Privacy Policy
Ingrelo ("Ingrelo", "we", "us") publishes the Ingrelo ingredient scanner app (the "App"). This policy explains, in plain terms, what the App processes, why, and who receives it. If anything here is unclear, write to support@ingrelo.com.
In short
| Data | Leaves your device? |
|---|---|
| Photos you take of a label | No — read on your device |
| Ingredient text read from the label | Yes — sent for analysis |
| Scan history saved in the App | No — stored on your device only |
| Skin profile (skin type, goals, special states) | Yes — sent with the analysis request |
| Subscription status and an anonymous purchase identifier | Yes — processed by Apple and RevenueCat |
| Name, email, phone number, address | No — we never ask for them |
| Account or login | None — the App has no sign-in |
| Advertising identifier, ad SDKs, cross-app tracking | No |
| Crash reporting | Yes — anonymous crash reports (app version, device info, error summary; never your label text or photos) |
| Analytics and diagnostic reporting | No — disabled in released builds |
We do not sell personal information and we do not share it for advertising.
1. What the App processes
a) Photos of labels — processed on your device
When you photograph a label, the App uses on-device text recognition to read the ingredient list. Your photo is not uploaded to us or to anyone else. Only the text that is read from the photo is used, as described below.
b) Ingredient text and your skin profile — sent for analysis
When you run an analysis, the App sends the following over an encrypted (HTTPS) connection to our backend, hosted on Supabase:
- the ingredient text read from your label;
- if you completed the in-app questionnaire: your skin type, your skin goals, and any special states you selected — which may include pregnancy;
- the interface language, and the product name hint if the App tries to look up a product it could not fully read.
Our backend forwards this to OpenAI, which generates the ingredient analysis that is returned to your device.
We do not store your label text or your skin profile in a database. They are processed in memory to produce the response you see and are not retained afterwards. Our infrastructure providers may keep short-lived operational logs — for example request timestamps, error messages and technical metadata — for debugging, reliability and abuse prevention.
c) No account, no contact details
The App has no sign-up and no login. Your profile, preferences, usage counters and your scan history are stored locally on your device in the App's private storage. We never receive your name, email address, phone number, contacts or precise location.
Scan history means the result screen you were shown for a scan that completed successfully, together with the label text that produced it. It stays on your device, it is never uploaded to us, and it exists so you can reopen past results. There is no server-side copy of your scans. Uninstalling the App removes this history from your device.
d) Diagnostics and crash reporting
To keep the App stable, the released version sends anonymous crash reports when something goes wrong. A crash report contains an anonymous installation identifier, the app version, the device platform and operating system, and a short technical description of the error (a stack trace). It never contains the label text, your photos, or your skin profile. These reports help us fix crashes and prevent abuse, and are kept for up to 90 days.
Separate, more detailed diagnostic event reporting remains switched off in the released version of the App. Some internal test builds can report technical events (app version, device model, operating system version, language, and events such as "analysis did not find an ingredient list") to help us diagnose failures. Those reports also never include the label text, and never include your photos or your skin profile.
e) Purchases and subscriptions
The optional Ingrelo Pro subscription is sold through the app store you downloaded the App from — Apple on iOS, Google on Android — and that store processes the payment. We never receive your card, bank or billing details. To validate purchases and keep track of subscription status we use RevenueCat as our subscription-management provider. RevenueCat assigns an anonymous app user identifier and processes the purchase receipt together with the technical information needed to validate it, such as the product purchased, the subscription status and renewal dates, the app version and basic device information.
What we get back is only whether an active subscription exists, so the App can unlock Pro features. Because the App has no sign-in and never asks for contact details, your subscription is not linked to your name, email address or phone number. Purchase terms are in our Terms of Service.
f) No advertising or tracking
The App contains no advertising SDKs, no third-party analytics SDKs and no social plug-ins. We do not collect the advertising identifier and we do not track you across other apps or websites, so the App does not ask for tracking permission.
2. Why we process it
- To read your label — the photo is processed on your device, which is why your image never leaves it.
- To produce the analysis — the ingredient text is analysed, and personalised against the profile you chose to enter.
- To keep the service working — to diagnose failures, prevent abuse and keep costs reasonable.
We do not use your data for advertising, profiling, or training our own or anyone else's machine-learning models.
3. Who receives it
- Supabase — cloud infrastructure that hosts our backend and receives requests on our behalf.
- OpenAI — the language-model provider that generates the analysis. Under OpenAI's API terms, data submitted through its API is not used to train its models.
- Apple and Google — app distribution and payment processing for in-app purchases, depending on the store you downloaded the App from.
- RevenueCat — our subscription-management provider, which validates App Store and Google Play purchases and reports whether a subscription is active.
- Legal and safety — we may disclose information if we are legally required to, or where necessary to protect the rights, safety and security of our users or of Ingrelo.
We do not sell, rent or trade personal information, and we do not disclose it for cross-context behavioural advertising.
4. Health-related information
If you tell the App that you are pregnant, that single fact is used only to add the relevant ingredient cautions to your analysis. It is not used for any other purpose, it is not used for advertising, and it is not stored on our servers. You can remove it at any time by editing your profile in the App.
5. How long we keep it
- Label text and skin profile: not stored by us — nothing to delete on our side.
- Photos: never uploaded; any copy on your device is under your control.
- Profile and preferences: stored on your device until you clear them or delete the App.
- Subscription records: held by Apple and by RevenueCat under their own retention policies, so purchases can be validated and restored. We do not keep a separate copy of your purchase history.
- Crash reports: kept for up to 90 days, then deleted.
- Short-lived operational logs held by our providers: expire automatically under those providers' retention schedules.
See Data Deletion for how to clear data or ask us to delete anything held on our side.
6. Security
Data is transmitted over HTTPS. Credentials for our backend and for the language-model provider are held server-side only — the App itself contains no secret keys. No system is perfectly secure, but because we hold so little, the impact of any incident is limited.
7. International transfers
Our providers process data in the United States. If you use the App from another country, the data described in section 1(b) will be transferred to and processed in the United States.
8. Children
The App is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us and we will delete it.
9. Your choices and rights
- Edit or clear your profile in the App at any time, or delete the App to remove locally stored data.
- Manage or cancel an Ingrelo Pro subscription in your App Store or Google Play account settings. The store handles payment and refunds, so those requests go to Apple or Google rather than to us.
- Ask us to delete any diagnostic records that could be linked to your device — see Data Deletion.
- California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we do not use sensitive personal information for purposes beyond providing the service. You may still contact us to exercise your rights.
- If you are in the EEA or the UK: we process the data in section 1(b) to perform our service to you at your request, and to keep the service secure. You may contact us to exercise your rights of access, correction, deletion and objection.
10. Changes to this policy
We may update this policy as the App evolves. The effective date at the top will change, and material changes will be highlighted on this page or in the App before they take effect.
11. Contact
Privacy questions and requests: support@ingrelo.com. We aim to respond within two business days.