Privacy Policy

Effective 27 April 2026

Ingredoo Pty Ltd ("Ingredoo", "we", "our", "us") operates the Ingredoo mobile application and website at https://ingredoo.com(the "Service"). This policy explains what information we collect, how we use it, and the choices you have. We are based in Australia and comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

1. Information we collect

• Account information. If you sign in, we receive your name, email and account identifier from Apple or Google. We never receive your Apple or Google password.
• Scan history. Barcodes you scan are sent to the Open Food Facts API to retrieve product data. The list of your scanned products is stored locally on your device, and — if you are signed in — synced to your account on our servers (Firebase / Google Cloud).
• Personal preferences. Optional dietary toggles (sensitive digestion, diabetes, heart health, child-friendly) are stored on your device and, if signed in, in your account.
• Subscription status. Apple and Google process purchases. We receive a verified entitlement status — never your payment details.
• Diagnostic data. Anonymous crash logs and usage analytics (Firebase Analytics, Plausible) so we can fix bugs and improve features.

2. How we use information

• To provide product information, scoring and personal verdicts.
• To sync your data across your devices when you sign in.
• To validate active subscriptions.
• To diagnose crashes and improve the Service.
• To respond to support requests you send us.

We do not sell your personal information, and we do not use scan history for advertising.

3. Where your data lives

Account data and synced scan history are stored in Google Cloud (Firebase) data centres. Open Food Facts is operated by a French non-profit; sending a barcode to it transmits the barcode but no personal identifier.

4. Sharing

We share information only with:

• Service providers who run our infrastructure (Google Cloud / Firebase, Apple, Vercel, Plausible Analytics) under contract.
• Authorities when required by law or to protect rights and safety.

5. Your choices

• You can delete your account from inside the app or by emailing us.
• You can clear scan history at any time from app settings.
• You can disable analytics in your device settings.
• You can request a copy of the personal information we hold by emailing support@ingredoo.com.

6. Children

Ingredoo is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

7. Security

We use industry-standard transport encryption (HTTPS/TLS) and rely on Firebase's authentication and access controls. No method of transmission or storage is perfectly secure; we will notify affected users in accordance with the Notifiable Data Breaches scheme if a breach occurs.

8. Changes

We may update this policy. Material changes will be notified in-app or by email when we have one. The current version is always at https://ingredoo.com/privacy.

9. Contact

Questions or requests: support@ingredoo.com.