Privacy Policy

Last updated: 29 September 2026

This policy explains what data the Sabria app processes, where it comes from, what it is used for, who it is shared with and what you can do about it. There is a separate section for this website at the end.

1. Who is responsible

The controller of your data is WESTVURM LLC, owner of the Sabria app. In this policy, «we» means WESTVURM LLC.

For any question about your data or about this policy, write to us at westvurm@gmail.com.

2. Your health data stays on your phone

Allergies, intolerances and diets are health data, and Sabria treats them as such: they do not leave your device.

The allergens, intolerances, diets and severity you mark, and the name of each profile, are stored only on your device, protected by the system security measures.
The cross-check between the menu and your profile happens on your own phone. What is sent for analysis is the menu, never your profile.
This data is never sent to Sabria's servers or to OpenAI.
Your scan history, your saved restaurants and your «I ate here and it went well» marks also stay on your device.

Since it never reaches us, we do not have it: you view it, change it and delete it yourself, in the app.

3. What data we process, why and on what legal basis

Outside your device, Sabria processes only what it needs to read menus, check your subscription and protect the service. Each processing activity has its legal basis under the General Data Protection Regulation (GDPR).

Anonymous account

What data: A random identifier, with no name, email address or phone number.
Where it comes from: It is created automatically when you first open the app.
What for: Linking your subscription, applying the anti-abuse limits and authenticating your analysis requests.
Legal basis: Performance of the contract (Art. 6(1)(b) GDPR).

Menu analysis

What data: What you choose to analyse: a photo of the menu (compressed on your phone before it is sent), an image from your gallery, a link, a PDF or the link in a QR code, or a photo of the label on a packaged product. The app language goes with it, so that the explanations reach you in that language.
Where it comes from: From you, when you take the photo, choose the image or paste the link.
What for: Reading the menu and returning the dishes and what they contain, so that your phone can cross-check them against your profile. The content goes through a Sabria server function (Supabase, in the European Union) and from there to OpenAI, only to read the menu.
Legal basis: Performance of the contract (Art. 6(1)(b) GDPR).

Subscription

What data: Your anonymous identifier and your purchase and subscription data: product, status, dates and transactions. Sabria does not see or store payment details.
Where it comes from: From Apple (App Store), when you buy or renew, via RevenueCat.
What for: Checking that you have an active subscription and giving you access to analysis. Our server keeps a copy of its status (active or expired, dates and product) linked to your anonymous identifier.
Legal basis: Performance of the contract (Art. 6(1)(b) GDPR).

Anti-abuse limits

What data: How many analyses each anonymous identifier makes in each period.
Where it comes from: It is generated as you use the app.
What for: Preventing abusive or automated use of the analysis.
Legal basis: Legitimate interest in protecting the service against abuse (Art. 6(1)(f) GDPR).

Technical logs and security

What data: Technical data about each request, such as the IP address, logged by the infrastructure providers. The logs of Sabria's functions do not include your identifier or the content of menus.
Where it comes from: From your connection, each time the app talks to the server.
What for: Protecting the service against attacks and abuse.
Legal basis: Legitimate interest in the security of the service (Art. 6(1)(f) GDPR).

Push notifications (optional)

What data: If you turn them on: your device's notification token, linked to your anonymous identifier, your choice to receive notifications, and a record of the notifications sent, so as not to exceed the maximum.
Where it comes from: From your device, when you turn notifications on in Settings → Communications.
What for: Sending you «News and ways to come back» notifications when your subscription expires: at most three per expired subscription. They never include health data.
Legal basis: Your consent (Art. 6(1)(a) GDPR). Notifications are off by default, and you can withdraw consent at any time in Settings → Communications.

Usage analytics (optional)

What data: Today, none. The app has a switch, «Help with anonymous usage data», which is off by default, but it does not send analytics to any provider.
Where it comes from: If it is ever connected, from your use of the app, and only with the switch turned on.
What for: Understanding how the app is used in order to improve it. It will never include your allergens, your profiles or the content you scan. If a provider is connected, we will add it to this policy first.
Legal basis: Your consent (Art. 6(1)(a) GDPR), which you give and withdraw with that switch, in Settings → Privacy.

The anonymous account, the menu analysis and the subscription are necessary to provide the service: without them, Sabria cannot read menus or check your subscription. Notifications and analytics are optional.

4. What we do not collect

Health data on our servers: your allergens, intolerances, diets and profiles stay on your device.
Your name, your email address or your phone number.
Your location, your contacts or the microphone.
Your device's advertising identifier (IDFA). There is no advertising and no tracking across apps.
Payment details: billing is handled by Apple, and Sabria does not see or store them.

Nor do we make automated decisions with legal effects on you. The traffic light is calculated by your own phone with your profile, and it is information for you to decide.

5. Phone permissions

Camera: only when you choose to photograph a menu, a label or a QR code. Before the permission is requested, a screen explains what it is for.
Photos: only when you choose an image from your gallery, with the same screen beforehand.
Notifications: only if you turn them on in Settings → Communications.
Sabria does not ask for access to the microphone, your location or your contacts.

6. Who we share data with

We work with these providers. Each one receives only what it needs for its role:

Supabase

What it does: Hosts Sabria's database, the anonymous account and the server functions. It acts as a data processor.
Where: Servers in the European Union.
What it receives: Your anonymous identifier, the content you send for analysis while it is processed, the copy of your subscription, the usage counters and, if you turn notifications on, the notification token.

OpenAI

What it does: Reads the menu with an artificial intelligence model. It acts as a data processor.
Where: United States.
What it receives: Only the content of the menu or the label, and the language to answer in. Never your profile or your identifier. The request is made with the option that tells OpenAI not to store the response for later retrieval («store: false»). Even so, OpenAI may keep the data sent in security logs for up to 30 days, unless required by law.

RevenueCat

What it does: Manages and validates subscriptions. It acts as a data processor.
Where: United States.
What it receives: Your anonymous identifier and your purchase and subscription data: product, status, dates and transactions.

Expo

What it does: Sends push notifications, only if you turn them on. It acts as a data processor.
Where: United States.
What it receives: The notification token and the notification to be delivered, which never includes health data.

Apple

What it does: Bills the subscription through the App Store and delivers push notifications to your iPhone. It handles your purchase data under its own privacy policy.
What it receives: Apple manages your purchase with your App Store account; Sabria does not see or store payment details. For notifications, Apple's notification service receives the notification to be delivered.

We do not sell your data or use it for advertising.

We would only disclose data to an authority if a law required us to.

7. International transfers

OpenAI, RevenueCat and Expo are in the United States. When the data we send them leaves the European Economic Area, this is done with the protections the GDPR requires, such as the European Commission's standard contractual clauses.

If you would like more information about these protections, write to us at westvurm@gmail.com.

8. How long we keep data

The anonymous account and everything linked to it on our server (the copy of your subscription, the usage counters, the notification token and your choice about notifications): until you delete them from Settings → «Delete all my data».
Photos: they are not stored in Sabria's database or storage, and they are not reused for other analyses. They are used only while the menu is being processed.
OpenAI: it may keep the data sent in security logs for up to 30 days, unless required by law.
Menus read from links: they are kept in a cache identified by a digest (hash) of their content, without your identifier or the link address, so that the same menu is not processed twice. That cache is not linked to any person.
Subscription data at RevenueCat: until you delete your data, which also deletes your customer record at RevenueCat. Apple keeps its own purchase records under its own policy.
Push notifications: if you turn them off, the token is deactivated and no longer used; it is deleted when you delete your data. The record of notifications sent then stops being linked to you.
Technical logs: the limited period set by each infrastructure provider, for security.
Data on your device: until you delete it, from the app or with «Delete all my data».

9. Your rights

Under the GDPR, you have the right to:

Access your data and know how we process it.
Rectify it if it is inaccurate.
Erase it.
Object to processing based on legitimate interest.
Ask us to restrict its processing.
Receive it in a structured, commonly used format (portability).
Withdraw your consent at any time, without affecting what was processed before.

The most direct way to erase it is Settings → «Delete all my data»: it deletes what is on your device, your anonymous account and everything linked to it on our server, and your customer record at RevenueCat. If the deletion on the server fails, the app deletes nothing and tells you, so you can try again.

Deleting your data does not cancel your subscription. To cancel it, go to your App Store account settings.

You withdraw consent for notifications in Settings → Communications, and for analytics in Settings → Privacy.

For anything else, write to us at westvurm@gmail.com. We will reply within one month. As the account is anonymous, we may need your help to match your request with your data; to delete it, the quickest way is from Settings.

10. Complaints

If you think we have not handled your data properly, you can lodge a complaint with the supervisory authority. In Spain, that is the Spanish Data Protection Agency (AEPD, www.aepd.es). If you live in another European Union country, you can go to the authority in your country. Before that, if you like, write to us at westvurm@gmail.com and we will try to resolve it.

11. Children

The subscription is taken out by an adult with their App Store account. Family profiles, including children's, are created by that adult and stay on their device: their names, allergies and diets never reach us.

12. Security

Communications between the app and the servers are encrypted (HTTPS).
Your health data is not stored on our servers or sent to OpenAI: it stays on your device, protected by the system security measures.
What is on our server is linked to an anonymous identifier, not to your name.
What we send to OpenAI does not carry your profile or your identifier.

13. This website

This website uses no cookies, no third-party analytics and no tracking pixels.
The typefaces are served from this same domain. No request is made to third-party servers when the page loads.
The hosting provider records requests (IP address, user agent and page requested) for a limited period, to run the website and protect it from abuse. The legal basis is our legitimate interest in keeping it running and protected (Art. 6(1)(f) GDPR).
This website has no forms and collects no data that you enter. If you write to us at westvurm@gmail.com, we will use your message only to reply to you.

14. Changes to this policy

If we change this policy, we will publish the new version here with its update date. If the change is significant, we will also announce it in the app before it applies, and if it requires your consent, we will ask for it.