Privacy Policy

Last updated: April 2026

1. Introduction

IngredientGuard ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and what rights you have over it.

By using IngredientGuard, you agree to the collection and use of information described in this policy.

2. Data We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile photo from Google. If you sign in with a phone number, we receive that phone number. This data is stored securely in Firebase Authentication.

Health Profile (optional)

If you choose to set up a Health Profile, we store:

• Food allergies you select

• Your skin type

• Your health goals

This data is entirely optional. You can view, edit, or permanently delete it at any time from your profile settings inside the app.

Scan History

When you scan a product and save the result, we store:

• The raw ingredient text extracted from the product label

• The AI-generated analysis (rating, summary, benefits, concerns)

• The product type (food or external use)

• The date and time of the scan

We do not store photos of your product labels. Images are processed on-device using OCR and discarded immediately after the text is extracted.

3. How We Use Your Data

We use your data exclusively to provide the IngredientGuard service:

• Account data is used to authenticate you and associate your scan history with your account.

• Health profile data is sent alongside ingredient text to the AI analysis service so it can highlight ingredients specifically relevant to your allergies and health goals.

• Scan history is stored so you can review past analyses at any time.

We do not use your data for advertising.
We do not sell your data to any third party.

4. Third-Party Services

IngredientGuard uses the following third-party services:

Google Firebase

We use Firebase Authentication (for sign-in) and Cloud Firestore (to store your scan history and health profile). Firebase is operated by Google LLC. Data is stored in Google's cloud infrastructure. See Google's Privacy Policy .

Anthropic Claude AI

Ingredient text (and optionally your health profile summary) is sent to the Anthropic Claude API for AI-powered analysis. Anthropic processes this data to generate the safety rating, summary, benefits, and concerns shown in the app. See Anthropic's Privacy Policy .

Google ML Kit (On-Device OCR)

Text recognition (OCR) is performed entirely on your device using Google ML Kit. Product label images are never uploaded to any server.

Google Sign-In

If you use Google Sign-In, Google authenticates your identity and shares basic profile information (name, email, photo) with us. See Google's Privacy Policy for details.

5. Data Retention

Your scan history and health profile are retained as long as your account is active. Scans you delete in the app are hidden from your history view but retained internally to prevent accidental data loss. You may request permanent deletion of all data at any time (see Section 6).

If you delete your Health Profile from the app, the data is permanently removed from our servers immediately.

6. Your Rights

You have the right to:

• Access the data we hold about you

• Edit or delete your Health Profile at any time from within the app

• Request permanent deletion of all your data (scan history, health profile, and account) by contacting us at the address in Section 10

• Withdraw consent at any time by deleting your account

If you are in the European Union, you have additional rights under the GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

7. Data Security

All data is transmitted over HTTPS and stored in Google Firebase, which provides industry-standard encryption at rest and in transit. Access to your data is restricted to your authenticated account only — other users cannot access your scans or health profile.

8. Children's Privacy

IngredientGuard is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to request account deletion, please contact us:

📧 knowwhatsin.ai@gmail.com 

AI analysis results are for informational purposes only and do not constitute medical advice. Always consult a qualified healthcare professional for medical decisions.