Privacy Policy
Unpackly helps you scan packaged-food labels and understand their ingredients. This policy explains exactly what data the app collects, why, and what happens to it. It is written to match how the app actually works.
1. Data we collect
Account data
- Email address and password, if you register with email. Your password is stored only as a salted bcrypt hash; we cannot read it.
- Apple or Google sign-in. If you sign in with Apple or Google we store the provider's stable account identifier and, when the provider verifies it, the email address it supplies. We never receive your Apple or Google password.
- Preferences. App language and time zone, used to localize analyses and compute daily streaks.
Health profile (sensitive data)
You may optionally add allergies, medical conditions (for example diabetes, hypertension, celiac disease, kidney disease), and a diet preference (for example vegan or halal) to your profile. This is health-related data. We process it for one purpose only: to personalize ingredient analyses and warn you about ingredients relevant to your profile. We never use or disclose health-profile data for advertising, marketing or data-mining purposes, and never share it with third parties for such purposes. You can edit or remove these entries at any time in Profile, and they are deleted with your account. By adding them you consent to this processing, including the sharing with our AI provider described in section 3.
Scan data
- Label photos you take or select are uploaded to our server, which sends them to our AI inference provider Relane (routing to OpenAI models) so the model can read and transcribe the label. This happens transiently: photos are automatically deleted immediately after processing finishes and are not stored by us or retained by the AI provider. Label photos are never used for advertising.
- Recognized label text and analysis results (ingredient text, scores, warnings, timestamps) are stored as your scan history until you delete the scan or your account.
Lists, likes and community contributions
- Shopping lists you create (and their members, when you share a list), and products you like.
- If you confirm or correct a product's ingredient list, that ingredient text joins a shared product knowledge base other users benefit from. The text itself is community data; your account's link to it is removed (anonymized) when you delete your account.
Technical data
- Standard request metadata (IP address, timestamps) processed transiently for security, rate limiting and abuse prevention.
- Advertising. The app shows ads through Google AdMob. We use non-personalized ads only: your health profile, scans and other personal data are never used to target ads. To serve and measure ads and limit repetition, AdMob may process device identifiers and coarse signals under Google's own policies. In the European Economic Area and the UK we ask for your consent first.
We do not collect precise location, contacts or browsing history, and we do not sell your data.
2. How we use your data
- Provide the core service: recognize label text, analyze ingredients, keep your scan history, lists and likes in sync across sign-ins.
- Personalize analyses against your health profile.
- Secure the service: authentication, session management, rate limiting, abuse prevention.
- Send transactional email only (for example password-reset links). No marketing email.
3. Third-party processors
- Relane / OpenAI (label reading and AI analysis). Your label photo is sent to our AI inference provider Relane, which routes the request to OpenAI models, so the model can read and transcribe the label; the photo is processed transiently and is not stored or retained by Relane or OpenAI. To generate the ingredient analysis we also send the recognized ingredient text and your health-profile settings (allergies, medical conditions, diet) and app language. Your name, email address and account identifiers are not included, and none of this data is used for advertising. Relane and OpenAI process this data solely to read the label and return the analysis.
- Google AdMob (advertising). Serves the non-personalized ads described above and processes the device signals needed to do so. Google acts as an independent controller for that data under its own policies.
- Apple / Google (sign-in). When you choose Sign in with Apple or Google, those providers authenticate you under their own privacy policies.
- Email delivery. Password-reset emails are delivered through our email provider.
Product identifiers (product name, brand, barcode) from a scan may also be used in web searches to locate a product's published ingredient list.
4. Data retention
| Data | Retained |
|---|---|
| Label photos | Not stored — deleted immediately after processing finishes |
| Scan history (text, results) | Until you delete the scan or your account |
| Account, profile, lists, likes | Until you delete your account |
| Community ingredient texts | Kept, but unlinked from your account on deletion |
| Sessions (refresh tokens) | Until logout, expiry, or account deletion |
5. Deleting your data
You can permanently delete your account in the app: Profile → Account → Delete Account. This deletes your account, health profile, scan history, likes, memberships and sole-owned lists, and signs out all sessions. Shared shopping lists with other active members are handed over to the longest-standing member instead of being destroyed for them. Community ingredient texts you contributed remain but are anonymized. Deletion is immediate and irreversible.
If you cannot access the app, email [email protected] from your account's email address and we will delete the account for you.
6. Security
Passwords are hashed with bcrypt; session and reset tokens are stored only as SHA-256 hashes; API access requires short-lived signed tokens; production traffic is served over TLS.
7. Children
Unpackly is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect data from them.
8. International transfers
Our servers and processors (including Relane and OpenAI) may be located outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
9. Your rights
Depending on your jurisdiction (for example GDPR or CCPA) you may have rights to access, correct, export, restrict or delete your personal data, and to withdraw consent for health-profile processing at any time (remove the entries in Profile or delete your account). You also have the right to object to processing and to lodge a complaint with your local supervisory authority. Contact [email protected] to exercise any right.
10. Changes
We will update this policy as the app evolves and change the date above. Material changes will be announced in the app.
Contact
Fuwilabs OÜ · [email protected]