Last updated: October 24, 2026

1. App and Developer Identification

This Privacy Policy applies to the following Ingredify services:

• The Android app listed on Google Play as Allergy Checker & Food Scanner (package ID: co.ingredify.mobile).
• The iOS app listed on the Apple App Store as Ingredify - Food Scanner (App Store ID: 6469339926).
• The Ingredify website at www.ingredify.one.

The Android and iOS apps may use different store listing names, but both are official Ingredify apps covered by this policy.

Ingredify is developed, published, and operated by EL Hassan Matar, the developer identified in the Google Play store listing. EL Hassan Matar is the individual legal operator and data controller responsible for Ingredify. In this policy, "Ingredify," "we," "us," and "our" refer to EL Hassan Matar.

We respect your privacy and are committed to protecting your personal data. This policy explains how we handle information when you use the Ingredify mobile app or visit our website.

2. Data We Collect

Website visitors. You do not need an account to use the website. If you accept cookies, we collect analytics and advertising data (see section 4). Our hosting provider processes technical data such as your IP address when a page is requested.

Account data (mobile apps). When you create an account or sign in with email, Google or Apple, we store your email address, your name if provided, your profile picture (from Google, Apple or one you upload) and the identifier your sign-in provider gives us. If you use Sign in with Apple's private relay address, we store that relay address.

Allergy and dietary information. The allergens you choose and your ingredient watchlist. This is health-related information. We use it only to run the features you ask for, and we do not use it for advertising.

Scans and photos. When you scan a food label, ingredient list or cosmetic product, the app reads the text from the photo and sends it to an AI service to produce the result. Some features may send the photo itself to the AI service. Scan results (ingredients, nutrition and allergen findings) are saved in your scan history. Photos you add for calorie tracking and cosmetic scans are stored in your account's file storage, as is your profile picture. The app asks for camera permission to take these photos; you can refuse it and still use other features.

Lists and plans. Grocery lists, items, categories, meal plans, recipe ratings and calorie entries you create. If you share a list, the people you add can see that list and its members. When you invite someone, we store their email address to match them to the list.

Purchases. Subscriptions are processed by Google Play or the Apple App Store. We use RevenueCat to check whether your subscription is active; it receives a purchase identifier and your account identifier. We never see your card or payment details.

Usage and diagnostics. Firebase Analytics records events such as screens viewed, sign-up, sign-in, first scan, and whether an AI request succeeded and how long it took. Firebase Crashlytics records crash and error reports: your device model, operating system version, app version and what the app was doing. These reports carry an identifier derived from your account by a one-way hash. It is not your email address or your account ID, but it lets us tell whether several crashes came from the same person.

Advertising. The free version of the apps shows ads provided by Google AdMob, which may use your device's advertising ID. You can reset your advertising ID or limit ad personalisation in your device settings.

3. How We Use Your Data

• To provide the apps: sign you in, run scans and allergen checks, and keep your lists, history and settings.
• To check allergens and ingredients with AI, as you request.
• To manage subscriptions and remove ads for subscribers.
• To measure how the apps are used and to find and fix crashes and errors.
• To show ads in the free version.
• To reply to a question you send us.

We do not sell your personal data, and we do not use your allergy information for advertising.

Allergen results come from automated analysis and can be wrong or incomplete. Always read the product label and, if you have a serious allergy, check with the manufacturer or a qualified professional.

4. Third-Party Services

We use the following providers to run Ingredify. Each processes data under its own privacy policy, and they may process data in countries other than yours, including the United States.

• Supabase: sign-in, database and file storage (account data, allergy information, scans, lists and photos).
• Microsoft Azure: hosts our AI proxy and reads text from photos. The proxy logs only which AI service was called, whether it worked and how long it took, not the photo or text.
• OpenAI and Anthropic: AI analysis of label text and, for some features, photos.
• Google (Firebase): analytics, crash reports, website hosting and sign-in with Google.
• Google AdMob: ads in the free version.
• RevenueCat: subscription status.
• Google Play and Apple: payments and app distribution.

Website analytics. If you accept cookies, we use Google Analytics (through Firebase) to measure how the website is used, for example which pages are viewed and your approximate location.

Website advertising. If you accept cookies, we show ads provided by Google AdSense. Google and its partners may use cookies and similar identifiers to show and measure ads, including personalised ads. If you decline, Google is told not to store advertising cookies, and any ads shown are limited and not personalised. You can learn more at How Google uses information from sites or apps that use its services.

Your choice. When you first visit the website, a banner asks you to accept or decline these cookies. You can change your choice at any time with the "Cookie settings" link in the footer of every page.

Allergen checker on the website. The ingredient list you type into the website allergen checker is sent to an AI service to produce the result, and your IP address is used to limit free checks per day. The text is not linked to an account. The website also uses Google reCAPTCHA to block automated abuse.

5. Keeping and Deleting Your Data, and Your Rights

We keep your account data and the content you create until you delete it or delete your account. Firebase keeps analytics and crash data for a limited period set by Google.

Deleting your account. In the app, open your profile and choose "Delete account". To ask for anything else to be removed, email us at the address in section 7.

Your rights. Depending on where you live, you can ask to access, correct, export or delete your personal data, to object to or restrict some processing, and to withdraw consent at any time. To exercise a right, email us. You can also complain to your local data protection authority.

Website visitors. You can withdraw your cookie consent with the "Cookie settings" link in the footer, and clear your browser cookies and site data at any time to remove anything stored on your device.

Security. Data is sent over encrypted connections, and access to each user's data in our database is restricted to that user.

6. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.

7. Contact Us

If you have any questions about this privacy policy, please contact the developer and operator:
EL Hassan Matar
Ingredify mobile apps and website
hmatar@ingredify.one