Privacy Policy for IngreFit: AI Food Scanner

01Scope

This Privacy Policy applies to the IngreFit mobile application, the IngreFit website, backend services used to provide product analysis, subscription-related functionality, customer support, and associated analytics. IngreFit does not currently require users to create a traditional user account with an email address or password. The App uses an installation-specific identifier to operate certain functionality.

02Information We Process

03Special-Category and Health-Related Information

Selections concerning allergies, intolerances or certain health-related dietary restrictions may constitute health-related or special-category personal data under applicable law. IngreFit processes such information only for the purpose of providing the personalization you request and for closely related service functionality. Where applicable law requires explicit consent for this processing, we request such consent separately. You may withdraw that consent at any time through available privacy controls or by contacting us. Withdrawing consent does not affect the lawfulness of processing performed before withdrawal. It may, however, prevent IngreFit from providing personalization features that require the relevant information.

04Artificial Intelligence Processing

IngreFit uses third-party artificial intelligence services, currently including Google Gemini, for certain Premium features such as: recognizing visible food from a photo; reading product-label information when ordinary product data is insufficient; translating product information; and generating explanatory text based on available facts. Before personal data is transferred for third-party AI processing, IngreFit provides an in-app disclosure describing the relevant transfer and requests the permission required by applicable platform rules and law. For an AI request, the information provided to the AI service may include the image being analyzed and relevant contextual preferences needed to produce the requested result, such as goals, diet, flagged allergens, avoided ingredients and language. Third-party AI providers may process technical and request information in accordance with their applicable contractual, security and privacy terms. Provider-side retention may include limited logs for security, abuse prevention, legal compliance or service operation. We do not intentionally use submitted food-analysis images or health-related preferences to build advertising profiles or for targeted advertising. AI results may be incomplete, inaccurate or misleading. AI processing is provided for informational product-analysis features and not for medical diagnosis, medical treatment, allergy-safety certification or other safety-critical decision-making.

05Product Data Sources

IngreFit may retrieve food-product information from Open Food Facts and may combine that information with visible packaging information or AI-assisted analysis. Open Food Facts is a third-party, crowdsourced database. Information obtained from third parties may be incomplete, outdated or incorrect. A product's current physical packaging and information supplied by its manufacturer remain the primary sources for information such as ingredients and allergen declarations.

06Purposes for Which We Use Information

We use information only as reasonably necessary to: provide barcode lookup and product-analysis functionality; provide requested photo and label analysis; personalize results according to preferences you select; calculate and explain product-fit results; provide translations; maintain local scan history and preferences; authenticate subscription entitlements; process and restore purchases through the applicable store; operate, secure, maintain and troubleshoot the Services; prevent fraud, abuse and excessive automated use; understand product usage and improve the Services where permitted; provide customer support; comply with legal obligations; and establish, exercise or defend legal claims where necessary. We do not use allergy information or food-analysis photos for third-party advertising.

07Legal Bases for Processing in the EEA, UK and Similar Jurisdictions

Where the GDPR, UK GDPR or comparable law applies, we rely on one or more of the following legal bases: Performance of a contract or steps at your request. For processing necessary to provide the functionality you request, such as barcode analysis, subscription access or requested AI features. Consent. For processing that requires consent, including certain analytics, transfer to third-party AI where required, camera/photo access, and other optional functionality. Explicit consent. Where required for processing allergy or other health-related information that constitutes special-category personal data. Legitimate interests. Where permitted, for limited purposes such as service security, fraud prevention, troubleshooting and protecting our legal rights, provided those interests are not overridden by your rights and freedoms. Legal obligations. Where processing is required to comply with tax, accounting, law-enforcement, consumer-protection or other applicable legal requirements.

08How We Share Information

We may disclose information only as described in this Policy and as reasonably necessary to operate the Services. Google Gemini Used for certain AI-based analysis, recognition, translation and explanatory features. Google Firebase Used for native App analytics and related technical functionality. RevenueCat Used to manage subscription status, purchase receipts/tokens and entitlements. Apple and Google The applicable platform provider processes purchases, refunds and store-related information under its own terms and privacy practices. Open Food Facts Product barcodes and related product queries may be used to retrieve available crowdsourced product information. Hosting and infrastructure providers Our backend and related technical services may use hosting, networking, monitoring or security providers that process information on our behalf as necessary to operate the Services. Professional advisers and authorities We may disclose information to professional advisers, courts, regulators, law-enforcement authorities or other parties where required by law or reasonably necessary to establish, exercise or defend legal rights. Business changes If all or part of IngreFit is reorganized, transferred, sold or merged, relevant information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards. We require service providers processing personal data on our behalf to use it only for authorized purposes and to provide appropriate protection.

09No Sale of Personal Data and No Targeted Advertising

We do not sell personal data. We do not use food photos, allergy information, dietary preferences or product-analysis data for targeted advertising or cross-context behavioral advertising. The App is not designed around advertising identifiers or an advertising business model.

10International Data Transfers

Some service providers may process information in countries other than the country where you live, including countries outside the European Economic Area. Where required by applicable law, international transfers are protected through recognized legal mechanisms such as adequacy decisions, contractual safeguards, Standard Contractual Clauses, or another valid transfer mechanism.

11Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, subject to legal, security and technical requirements. Local App data. Preferences, history and locally stored thumbnails remain on the device until deleted through available App/device controls, application data is cleared, or the App is uninstalled, subject to operating-system backups outside our control. Analysis images. The IngreFit backend is designed not to intentionally maintain permanent copies of images submitted solely for AI analysis after the relevant request has completed. Third-party AI providers may retain limited request information for the period permitted or required under their applicable service terms, security practices and legal obligations. Analytics. Analytics information is retained according to our configured Firebase/Google Analytics retention settings and applicable legal requirements. Subscription information. Purchase and entitlement information may be retained for as long as reasonably necessary to provide subscription access, restore purchases, prevent fraud and comply with accounting, tax or legal obligations. Store providers and RevenueCat may maintain their own records under their applicable policies. Operational and security records. Technical logs may be retained for as long as reasonably necessary for service operation, security, fraud prevention, dispute resolution and legal compliance. Support correspondence. Support communications may be retained for as long as reasonably necessary to resolve the request and maintain an appropriate record of the interaction.

12Your Choices and Controls

You may: change or remove goals, diet and flagged preferences through the App; delete local scan history where the App provides that control; clear application data or uninstall the App to remove local application storage; decline optional AI data sharing and continue using functionality that does not require it; withdraw consent for future AI transfers where applicable; decline or withdraw optional analytics consent; revoke camera access through operating-system settings; and contact us to exercise applicable privacy rights. Because IngreFit does not use a traditional account, we may need your installation identifier or other reasonable information to determine whether server-side information can be associated with your installation.

13Your Data-Protection Rights

Depending on where you live, you may have rights concerning your personal data, including the right to: obtain information about processing; request access to personal data; request correction of inaccurate data; request deletion; restrict processing; object to certain processing; request data portability; withdraw consent at any time where processing is based on consent; and lodge a complaint with a competent data-protection authority. If you are in Spain, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD). To exercise your rights, contact support@evsi.store. We may need to verify your request before acting on it. Where we cannot reasonably identify information relating to your installation, we may explain the additional information needed to locate it.

14Automated Scores and Personalization

IngreFit may automatically calculate a personalized product-fit score using available product facts and preferences selected by the user. The score is an informational product-comparison tool. It is not a medical diagnosis, health-risk assessment, food-safety determination, allergy-safety certification or legally significant automated decision. The score does not determine access to employment, insurance, healthcare, credit, education, public services or any other legal right or similarly significant benefit.

15Security

We use reasonable administrative, technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration or disclosure. These measures may include encrypted network transport, access controls, data minimization and separation of local and server-side processing. No electronic transmission or storage system can be guaranteed to be completely secure.

16Children's Privacy

IngreFit is not directed to individuals under 18 years of age. You must be at least 18 years old to use IngreFit unless we expressly provide a version of the Services that is legally and contractually authorized for younger users. We do not knowingly seek to collect personal information from children through the Services. If we learn that personal information has been processed from a person who was not eligible to use the Services, we will take reasonable steps required by applicable law.

17Third-Party Services

Third-party databases, AI providers, analytics providers, app stores and billing providers operate under their own terms and privacy practices. This Policy describes how IngreFit uses those providers but does not control independent processing carried out by a third party for its own purposes.

18Changes to This Privacy Policy

We may update this Privacy Policy when the Services, our providers, legal requirements or data practices change. The updated Policy will state a revised effective or “Last updated” date. Where required by law, we will provide additional notice or obtain renewed consent before materially different processing takes effect.

19Contact

For privacy questions, requests or complaints, contact: Evgenii Evsiukov / evsi.store Torrevieja, Spain Email: support@evsi.store