessary information from the selected login method | Performance of the contract and service security |
| HOME/PRO and private recipes | Recipes, ingredients and settings saved or used for requested functions | Performance of the contract |
| Scanner and image recognition | Food or label photograph, product data and minimal technical information needed to provide a result and control abuse | Performance of the requested function; legitimate security interests for proportionate controls |
| Shared catalogue | Reliable product facts and evidence needed for verification | Non-personal product facts do not identify a user; limited personal traceability is based on legitimate quality and abuse-prevention interests |
| Purchases and invoices | Identification, contact, plan/product, amounts, address and tax information where applicable | Contract and legal tax/accounting obligations |
| Physical delivery | Name, delivery address and necessary delivery contact | Performance of the order |
| Community | Profile and material the user publishes, reports and responses | Requested service; legitimate moderation interests and legal obligations |
| Partner programme | Application, public links, contact, attribution, commissions and verification/payment status | Precontractual steps, contract, security and legal obligations |
| Franchise or support enquiry | Contact information and enquiry content | Responding to the request, handling complaints and legal obligations |
| Errors and security | Minimised technical fault and abuse-prevention data | Legitimate interests in maintaining and protecting the service |
| Remembering a partner link | Identifier and partner association for 30 days | Consent for optional storage; contractual or legitimate-interest grounds, as applicable, for the subsequent minimal attribution record |
| Campaign measurement | The parameters of the link you arrived with (network, campaign and post or video: utm_source, utm_medium, utm_campaign, utm_content) and the landing page, linked to your account and to your purchases and renewals (also in the Stripe payment metadata), to know which post brought a sign-up or a payment. Clicks on gellatti.com/go/ links and Demo starts are only counted anonymously, without IP address, account or cookies. Nothing is stored in your browser for this and your browsing is not tracked. Deleted with the account; the copy in the Stripe payment metadata is kept together with the payment documents for the statutory period (section 5). | Legitimate interest in measuring the effectiveness of our marketing communication |
Accepting this policy is not treated as blanket consent. Required fields are identified; not providing them may prevent the function for which they are needed. When relying on legitimate interests, we limit the data to the stated purpose and you may object on grounds relating to your situation.
2a. Sign in with Google
If you choose to sign in with Google, Google provides us only with your name, email address, profile picture and Google account identifier (scopes openid, email and profile). We have no access to your Google password, contacts, Gmail, Google Drive or any other data in your Google account.
We use this data solely to create your gellatti account, let you sign in and contact you about your account.
We do not sell this data, share it for advertising or use it to train artificial intelligence models. It is stored by our authentication provider, Supabase, in the EU, only as described in the Provider Register.
We delete it together with your account; backups follow the periods in section 5. You can also remove gellatti's access to your Google account at any time at https://myaccount.google.com/permissions.
gellatti's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
2c. gellatti in AI assistants
gellatti can be used from third-party artificial intelligence assistants (ChatGPT, Claude and Gemini) through a gellatti server, available at gellatti.com/mcp. You use the assistant under the terms and privacy policy of its provider, which processes your conversation; gellatti does not receive your conversation or your history.
What data our server receives. Without signing in, only the parameters the assistant sends to a gellatti tool (for example search words, a recipe identifier, a machine or a number of containers) and the technical data of the request, including the network address, which is used to limit how often requests can be made. The tools that work without an account return recipe cards without amounts. When you sign in, also an access token that identifies your gellatti account; we verify it with our authentication provider and forward it to the gellatti service that checks that your account has an active HOME or PRO plan before amounts are calculated. Requests pass through our web hosting and our server provider, as listed in the Provider register.
What we store and what we do not. The server does not store your requests, the answers, the amounts returned or the token. It keeps only one-minute counters in memory to prevent abuse (one per network address and, when you are signed in, one per account); they are never written to any database and are lost when the server restarts. Minimal technical error and security logs are governed by sections 2 and 5. OAuth authorisations and consents are part of your account and are managed by our authentication provider.
What we do not see or do. We do not receive your gellatti password or your sign-in details for the assistant. Exact amounts are never given without an account, and only to accounts with an active HOME or PRO plan; if your account does not have one, the answer says so and points to an informational page, with no purchase inside the assistant. The tools are read-only: the server does not create, change or delete your account data or your recipes. We do not sell this data, share it for advertising or use it to train artificial intelligence models.
What OAuth sign-in allows. It is the same gellatti account. When you authorise it, the assistant obtains a token with which it can ask for the exact amounts of a recipe on your behalf. The gellatti server uses that token only for that request. Sign in only if you want exact amounts; the other tools work without an account.
How to disconnect your account. You can (1) remove or disconnect gellatti in the assistant's connection settings, which stops new requests from that assistant (the steps depend on each provider); (2) ask info@gellatti.com to revoke the authorisation granted to the assistant, which we will do without undue delay; and (3) delete your gellatti account, which also deletes your OAuth authorisations and consents together with the rest of the account data, as described in section 5.
3. Photographs, catalogue and recipes
Photograph only food or labels, avoiding people, documents, addresses and other personal information. Photographs are sent to OpenAI through its API for the requested result. We do not use your photographs, scans or recipes to train our own or third-party models. Provider technical retention, security controls and legally required retention are distinct from training.
Complete and reliable label data may enter the shared PR-ING catalogue automatically; approximate data remains private PM-ING; contributions needing review are published after verification. This does not publish the contributor's identity or private photograph. Private recipes do not enter the official library or community without the user's publication action. Additional library or advertising use requires the author's specific permission.
We do not request a personal allergy or health profile; allergen information concerns products and labels. Do not include medical data in text fields or images.
4. Recipients and transfers
The Provider Register identifies the roles of Stripe, Supabase, the active hosting provider, OpenAI, Resend, Sentry and other recipients actually used. Carriers receive only what is needed for delivery. Stripe performs its own payment and identity checks where applicable; not every provider activity is performed on gellatti's behalf. Voluntary publications are visible to the indicated audience.
If access or transfers outside the European Economic Area occur, the relevant adequacy decision or valid safeguards will apply, such as standard contractual clauses and supplementary measures where needed. You can request information or a copy of applicable safeguards from info@gellatti.com. We do not claim that all data remains in the EU without verification.
5. Retention and deletion
We retain account and recipe data while necessary for the service or until deletion. Tax documents and information needed for claims are retained separately for the applicable legal periods with restricted access. Account deletion does not require erasing product facts that no longer identify any person.
Periods: account, settings and private recipes until you delete the account; recognition photos: deleted within 24 hours; photos sent for verification: 90 days after verification (product facts remain, without author data); invoices, orders and commissions: the legal period (usually 6 years); error logs: 30 days (security, up to 90); franchise enquiries and non-accepted partner applications: 6 months; backups: at most 90 days. Backups are replaced according to the disclosed cycle; deletions are reapplied after restoration. Removing a publication stops its display; a restricted copy may be retained where a legal obligation or legitimate evidential need applies, without public reuse.
6. Your rights
Request access, rectification, erasure, restriction, portability where applicable and objection through info@gellatti.com. Withdraw consent as easily as you gave it; withdrawal does not affect earlier lawfulness. Identity verification will be proportionate. We respond within GDPR time limits and explain any legally permitted extension. You may complain to the Spanish Data Protection Agency or the competent supervisory authority.
We do not use your data for advertising, remarketing or newsletters; we only measure which post or campaign brought a sign-up or a purchase (section 2). The cookies information lets you change the partner-link choice. A new purpose requiring consent cannot be introduced merely by publishing an updated policy.