Privacy Policy

Gout Diary

1. Data Controller

Responsible for data processing:

Thorsten Dunker Investment GmbH
Ohmoor 95C
22455 Hamburg
Germany

Email: post@gout-diary.com

2. Type and Scope of Data Processing

This app processes the following categories of personal data:

  • Health Data: Uric acid values, meal information, nutrition data (Art. 9 GDPR - special categories)
  • Usage Data: Settings, preferences
  • Image Data: Photos of meals and food items (optional)

Camera Usage

The app uses the camera exclusively at your explicit request:

  • To photograph meals for your food diary and optional AI analysis
  • To photograph new food items when manually adding them to the database
  • All photos are stored locally on your device
  • No automatic capture or transmission occurs
  • Camera permission can be revoked at any time in system settings

3. Purpose and Legal Basis

Processing is based on your explicit consent (Art. 6(1)(a), Art. 9(2)(a) GDPR) for the following purposes:

  • Documentation of your uric acid values
  • Maintaining a meal diary
  • Analysis and visualization of your data

4. Data Storage

Local Storage

All data is primarily stored locally on your device. You have full control over your data at all times. The local database is stored encrypted.

Google Drive Backups

If you enable the backup feature:

  • Your data is stored encrypted in your personal Google Drive
  • Legal basis: Your consent (Art. 6(1)(a) GDPR)
  • You can disable and delete backups at any time
  • Google Privacy Policy: https://policies.google.com/privacy

5. Third-Party Disclosure

Google Gemini AI

If you use the photo analysis feature:

  • Photos are transmitted to Google Gemini AI
  • Purpose: Automatic recognition of meal components
  • Legal basis: Your consent (Art. 6(1)(a) GDPR)
  • Images are used only for analysis and not permanently stored
  • You can disable this feature at any time
  • For free Gemini accounts, Google reserves the right to store and process images to improve AI engine performance.
  • Google Privacy Policy: https://policies.google.com/privacy

No Other Transfers: Your data is not transferred to or sold to any other third parties.

6. Storage Period

Your data is stored as long as you use the app. You can at any time:

  • Delete individual entries
  • Delete all data (clear app data in system settings)
  • Delete backups in Google Drive

7. Your Rights (Art. 15-22 GDPR)

You have the right to:

  • Access to stored data (Art. 15 GDPR)
  • Rectification of incorrect data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)

8. Withdrawal of Consent

You can withdraw your consent to data processing at any time with future effect by:

  • Disabling the backup feature
  • Disabling AI analysis
  • Revoking camera permission in system settings
  • Deleting app data
  • Uninstalling the app

9. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority:

Hamburg Commissioner for Data Protection and Freedom of Information
PO Box 10 04 40
20044 Hamburg
Germany

Email: poststelle@datenschutz.hamburg.de

10. Data Security

We implement technical and organizational measures:

  • Local data storage on your device
  • Encrypted backups (password protected)
  • No central data storage on our servers
  • Camera access only upon explicit user action

11. Changes

This privacy policy may be updated when the app changes. The current version is always available in the app.

Last updated: November 2025