Privacy Policy – AllergenFinder

Last updated: 29 July 2025

This Privacy Policy explains what data we collect, how we use and share it, and your choices. It applies to the AllergenFinder mobile app and related pages at findout4.me/allergenfinder/. For terms governing use of the app, see the Terms of Use.

Controller & Contact

Controller: Yuri Facundo Teodoro Soares
Address: Rua Quinta de Santo Amaro, 11 – 6D, 2600-285 Vila Franca de Xira – Lisbon – Portugal
Email: [email protected]

Data We Collect (Data Accessed)

• Account & Authentication (via Clerk.com): unique identifiers, sign-in method, email address, display name and profile image if provided.
• Google OAuth scopes (when you choose “Sign in with Google”): openid, email, profile (basic profile info). We do not request access to Gmail, Drive, Calendar, Contacts, or other restricted scopes.
• Allergies & Restrictions you enter: text you provide to tailor scans.
• Label images & text: photos you upload or take for analysis.
• Usage & device info: basic events (e.g., scans created, timestamps), app version, and device model. No advertising identifiers are used.
• Support communication: messages you send to our support email.

Why We Use Your Data (Data Usage)

• Authenticate users and keep sessions secure.
• Perform label analysis against your saved restrictions and show results.
• Operate, maintain, and improve features; diagnose issues and prevent abuse.
• Comply with legal obligations and respond to lawful requests.

Permissions & Examples

• Camera: to photograph product labels for analysis (example: “Scan a cereal box ingredient list”).
• Photo Library: to import an existing image of a label (example: “Choose a photo from your gallery to analyze”).

How We Process & Store Data

Data is processed in the cloud using the following providers acting as processors:

• Clerk.com – authentication and account data.
• Convex.dev – secure serverless database/backend.
• Google (Gemini 1.5 Flash) – we send label images/text to the model only to generate the analysis returned to you. We do not allow this data to be used to build advertising profiles.

Data is encrypted in transit and at rest where supported by our providers. Access is limited to authorized personnel under confidentiality obligations.

Retention

• Account data: kept while your account is active. If you delete your account, we delete or irreversibly anonymize personal data within 30 days; some backups may persist for up to 30 additional days.
• Label images/scans: kept until you delete them or delete your account.
• Support emails: kept as long as necessary to address your request and for record-keeping.

Sharing

We do not sell personal data. We share data only with processors listed above, strictly to provide the service, and with authorities when legally required.

Google API Services Disclosure

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only request the scopes openid, email, and profile to authenticate you and do not access or store Gmail, Drive, Calendar, Contacts, or other Google user data.

International Transfers

Data may be processed in countries outside your own. When we transfer personal data internationally, we rely on appropriate safeguards (e.g., standard contractual clauses) as applicable.

Your Rights

Depending on your location (e.g., EU/EEA/UK GDPR or Brazil LGPD), you may have rights to access, correct, delete, restrict or object to processing, and data portability. To exercise these rights, use the in-app Delete account option or email us at [email protected].

Children

Users under 13 may use the app without creating an account and only under supervision. We do not knowingly collect personal data from children under 13 (or under the local age of digital consent, if higher) without verifiable parental consent.

Changes

We may update this Policy from time to time. Material changes will be notified in-app or by email. Continued use after the effective date means you accept the changes.

Questions? Contact: [email protected]