Labelly

Privacy Policy

Last updated: 13 May 2026

This Privacy Policy explains what information Labelly collects when you use the Labelly mobile app, how we use it, and the rights you have under UK and EU data protection law (UK GDPR and EU GDPR).

We've tried to write this in plain English. If anything is unclear, email support@labelly.app.

1. Who we are

Labelly is operated as a sole-trader project based in the United Kingdom. In this policy "Labelly", "we", "us" and "our" refer to that operator. For the purposes of UK and EU GDPR we are the data controller for the personal data described here.

2. What this policy covers

This policy covers the Labelly iOS app and any web pages we host at labelly.app. It does not cover third-party services we link to or rely on — those have their own privacy policies, summarised in §6 below.

3. Information we collect

3.1 Information you give us directly

• Account details — when you sign up we receive your email address, and (if you use Sign in with Apple or Google) your display name and profile photo. If you use email/password, your password is salted and hashed by Firebase Authentication; we never see or store it in plain text.
• Health preferences — allergens, dietary styles and conditions you enter during onboarding. This data lives on your device and in our database, linked to your account.
• Scan history — every product you scan with the barcode scanner is saved against your account so you can see it later.
• Contributed product data — when you add a missing product via the camera flow, the photos you take and the data extracted from them are stored in our database to improve our catalogue.
• Issue reports — when you flag incorrect product info, we store the barcode, your selected issue type and any free-text details you provide.

3.2 Information collected automatically

• Device data — basic device model and iOS version, used by Firebase to diagnose crashes and performance issues.
• Purchase state — RevenueCat receives a pseudonymous user ID and the fact that you bought a subscription. We never see your card or Apple ID payment details — those stay with Apple.
• App usage — local-only counters (e.g. scans-today, daily streak) that live on your device in iOS UserDefaults.

3.3 Camera and photo library

The app uses your camera to read barcodes and (in the contribute flow) to photograph product labels. Photos used for contribution are sent to our AI provider for label-text extraction (see §6) and stored against the contributed product. The camera is not used for anything else, and we do not access your photo library unless you tap "Choose from Library" in the contribute flow.

4. How we use your information

• To run the app — show your scan history, points, allergen warnings, subscription state, and personalised recommendations.
• To improve the product database — your contributions help fill gaps in our catalogue. Contributed product data may be shown to other users.
• To handle issue reports — when you flag wrong product info we use it to correct entries.
• To process subscriptions — Apple handles the payment; RevenueCat tracks whether you have an active entitlement.
• To keep things secure — detect abuse, prevent fraudulent contributions, fix crashes.
• To communicate with you — only for service messages (e.g. password reset). We don't currently send marketing emails.

5. Legal bases (UK / EU GDPR)

We rely on the following legal bases:

Activity	Legal basis
Running your account, showing scan history, syncing preferences	Performance of a contract (you signed up to use the app)
Processing your subscription	Performance of a contract
Crash and performance diagnostics	Legitimate interests (keeping the app working) — balanced against your privacy
Storing contributed product data publicly	Consent (you choose to submit a contribution) + legitimate interests
Responding to your support requests	Legitimate interests

6. Third parties we share data with

We use a small number of well-known service providers (processors) to run Labelly. Each is bound by their own privacy commitments:

Service	Purpose	Data shared
Firebase (Google LLC)	Authentication, database (Firestore), crash reporting	Email, user ID, profile data, scan history, contributions
RevenueCat (RevenueCat Inc.)	Subscription state tracking	Pseudonymous user ID, purchase events
Anthropic (Anthropic PBC)	AI extraction of nutrition data from contributed photos	Photo of product label only. Per Anthropic's API terms, inputs are not used to train their models.
Open Food Facts (Open Food Facts, France)	Source of the public product database we look up barcodes against	Barcode lookups only — no PII shared
Apple (Apple Inc.)	App distribution, in-app purchases, Sign in with Apple	Subject to Apple's own privacy policy
Cloudflare (Cloudflare Inc.)	Hosting these legal pages	Standard web request logs (IP, user-agent)

We do not sell your personal data to anyone, and we do not share it with advertisers.

7. International data transfers

Some of our processors are based outside the UK / EU (notably Google, RevenueCat and Anthropic, which are US companies). When personal data is transferred outside the UK / European Economic Area, we rely on the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum to provide an equivalent level of protection.

8. Data retention

• While your account is active: we keep your account data for as long as you use Labelly.
• If you delete your account: we delete your profile, scan history, and personal data from Firebase Auth and Firestore within 30 days. Contributed product data may remain in the public catalogue in anonymised form (i.e. no longer linked to your account) since other users rely on it.
• Backups: residual copies in routine backups are cycled out within 90 days.
• Issue reports: kept for up to 12 months to track product-data quality.

9. Your rights

Under UK / EU GDPR you have the right to:

• Access your personal data — request a copy.
• Rectify incorrect information — edit your profile in-app, or email us.
• Erase your data — use the "Delete Account" button in the Profile screen, or email us.
• Restrict or object to certain processing.
• Portability — receive your data in a portable format.
• Withdraw consent at any time, where we rely on consent.
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email support@labelly.app. We aim to respond within 30 days.

10. Children

Labelly is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has signed up, please email us and we will delete their account. Some features (subscription billing) are intended for users who can legally enter a contract in their jurisdiction (16+ in the UK).

11. Security

We use industry-standard security: encryption in transit (HTTPS / TLS), encryption at rest for our database, hashed passwords (Firebase Authentication), and tightly scoped API keys. No system is perfectly secure — if you discover a vulnerability, please report it responsibly to support@labelly.app.

12. Changes to this policy

If we change this policy in a material way, we will update the "Last updated" date and, for substantive changes, notify you in the app or by email before the change takes effect.

13. Contact

Questions, complaints or data requests: