Privacy Policy

ToxFree ("we," "us," the "App") is designed to respect your privacy. We built it to work without accounts and to keep the data it holds to a minimum. This policy explains what information the App and this website handle, how, and with whom.

1. On-device information

The following stays on your iPhone and is not sent to us:

• Onboarding answers — your name and the concerns/goals you select. These are stored locally and used to personalize your results.
• Scan history & daily score — the products you've scanned, their results, and any photo you captured are saved locally on your device. Deleting the App removes them.

2. Information processed when you scan

To analyze a product, the App sends the following to our secure server (hosted on Supabase), which forwards it to our AI provider (Anthropic) to generate the result:

• The product barcode and/or a photo of the product or its ingredient label you capture.
• The ingredient text retrieved from public product databases.
• The concern categories you selected during onboarding (e.g., "sensitivity," "hormones"), so results can be tailored. This is not tied to your name or identity.

Photos are used only to produce your analysis and are not retained on our servers after the request completes. To speed up repeat scans and reduce cost, an anonymized mapping of barcode → analysis result may be cached on our server. This cache contains product information only — no personal identifiers, no images.

3. Information collected automatically

• Purchase & subscription data — when you subscribe, our payments provider (RevenueCat) and Apple process an anonymized purchase identifier and receipt information to manage your entitlement and restore purchases. We never see your card details.
• Basic technical data — like any internet service, our servers may process device/network information (such as IP address) transiently to deliver requests and prevent abuse.
• Crash & error reports — if the App crashes or a scan fails, a technical report (error message, the screen and code location involved, device model, OS and app version) is sent to Sentry so we can fix it. Reports don't include your name, scan photos or screenshots.
• Advertising measurement (only with your permission) — we use Meta's SDK to measure whether our ads on Facebook and Instagram lead people to install and subscribe. It records app installs and opens, finishing onboarding, and starting a trial or subscription (sent by our payments provider, RevenueCat). If you allow tracking in Apple's "Allow tracking?" prompt, this includes your device's advertising identifier; if you decline, it doesn't. You can change this any time in iOS Settings > Privacy & Security > Tracking.
• Product analytics — to understand how the App and this website are used and improve them, we record usage events: screens and pages viewed, taps and clicks, and milestones such as finishing onboarding, completing a scan (its score and verdict, not the product photo), or starting a subscription. These events are tied to a random identifier, not to your name or email, along with basic device information (model, OS version, language, approximate region). We do not send your onboarding name or your concern answers to analytics providers.

4. Third-party services

We rely on a small number of reputable providers, each acting only to deliver the App's features:

• Apple — App Store distribution and in-app purchase processing.
• RevenueCat — subscription management and entitlement checks.
• Anthropic (Claude) — the AI model that analyzes ingredients. Data sent for analysis is not used to train its models.
• Supabase — our secure backend that proxies analysis requests and stores the anonymized product cache.
• Open Beauty Facts / Open Food Facts — public, community ingredient databases queried by barcode.
• Cloudflare — hosting and delivery of this website.
• Google Firebase Analytics — product analytics in the App.
• HeyCatch — product analytics in the App and on this website.
• Sentry — crash and error reporting.
• Meta — measuring our Facebook and Instagram ads (advertising identifier only with your permission).

5. Cookies & tracking

The App asks for permission, through Apple's "Allow tracking?" prompt, before sharing your device's advertising identifier with Meta for ad measurement (section 3). If you decline, the App still works fully and no advertising identifier is shared. We use this only to measure our own ads; we don't sell your data or let others advertise in the App. This website sets a first-party cookie and browser storage holding a random identifier for the product analytics in section 3, and runs no advertising trackers.

6. Data retention

• On-device data (onboarding, history) is kept until you delete it or remove the App.
• Analysis request contents are processed transiently and not stored beyond the anonymized barcode cache described above.
• Purchase records are retained by Apple/RevenueCat per their policies for as long as needed to support your subscription and legal obligations.

7. Your rights & choices

Because we don't hold an account or profile tied to you, the simplest controls are in your hands: clearing the App's data or deleting the App removes your local information. Depending on where you live (for example, under the GDPR or California's CCPA/CPRA), you may have rights to access, correct, or delete personal data, and to object to certain processing. To make a request or ask a question, contact us at [email protected]. We do not sell or "share" personal information as those terms are defined under applicable law.

8. Security & children

We use industry-standard measures to protect data in transit and at rest. No method is 100% secure, but we work to safeguard your information. ToxFree is not directed to children under 13 (or the minimum age in your region), and we do not knowingly collect their data.

9. International transfers & changes

Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for such transfers. We may update this policy as the App evolves; material changes will be reflected by the "Last updated" date above.

10. Medical & informational notice

ToxFree provides AI-generated, educational ingredient information. It is not medical advice, not a diagnosis, and not a substitute for a qualified professional. Please read the full disclaimer in our Terms & Conditions.

Contact

Questions about privacy? Email [email protected].