Privacy Policy

Last updated: July 26, 2026

Your privacy matters. This policy explains what information Food Exposé collects, how it is used, and what choices you have. We keep things simple: we collect as little as possible and never sell your data.

🔒 We collect only what is necessary to provide the service. We never sell your personal information to third parties.

1. Information We Collect

Account information (stored securely in our database):

First name — collected when you create an account (typed directly, or shared by Apple/Google during sign-in). Used only to personalize the app's greeting; never shared with third parties.
Email address — collected when you create an account or sign in with Apple or Google. Used only to identify your account and send essential service emails (e.g., password reset, email confirmation). We do not send marketing emails without your explicit opt-in.
Authentication provider — whether you signed in via Apple, Google, or email/password. No passwords are stored by us — authentication is handled by Supabase and the respective provider.
Subscription status — whether you have an active Pro subscription, tied to your account so it follows you across devices.
Product requests — if you submit a request to add a product that isn't yet in our database, the barcode, product name, and brand you provide are stored in our database and associated with your account, so we can review and add it.

Anonymous data (never linked to you):

Product-interaction analytics — which products and categories are viewed in the app and their scores, with no account, device, or identity linkage of any kind. Used only in aggregate to understand shopper trends and improve the catalog.

Usage data (tied to a random install code, not to you):

App-usage analytics — events about how the app itself is used: when it is opened or closed, which setup steps are finished, when a first scan happens, and when the subscription screen is shown, dismissed, or leads to a purchase. Used to find where the app is confusing or broken. These events include a random install code — a random string of characters created on your device the first time you open the app. It lets us see that somebody came back a week later without knowing who. It is not your device's identifier, it is not built from anything about you or your phone, it is never connected to your account, name, or email, it is never shared with advertisers or anyone else, and it is erased for good when you delete the app.

Data stored only on your device:

Scan history — barcodes and product names you have scanned, stored locally using your device's storage.
App preferences — dietary preferences and allergen settings you configure, stored locally on your device.

2. Camera

Food Exposé requests access to your device camera solely to scan product barcodes. Camera data is processed entirely on your device in real time and is never stored, transmitted, or used for any other purpose. You can deny camera access at any time in your device's Settings; the app will still function using manual barcode entry.

3. Purchases & Subscriptions

Subscription purchases are processed entirely through Apple's App Store. We never see or store your payment information. Apple's privacy policy governs the handling of your payment data.

We use RevenueCat to manage subscription status verification. RevenueCat receives your user ID (linked to your Food Exposé account) to confirm whether a valid subscription is active and to track your subscription history. You can review RevenueCat's privacy policy at revenuecat.com/privacy.

4. Product & Nutritional Data

When you scan a product barcode, the app queries the Open Food Facts API to retrieve product names, ingredients, and nutritional information. This request contains only the barcode number — no personal or device information is included. Open Food Facts is a free, public collaborative database.

5. Analytics & Crash Reporting

We do not use any third-party analytics services. The analytics we collect are our own, and they are described in Section 1.

Product-interaction events — which products get viewed and what they scored — carry no identifier at all. There is nothing in them that could point back to you, your account, or your phone.

App-usage events — opening the app, finishing setup steps, seeing or dismissing the subscription screen — carry a random install code, so we can tell whether people come back to the app over time. Without it we cannot tell one person returning five times from five different people. That code is a random string made on your device; it is never linked to your account, name, or email, it is never shared with advertisers or data brokers, it is never used to target ads, and deleting the app erases it permanently. We do not sell any of this data.

We use Sentry, a third-party crash-reporting service, to detect and fix bugs. When the app encounters an error, Sentry receives the error message and a technical stack trace only. We configure Sentry to never attach your identity, account information, IP address, or device identifiers to these reports. Crash reports cannot be linked back to you or your account.

6. Children's Privacy

Food Exposé is not directed at children under the age of 13. We do not knowingly collect any personal information from children. If you believe a child has provided information through the app, please contact us and we will address it promptly.

7. Data Retention & Deletion

Local data (scan history and preferences) is stored only on your device. You can delete all app data locally at any time by using the "Clear History" button in the Scan History screen, or by uninstalling the app.

Account deletion: If you choose to delete your Food Exposé account, you can initiate deletion from the app's Profile screen under "Data & Privacy." This permanently removes your account and associated data (email, authentication provider, subscription status) from our servers. Account deletion is immediate and cannot be undone.

8. Third-Party Links

The app may display information about companies and their publicly reported activities. Links to external websites are for reference only. We are not responsible for the privacy practices of any third-party websites.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and note the change in the app's update release notes. Your continued use of the app after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:
jamesadventuremarketing@gmail.com