Privacy Policy

1. Who we are

Glufloat is run by GluFloat, based in Lagos State, Nigeria. For any privacy question, contact us at glufloat@gmail.com.

2. What we collect

The current version of Glufloat is built to collect as little as possible:

• Checkout details (name, email, payment) are collected and processed by our checkout partner, Paystack, and their payment providers. We receive confirmation of your membership, not your full card number.
• Foods you search and meals you build stay on your own device. We do not store them on our servers in this version.
• Basic, anonymous usage information may be collected to keep the site working and improve it.

3. Sensitive (health) information

Using a diabetes food guide can hint at your health status, which counts as sensitive personal data under the NDPA. We treat this with extra care:

• We only use it to give you the food guidance you asked for.
• We never sell it.
• You can clear it from your device at any time.

4. Why we use your information

• To give you the service you signed up for (contract).
• To take payment for your subscription (contract).
• To keep the app safe and working, and to improve it (legitimate interest).
• To meet our legal duties in Nigeria (legal obligation).

5. We do not sell your data

We do not sell your personal information to anyone. We only share it where needed: with our checkout partner to process your subscription, with trusted service providers who help us run the app (for example hosting), and with authorities if the law requires us to.

6. Where your data is kept

Data may be stored or processed on servers inside or outside Nigeria. When data leaves Nigeria, we take the steps required by the NDPA to make sure it stays protected.

7. How long we keep it

We keep information for as long as your membership is active, and for a reasonable period after, to meet legal, tax, and accounting duties. When it is no longer needed, we delete or anonymise it.

8. Your rights under the NDPA

• Ask what data we hold about you and get a copy.
• Correct data that is wrong.
• Ask us to delete your data.
• Withdraw your consent at any time.
• Object to certain uses of your data.
• Complain to the Nigeria Data Protection Commission (NDPC) if you are not satisfied.

To use any of these rights, contact us at glufloat@gmail.com. We will respond within the time the NDPA requires.

9. Children

Glufloat is not made for children under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

10. Changes to this policy

We may update this policy. If we make an important change, we will tell you on the site or by email. The “last updated” date at the top shows the latest version.

11. Contact

Privacy questions or requests: glufloat@gmail.com / Lagos State, Nigeria. You may also contact the Nigeria Data Protection Commission (NDPC).