Olive Detective Privacy Policy

OLIVE DETECTIVE PRIVACY POLICY

Last Updated: June 7, 2026

Your privacy is of the utmost importance to us. This Privacy Policy explains how Ra2Lab (the maker of Olive Detective) ("Olive Detective," "we," or "us") collects, uses, and discloses information about you when you access or use our websites, mobile applications, and other online products and services (collectively, the "Services"), and when you contact our support team, engage with us on social media, or otherwise interact with us.

Additional information for California residents, as well as for individuals in the EEA, UK, and Switzerland, can be found at the end of this Privacy Policy.

We may change this Privacy Policy from time to time. If we make material changes, we will update the date at the top of this page and, in some cases, provide additional notice (such as adding a statement to our homepage or sending you a notification).

COLLECTION OF INFORMATION

Information You Provide to Us

We collect information you provide directly to us when you:

- Create or use an Olive Detective account.

- Scan a product, submit feedback, or save preferences.

- Participate in surveys, contests, or promotional campaigns.

- Communicate with our team via email, chat, or social media.

- Make a purchase or subscribe to Olive Detective Premium.

This information may include:

- Personal details: name and email address (only if you sign in with a social or email account; the app works with an anonymous account by default).

- Payment details: purchases and subscriptions are handled by the Apple App Store or Google Play. We receive transaction confirmations and subscription status from those stores and our payments provider, but we do NOT collect or store your full card number.

- Preferences and feedback: dietary preferences, allergens, the ingredient topics you choose to watch, shopping goals, and other user-provided data.

- Sensitive Personal Information: some information you choose to provide - such as dietary preferences, allergens, or health-related product concerns - may be considered sensitive under certain privacy laws. We only process this information as necessary to provide the Services you request and in accordance with applicable law.

- Other account settings: language preferences and saved lists or favorites.

Scan Inputs and Related Content

When you use Olive Detective's scanning and search features, we may collect content and information you choose to provide through the Services, including photos and images of product labels and packaging, barcodes, text, search queries, corrections, feedback, and related metadata such as time, device information, and approximate location. We may also collect information visible in images you submit, such as the product, packaging, or other contextual information contained in the image.

Children's Privacy

Olive Detective is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users must be at least 16 years old to use the Services unless a parent or legal guardian is involved and applicable law permits such use.

Information We Collect When You Use the Services

When you use Olive Detective, we automatically collect:

- Usage information: items you scan, features you use, screens viewed, and actions taken within the app.

- Transactional information: purchase or subscription details, such as product, price, and renewal status.

- Log information: IP address, device type, app version, time zone, and access times.

- Device information: device identifiers, operating system version, mobile network information, and app performance/crash data.

- Camera, Photo Library, and Location-Related Information: if you enable the relevant device permissions, we may collect photos or images you submit through the camera or photo library, and we may collect precise or approximate location information when you use location-based features such as finding nearby restaurants.

Information We Infer or Generate

- User ID: an internal identifier linked to your Olive Detective account.

- Derived information: approximate location from your IP address, or product preferences inferred from your scan history.

- Behavioral insights: predictions about your likelihood to subscribe or use certain features.

Information We Collect from Other Sources

- Transaction information: if you subscribe through an app store or third-party platform.

- Social media data: if you sign in to Olive Detective using social credentials.

- Public sources: information you make publicly available.

- Cookies and tracking: data collected through cookies, web beacons, and similar technologies on our website.

USE OF INFORMATION

We use your information to:

- Provide and maintain the Services (legal basis: performance of a contract).

- Improve and personalize Olive Detective, including better product flags and recommendations (legal basis: our legitimate interest in improving the user experience).

- Process transactions and manage subscriptions (legal basis: performance of a contract).

- Send transactional messages like subscription updates and support responses (legal basis: our legitimate interest).

- Communicate about new features, promotions, and news (legal basis: your consent or our legitimate interest, depending on applicable law).

- Analyze usage trends and app performance (legal basis: our legitimate interest).

- Detect and prevent fraud, security breaches, and illegal activities (legal basis: our legitimate interest).

- Comply with legal obligations (legal basis: legal obligation).

- Create anonymized or aggregated data for analytics and business purposes (legal basis: our legitimate interest).

- Personalize advertising on third-party platforms (legal basis: consent where required by law).

- Use scan inputs, label images, corrections, and related metadata to verify product information, improve product matching and search, support quality assurance, and develop and improve our databases, scoring systems, and algorithms, and to create aggregated, de-identified datasets (legal basis: our legitimate interests, performance of a contract, and consent where required by law).

Profiling and Automated Decision-Making

We may use the information we collect to provide personalized recommendations and insights about products. We do NOT engage in automated decision-making that produces legal or similarly significant effects as defined under applicable privacy laws. Olive Detective may use machine-learning technologies to analyze preferences and provide personalized recommendations; these processes do not result in decisions that have legal or similarly significant effects on users.

DISCLOSURES OF INFORMATION

We may share your information:

- With service providers and contractors that perform services on our behalf, such as cloud hosting and storage, analytics, payment processing, customer support, security, fraud prevention, image or content processing, and technical infrastructure providers.

- With professional advisors (lawyers, auditors, etc.) bound by confidentiality.

- If required by law or in response to lawful requests from public authorities.

- To enforce our agreements, protect rights and safety, or investigate fraud or security issues.

- As part of a corporate transaction, such as a merger or sale of assets.

- With affiliates and subsidiaries under common ownership.

- With your consent, such as when you link Olive Detective to a third-party service or share data via a social feature.

We may also share aggregated or anonymized information that cannot reasonably identify you.

Third-Party Services We Rely On

To provide the Services, Olive Detective integrates with third parties who process limited data on our behalf or under their own policies, including:

- Google Firebase (authentication, crash and analytics) - see Google's Privacy Policy.

- Google Maps Platform / Places (nearby-restaurant search and map display).

- App Store / Google Play and our subscriptions provider (purchases and subscription management).

- Open Food Facts and similar product databases (product and ingredient data).

- Google Gemini (generating product insights from scanned data).

We encourage you to review the privacy policies of these providers.

ADVERTISING AND ANALYTICS SERVICES PROVIDED BY OTHERS

We may allow others to provide analytics services and serve advertisements on our behalf across the web and other online services. These third parties use cookies, web beacons, device identifiers, and similar technologies to collect information about your use of the Services and other websites and online services. This information may include your IP address, device identifiers, pages viewed, time spent, links clicked, and conversion information.

Under California law, certain disclosures of personal information for cross-context behavioral advertising may be considered a "sale" or "sharing" of personal information. You can opt out by emailing admin@ra2lab.io or enabling Global Privacy Control in your browser.

Your mobile device may also have settings that allow you to limit or opt out of tracking for advertising purposes (iOS: Settings > Privacy & Security > Tracking; Android: Settings > Google > Ads).

Do Not Track and Global Privacy Control

We honor browser-based opt-out signals, including the Global Privacy Control (GPC), where required by applicable law. If your browser or device sends a GPC signal, we will treat it as a request to opt out of the sale or sharing of your personal information for targeted advertising purposes.

DATA TRANSFER

We may operate globally. As a result, we and our service providers may process your information in countries that may not provide the same level of data protection as your home jurisdiction. Where required by law, we provide adequate protection for international transfers by relying on adequacy decisions, executing Standard Contractual Clauses, or obtaining your explicit consent.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. However, no security system is completely secure, and we cannot guarantee absolute security of your information.

DATA BREACH NOTIFICATION

If we become aware of a data breach that affects your personal information, we will notify you as required by applicable law.

DATA RETENTION

We retain personal information for as long as necessary to provide the Services, complete the transactions you request, maintain appropriate business records, comply with legal obligations, resolve disputes, and enforce our agreements. When we no longer need personal information, we will delete, anonymize, or de-identify it unless applicable law requires otherwise.

PRIVACY RIGHTS

Regardless of your location, and subject to applicable laws, you may have the right to:

- Know what personal information we hold about you.

- Access, correct, or update your information (including receiving it in a portable format).

- Delete your information.

- Opt out of "sales" or "sharing" of personal data for targeted advertising purposes.

- Limit processing of sensitive data or object to profiling (where applicable).

To exercise your rights, email us at admin@ra2lab.io. We do not discriminate against individuals for exercising their rights.

Verification

To help protect your privacy, we may take steps to verify your identity before fulfilling your request. You may also designate an authorized agent to make a request on your behalf.

Appeals

If we deny your request, you can appeal our decision by emailing admin@ra2lab.io.

OTHER CHOICES

Promotional Communications

You can opt out of promotional emails by following the unsubscribe instructions in those emails or adjusting your notification settings. We may still send non-promotional communications related to your account or transactions.

Mobile Push Notifications

With your consent, we send push notifications to your mobile device. You can turn these off in your device's notification settings.

INFORMATION FOR CALIFORNIA RESIDENTS

This section supplements the Privacy Policy for California residents under the California Consumer Privacy Act (CCPA), as amended.

Categories of Personal Information Collected:

- Identifiers: email, IP address, account ID, device identifiers.

- Commercial information: subscription details, purchase history.

- Internet activity: screens viewed, interactions with the Services.

- Geolocation data: approximate location based on IP; precise location for nearby search.

- Audio, electronic, or visual info: uploaded label photos, support messages.

- Inferences: preferences and product interests.

Purposes for Collection:

- Provide and maintain the Services.

- Improve user experience.

- Process transactions and prevent fraud.

- Comply with legal obligations.

- Personalize advertising.

Disclosure of Personal Information

We share information with service providers (hosting, analytics, payment processors), advertising partners for targeted marketing (subject to opt-out), and legal authorities when required. We do NOT knowingly sell or share personal data of individuals under 16 years old.

Sources of Personal Information

We collect personal information directly from you, automatically from your device and use of the Services, from app stores and payment providers, from social sign-in integrations you choose to use, from public sources, and from service providers acting on our behalf.

Opt-Out Options

You can opt out of "sales" or "sharing" of personal information for targeted advertising by emailing admin@ra2lab.io or enabling the Global Privacy Control in your browser.

INFORMATION FOR INDIVIDUALS IN EUROPE (EEA, UK, SWITZERLAND)

Ra2Lab is the data controller for personal data collected in these regions.

Your Rights

You may also have the right to:

- Object to or restrict processing.

- Withdraw your consent at any time (without affecting prior processing).

- Request data portability.

- File a complaint with your local supervisory authority (e.g., edpb.europa.eu, ico.org.uk, or edoeb.admin.ch).

If you have questions about this Privacy Policy, contact us at admin@ra2lab.io.