Privacy Policy

1. Introduction

IngredIQ ("we", "our", or "us") operates the IngredIQ mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our app. Please read this policy carefully. If you disagree with its terms, please discontinue use of the application.

2. Information We Collect

Information you provide directly:

• Email address (used for account creation and authentication)
• Full name (optional, used to personalise your experience)
• Profile photo (optional, stored on Cloudinary)
• Health profile information you choose to enter (dietary restrictions, conditions)

Information collected automatically:

• Food label images you scan (processed and immediately discarded — not stored)
• Scan results and ingredient analysis history
• App usage data and session information
• Device information (platform, OS version)

3. How We Use Your Information

• Provide and operate the IngredIQ service
• Authenticate your identity and maintain your account
• Analyse food labels using AI and return personalised results
• Store your scan history for future reference
• Send transactional emails (OTP codes, account notifications)
• Process subscription payments through Google Play / RevenueCat
• Improve the accuracy and performance of our AI models

4. Data Sharing

We do not sell your personal data. We share information only with trusted service providers necessary to operate our service:

• OpenAI — AI ingredient analysis (images are not stored by OpenAI)
• Google Cloud Vision — OCR text extraction from food labels
• Resend — Transactional email delivery
• Cloudinary — Profile photo storage
• RevenueCat — Subscription management
• Railway — Application hosting and database

All providers are bound by their own privacy policies and data processing agreements.

5. Data Retention

We retain your account data for as long as your account is active. Scan history is retained until you delete it or close your account. You may request deletion of your account and all associated data at any time through the app (Profile → Delete Account) or by contacting us directly.

6. Security

We use industry-standard security measures including JWT authentication, encrypted data transmission (HTTPS), and bcrypt password hashing. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Children's Privacy

IngredIQ is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will delete it promptly.

8. Your Rights

Depending on your location, you may have the following rights:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Object to processing of your personal data
• Data portability

To exercise any of these rights, contact us at the email below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. Continued use of IngredIQ after changes constitutes acceptance of the updated policy.