PRIVACY POLICY — INGREDIA
Data Controller: MV Studio, Republic of Croatia
Contact: info@mv-studio.net
Last updated: November 2026
1. DATA WE COLLECT
When you use Ingredia, we collect:
- Account data: email address (Google/Apple sign-in), profile name and photo
- Usage data: products scanned, scan history, allergen profiles, family member profiles (name, age category)
- Device data: device type, OS, app version, language setting, advertising identifier (only if you allow personalised ads)
- Transaction data: subscription status (via RevenueCat)
- Usage statistics: which parts of the app are used (Firebase Analytics) — only if you turn them on; off by default
- Push notification tokens (Firebase Cloud Messaging)
2. HOW WE USE YOUR DATA
We use your data to:
- Provide ingredient scanning and analysis
- Save and display your scan history
- Personalise allergen detection for your profile and family
- Send food safety alerts (if enabled)
- Process subscription payments
- Improve the app through usage statistics, if you allow them
- Comply with legal obligations
3. LEGAL BASIS FOR PROCESSING (GDPR)
For EU/EEA users, we process your data under:
- Contract performance: to provide the app services you requested (Art. 6(1)(b))
- Legitimate interests: app security, fraud prevention (Art. 6(1)(f))
- Consent: usage statistics (Firebase Analytics; off until you turn them on on the consent screen or in Settings; you can turn them off at any time, which stops collection and resets the statistics identifier on your device), push notifications, personalised ads (Google's consent form in the EEA, UK and Switzerland; on iOS also Apple's tracking permission), optional personalisation (Art. 6(1)(a))
- Explicit consent for health data: allergen profiles and family health data are special category data under Art. 9(2)(a). When you first save an allergen profile or a family member, the app asks for your explicit consent to the processing of this health data for the purpose of allergen detection and age-appropriate product analysis; without it, these profiles are not saved. You may withdraw this consent and delete this data at any time.
- Legal obligation: tax and compliance records (Art. 6(1)(c))
4. DATA SHARING & THIRD PARTIES
We share data with:
- Firebase/Google (Google LLC, USA) — authentication, database, analytics, messaging, hosting. Certified under EU-US Data Privacy Framework.
- RevenueCat (RevenueCat Inc., USA) — subscription management. Covered by Standard Contractual Clauses.
- Google AdMob (Google LLC, USA) — ads for users without Premium or Pro. Ads are personalised only if you allow it: in the EEA, UK and Switzerland through Google's consent form, and on iOS also through Apple's tracking permission; otherwise they are not personalised. You can change your choice in Settings → Your Privacy Choices. Subject to Google's Privacy Policy.
- Anthropic (Anthropic Ireland, Limited; processing also in the USA) — reading text from packaging photos (ingredients, nutrition table, front of pack) via Cloud Functions; if it is unavailable, OpenAI reads the same photo. No user PII transmitted; Anthropic does not train models on this data and deletes it within 30 days. Covered by Anthropic's Data Processing Addendum (Standard Contractual Clauses).
- OpenAI (OpenAI LLC, USA) — AI ingredient parsing and product identification via Cloud Functions (no user PII transmitted). Covered by OpenAI Data Processing Agreement.
- Perplexity AI (Perplexity AI Inc., USA) — AI web search for product identification via Cloud Functions (no user PII transmitted).
- Open Food Facts / Open Beauty Facts / Open Products Facts (OpenFoodFacts, France) — public product databases (ODbL licence). No personal data transmitted.
- FDA (US Food & Drug Administration) — public API for food safety recall alerts. No personal data transmitted.
- UPCitemdb / Go-UPC — barcode product metadata lookup. No personal data transmitted.
We do NOT sell your personal data for money. If you allow personalised ads, Google AdMob uses your device's advertising identifier to show ads based on your interests; some US state laws (for example California's) treat this as "sharing" personal information. You can opt out at any time in Settings → Your Privacy Choices.
5. DATA LOCATIONS
Data is stored primarily on Firebase (Google Cloud) servers in Europe (eur3 region: Belgium/Netherlands) and the USA. Details: https://firebase.google.com/docs/firestore/locations">google.com/docs/firestore/locations">https://firebase.google.com/docs/firestore/locations
6. DATA RETENTION
- Account data: retained until account deletion
- Scan history: until you delete it or your account
- Analytics: aggregated, 26 months (Firebase default)
- Subscription records: 7 years for tax/accounting purposes
7. YOUR RIGHTS (EU/EEA — GDPR)
If you are in the European Union or EEA, you have the right to:
- Access (Art. 15): request a copy of your personal data
- Rectification (Art. 16): correct inaccurate data
- Erasure (Art. 17): request deletion ("right to be forgotten")
- Restriction (Art. 18): limit how we process your data
- Portability (Art. 20): receive your data in machine-readable format
- Object (Art. 21): object to processing based on legitimate interests
- Withdraw consent (Art. 7(3)): at any time, without affecting prior lawful processing
- Lodge a complaint: with your national data protection authority
To exercise your rights, contact: info@mv-studio.net — we respond within 30 days.
8. UK USERS (UK GDPR)
If you are in the United Kingdom, the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 apply. You have the same rights as EU users described in Section 7. You may also lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
9. CALIFORNIA USERS (CCPA/CPRA)
If you are a California resident, you have the right to: know what personal information is collected; opt out of the sale or sharing of personal information (we do not sell data for money; personalised ads through Google AdMob can be switched off in Settings → Your Privacy Choices); request deletion of your personal information; non-discrimination for exercising your rights. Contact: info@mv-studio.net
10. INTERNATIONAL USERS
We extend GDPR-equivalent rights to all users globally where legally required:
- Brazil (LGPD — Lei Geral de Proteção de Dados): same rights as Section 7
- Canada (PIPEDA): rights under the Personal Information Protection and Electronic Documents Act
- Australia (Privacy Act / APPs): rights under the Australian Privacy Principles
- South Africa (POPIA): rights under the Protection of Personal Information Act
- Japan (APPI): rights under the Act on the Protection of Personal Information
- Other countries: GDPR-equivalent protections apply
Contact: info@mv-studio.net
11. CHILDREN'S PRIVACY (COPPA & EU)
Ingredia is NOT directed at children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you are a parent or guardian and believe your child has provided personal data, contact us at info@mv-studio.net and we will delete it promptly.
The Family Profiles feature is designed for use BY parents/adults TO analyse products for family members. Data about family members (including children) is stored solely under the adult user's account and is not accessible to third parties.
12. INTERNATIONAL DATA TRANSFERS
Your data may be transferred to and processed in the United States and other countries outside the EU/EEA. Such transfers are covered by:
- EU-US Data Privacy Framework (Google/Firebase)
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK adequacy decisions and UK SCCs where applicable
13. ACCOUNT & DATA DELETION
You can delete your account and all associated data in Settings → Delete Account, or by contacting info@mv-studio.net. Deletion is permanent and processed within 30 days.
14. CHANGES TO THIS POLICY
We may update this Privacy Policy. Significant changes will be notified through the app. The version date is shown at the top.
15. CONTACT
MV Studio
Republic of Croatia