Privacy Policy

Last Updated: December 2024

Welcome to SugarCheck (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address (if you sign up with email)
• Google account information (if you sign in with Google)
• Password (encrypted and stored securely)
• Account creation date and last login information

1.2 Scan History and Photos

When you use the app to scan product labels:

• Photos of product labels that you choose to scan
• Scan results and analysis data
• Timestamp and metadata associated with each scan

Note: We only access photos that you explicitly choose to scan. We do not access your entire photo library without your permission.

1.3 Subscription Information

If you purchase a subscription:

• Subscription status and purchase history
• Payment information (processed securely through Apple App Store)
• Subscription renewal dates

1.4 Usage Data

We may collect information about how you use the app:

• Number of scans performed
• Features accessed
• App version and device information
• Error logs and crash reports (for app improvement)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your scans and provide analysis results
• Manage your account and subscription
• Send you important updates about the app
• Respond to your inquiries and support requests
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. Third-Party Services

3.1 Supabase

We use Supabase for:

• User authentication and account management
• Storing your scan history and account data
• Database services

Supabase's privacy policy: https://supabase.com/privacy

3.2 Google Sign-In

If you choose to sign in with Google:

• We use Google Sign-In for authentication
• Google may collect information as described in their privacy policy
• We only receive basic profile information (email, name) necessary for account creation

Google's privacy policy: https://policies.google.com/privacy

3.3 Apple App Store

For subscription purchases:

• Payment processing is handled by Apple
• We receive purchase confirmations and subscription status from Apple
• We do not store or process your payment card information

Apple's privacy policy: https://www.apple.com/privacy/

3.4 Backend API

We use our own backend API service to:

• Process and analyze product label images
• Provide sugar content information

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information:

• Data is encrypted in transit using HTTPS
• Passwords are hashed and never stored in plain text
• We use secure authentication tokens
• Access to your data is restricted to authorized personnel only
• Regular security audits and updates

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to provide our services:

• Active accounts: Data is retained while your account is active
• Deactivated accounts: Data is retained for 30 days after account deactivation, allowing you to reactivate if you change your mind
• After retention period: Data is permanently deleted, except where we are required to retain it by law

6. Your Rights (GDPR Compliance)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR):

6.1 Right to Access

You have the right to request access to your personal data and receive a copy of the data we hold about you.

6.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

6.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data. You can delete your account directly in the app, or contact us at info@sugarinspector.com.

6.4 Right to Data Portability

You can request a copy of your data in a structured, machine-readable format.

6.5 Right to Object

You can object to processing of your personal data in certain circumstances.

6.6 Right to Restrict Processing

You can request restriction of processing of your personal data.

To exercise any of these rights, please contact us at info@sugarinspector.com.

7. Children's Privacy

Our app is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

8. Camera and Photo Library Access

The app requires access to your camera and photo library to scan product labels:

• We only access photos that you explicitly choose to scan
• We do not access your entire photo library
• Photos are processed on our servers for analysis and then stored securely
• You can revoke camera/photo access at any time through your device settings

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you a notification through the app (for significant changes)

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our app, you consent to the transfer of your information to these countries.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

12. Contact Us