IngredientGPT Privacy Policy

Effective <May ‑ 2025>

1. Who we are

IngredientGPT is published by Julian Laxman, Vaughan, Ontario, Canada (“we”, “us”, “our”).

Questions about this policy or requests to exercise your privacy rights can be sent to [email protected].

2. Who this policy applies to

This policy applies to anyone who installs or uses the IngredientGPT iOS app anywhere in the world. The app is not intended for children under 13 and we do not knowingly collect personal data from them.

3. What data we collect and why

Category Examples Purpose Legal basis (EU/UK users)
Profile age‑range, sex, skin & hair type, allergies personalise ingredient risk scores Consent
Media photo of product label, ingredient text recognised by OCR analyse ingredients via OpenAI Consent
Purchases StoreKit transaction ID, start/end dates deliver paid subscription features & receipts Contract
Analytics screen views, button taps, device model, iOS version, country (no GPS or IDFA) understand feature usage, debug & improve performance Legitimate interest
Crash logs automatic iOS crash reports diagnose stability issues Legitimate interest

We do not collect location, contact lists, advertising identifiers, or health records.

4. How we process your data

  1. On‑device first. Ingredient photos are stored only on your device.
  2. When you tap “Analyse”, the image (and the text we extract) are sent through our Cloudflare Worker (Canada/US) to OpenAI for ingredient analysis.
  3. The OpenAI response is saved locally so you can view it later; we do not store it on our own servers.

5. Third‑party service providers

Provider Role Safeguards for international transfers
Apple (StoreKit 2, App Analytics) payments, receipts, analytics, crash logs Apple complies with GDPR & CCPA
Cloudflare (reverse proxy) routes and protects API traffic Standard Contractual Clauses (“SCCs”) in Cloudflare DPA Connect, protect, and build everywhere
OpenAI generates ingredient analysis OpenAI retains API inputs/outputs ≤ 30 days by default to detect abuse
PostHog product analytics platform used to understand feature usage and improve performance Stores anonymized event data in PostHog cloud. PostHog protects EU/UK transfers under the European Commission’s Standard Contractual Clauses.

No data is sold or rented to advertising networks.

6. Retention

Data Retention period Deletion method
Ingredient photos on device only; deleted when you uninstall the app iOS app removal
OCR text at OpenAI ≤ 30 days (provider default) automatic purge by OpenAI
Scan history on device until you delete the scan or uninstall in‑app “Delete” or iOS removal
Purchase records 7 years (tax & accounting) secure archival deletion
Crash logs & analytics 12 months automatic rolling deletion
PostHog event data 12 months automatic rolling deletion by PostHog Cloud

7. Your rights