Last updated: 19 October 2026
This Privacy Policy explains how Gustra (“we”, “us”, or “the App”) handles information when you use the Gustra app and website.
Gustra is a personal restaurant review journal by Philip Zvar. Website: gustra.net. For privacy questions, contact us at philip.zvar@gmail.com.
Your reviews, ratings, criteria, photos, wine notes, settings and backups are stored locally on your device. Gustra does not create a Gustra account and does not require you to sign in.
Camera (photos for your profile and reviews), Photos/media (import images; optionally save review photos to your library), and Location (find nearby restaurants). Location is used for search and maps only — never sold or used for advertising.
The first Premium launch uses StoreKit with no Gustra account. Apple processes the purchase, renewal, cancellation and Restore Purchases; Gustra's server only verifies the Apple-signed transaction to confirm Premium access. Your App Store account and payment details stay with Apple.
Only when you use a feature that needs them: Google Places/Maps for restaurant search and maps; Google Gemini (Vision) for the optional wine-label scan; the sharing destination you choose when you share a review. We do not sell your personal data and we show no ads.
Shared memories are end-to-end encrypted; the decryption key is only in the link fragment and is never sent to the server. Free shares stay available for 7 days; new Premium shares have no time limit until you revoke them.
Encrypted backups and exported files stay under your control (Files or your chosen storage). Importing a friend's share stores their review data locally on your device.
To find and fix crashes, Gustra may send technical diagnostics (stack traces, device model, OS and app version) to Sentry. This does not include your review text, photos or location by default.
Only if you enable “Share anonymous usage statistics” in Settings does Gustra send anonymous, aggregated usage data to PostHog. This is disabled by default and can be switched off at any time. No names, emails, restaurant names, addresses, comments, photos, wine names, OCR text or search queries are ever sent.
Gustra is not directed at children under 13, and we do not knowingly collect personal data from children.
Delete individual reviews in the app, or uninstall Gustra to remove its local data. Copies you exported yourself (backups, .gustrashare files, photos saved to your gallery) remain under your control.
We may update this policy; the date at the top changes when we do. Questions about privacy: philip.zvar@gmail.com.