Privacy Policy
Ingrelo ("Ingrelo", "we", "us") publishes the Ingrelo ingredient scanner app (the "App"). This policy explains, in plain terms, what the App processes, why, and who receives it. If anything here is unclear, write to support@ingrelo.com.
In short
| Data | Leaves your device? |
|---|---|
| Photos you take of a label | No — read on your device |
| Ingredient text read from the label | Yes — sent for analysis |
| Skin profile (skin type, goals, special states) | Yes — sent with the analysis request |
| Name, email, phone number, address | No — we never ask for them |
| Account or login | None — the App has no sign-in |
| Advertising identifier, ad SDKs, cross-app tracking | No |
| Analytics and diagnostic reporting | No — disabled in released builds |
We do not sell personal information and we do not share it for advertising.
1. What the App processes
a) Photos of labels — processed on your device
When you photograph a label, the App uses on-device text recognition to read the ingredient list. Your photo is not uploaded to us or to anyone else. Only the text that is read from the photo is used, as described below.
b) Ingredient text and your skin profile — sent for analysis
When you run an analysis, the App sends the following over an encrypted (HTTPS) connection to our backend, hosted on Supabase:
- the ingredient text read from your label;
- if you completed the in-app questionnaire: your skin type, your skin goals, and any special states you selected — which may include pregnancy;
- the interface language, and the product name hint if the App tries to look up a product it could not fully read.
Our backend forwards this to OpenAI, which generates the ingredient analysis that is returned to your device.
We do not store your label text or your skin profile in a database. They are processed in memory to produce the response you see and are not retained afterwards. Our infrastructure providers may keep short-lived operational logs — for example request timestamps, error messages and technical metadata — for debugging, reliability and abuse prevention.
c) No account, no contact details
The App has no sign-up and no login. Your profile, preferences and usage counters are stored locally on your device in the App's private storage. We never receive your name, email address, phone number, contacts or precise location.
d) Diagnostics
Diagnostic reporting is switched off in the released version of the App. Some internal test builds can report technical events (app version, device model, operating system version, language, and events such as "analysis did not find an ingredient list") to help us diagnose failures. Those reports never include the label text, and never include your photos or your skin profile. If we ever enable diagnostics in a released version, we will update this policy first.
e) Payments
The version of the App currently distributed does not include in-app purchases. If we introduce paid features, purchases will be processed by Apple, and where applicable by our subscription-management provider (RevenueCat). We would receive only the subscription status needed to unlock features — never your card or payment details. Purchase terms are in our Terms of Service.
f) No advertising or tracking
The App contains no advertising SDKs, no third-party analytics SDKs and no social plug-ins. We do not collect the advertising identifier and we do not track you across other apps or websites, so the App does not ask for tracking permission.
2. Why we process it
- To read your label — the photo is processed on your device, which is why your image never leaves it.
- To produce the analysis — the ingredient text is analysed, and personalised against the profile you chose to enter.
- To keep the service working — to diagnose failures, prevent abuse and keep costs reasonable.
We do not use your data for advertising, profiling, or training our own or anyone else's machine-learning models.
3. Who receives it
- Supabase — cloud infrastructure that hosts our backend and receives requests on our behalf.
- OpenAI — the language-model provider that generates the analysis. Under OpenAI's API terms, data submitted through its API is not used to train its models.
- Apple — app distribution, and payment processing for any in-app purchase.
- Legal and safety — we may disclose information if we are legally required to, or where necessary to protect the rights, safety and security of our users or of Ingrelo.
We do not sell, rent or trade personal information, and we do not disclose it for cross-context behavioural advertising.
4. Health-related information
If you tell the App that you are pregnant, that single fact is used only to add the relevant ingredient cautions to your analysis. It is not used for any other purpose, it is not used for advertising, and it is not stored on our servers. You can remove it at any time by editing your profile in the App.
5. How long we keep it
- Label text and skin profile: not stored by us — nothing to delete on our side.
- Photos: never uploaded; any copy on your device is under your control.
- Profile and preferences: stored on your device until you clear them or delete the App.
- Short-lived operational logs held by our providers: expire automatically under those providers' retention schedules.
See Data Deletion for how to clear data or ask us to delete anything held on our side.
6. Security
Data is transmitted over HTTPS. Credentials for our backend and for the language-model provider are held server-side only — the App itself contains no secret keys. No system is perfectly secure, but because we hold so little, the impact of any incident is limited.
7. International transfers
Our providers process data in the United States. If you use the App from another country, the data described in section 1(b) will be transferred to and processed in the United States.
8. Children
The App is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us and we will delete it.
9. Your choices and rights
- Edit or clear your profile in the App at any time, or delete the App to remove locally stored data.
- Ask us to delete any diagnostic records that could be linked to your device — see Data Deletion.
- California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we do not use sensitive personal information for purposes beyond providing the service. You may still contact us to exercise your rights.
- If you are in the EEA or the UK: we process the data in section 1(b) to perform our service to you at your request, and to keep the service secure. You may contact us to exercise your rights of access, correction, deletion and objection.
10. Changes to this policy
We may update this policy as the App evolves. The effective date at the top will change, and material changes will be highlighted on this page or in the App before they take effect.
11. Contact
Privacy questions and requests: support@ingrelo.com. We aim to respond within two business days.