Last updated: May 4, 2026
This Privacy Policy explains how FUNGEE LLC ("we," "us," "our," or "FUNGEE LLC") collects, uses, shares, retains, and deletes information when you use the IngrediCheck website (the "Site") and mobile applications (the "App").
We collect personal information only when it is needed to operate, secure, support, and improve the Services, or when you choose to provide it. We do not sell your personal information.
We use Supabase for authentication, database, storage, and backend services. Depending on how you use the Services, we may collect a Supabase user ID, guest or anonymous session identifiers, authentication metadata, email address, and information returned by Google Sign-In or Sign in with Apple. Google and Apple process sign-in information under their own privacy policies.
IngrediCheck evaluates grocery products against the food preferences you choose to provide. We may collect family profiles, member names, avatar choices, generated avatar references, food notes, allergies, intolerances, dietary restrictions, health-related food concerns, lifestyle preferences, ethical preferences, taste preferences, regional preferences, and invite or family-sharing information.
When you scan, search for, or submit product information, we may process barcodes, product names, ingredients, nutrition facts, allergen statements, package photos, source URLs, product database matches, analysis results, favorites, feedback, votes, comments, and scan history. Camera access is used to scan barcodes and capture product or package photos you choose to submit.
If you use IngrediCheck chat features, we may process and store your messages, conversation context, assistant responses, uploaded chat images, and related conversation metadata so the chat can answer questions and maintain conversation history.
We may collect app-generated or platform-derived device identifiers, platform, operating system version, app version, build number, timezone, locale, preferred language, store country, notification permission status, push notification subscription identifiers, network request metadata, IP address, error logs, diagnostics, and security events. We use OneSignal to help deliver push notifications.
We use PostHog in our mobile apps to understand app usage, diagnose bugs, measure feature performance, and improve reliability. PostHog may collect app events, screen and lifecycle events, device and session metadata, diagnostic logs, network telemetry, screenshots, and session replay data. Session replay may capture app screens, images displayed in the app, and text entered into app fields. We use Vercel Analytics and Vercel Speed Insights on our website to understand traffic and performance. Apple and Google may provide app store analytics, diagnostics, and review-related information.
Where purchases, tips, or subscriptions are offered, they are processed by the applicable app store or payment provider, such as Apple App Store or Google Play. We do not receive or store your full payment card details. We may receive transaction, product, entitlement, and subscription status information needed to provide purchased features and support.
If you contact us, request account deletion, or send feedback, we collect the information you include in that request. Our website may store newsletter form submissions in your browser's local storage and may open your email client so you can send messages directly to us.
We use the information we collect to operate and secure the Services, create and maintain accounts, authenticate users, sync data across devices, manage family profiles, personalize product and ingredient analysis, provide scan and chat history, process images and product information, deliver push notifications, respond to support requests, troubleshoot bugs, detect abuse, analyze usage, improve product quality and AI accuracy, maintain product databases, enforce our terms, and comply with legal obligations.
We may disclose your information in response to subpoenas, court orders, or other legal requirements; to exercise our legal rights or defend against legal claims; to investigate, prevent, or take action regarding illegal activities, suspected fraud or abuse, violations of our policies; or to protect our rights and property.
In the future, we may sell to, buy, merge with, or partner with other businesses. In such transactions, user information may be among the transferred assets.
We share information with service providers that help us run the Services, including Supabase for authentication, database, storage, and edge functions; Fly.io and related cloud infrastructure for backend services; OneSignal for push notifications; PostHog for analytics and session replay; Vercel for website hosting, analytics, and speed insights; Apple and Google for sign-in, app distribution, app review, app store analytics, and purchases where applicable; and product data providers such as OpenFoodFacts or our hosted product inventory.
IngrediCheck uses AI systems to analyze ingredient lists, product information, product images, chat messages, and user-provided food preferences. Information you submit for analysis may be processed by our AI infrastructure and third-party AI or inference providers, which may include Anthropic, OpenAI, Google Gemini, Groq, Cerebras, and other providers configured for a particular feature. These providers process information to return model outputs, maintain service security and reliability, and comply with their legal obligations.
We retain account-linked app data while your account is active or as needed to provide the Services. After you delete your account or submit a verified deletion request, we remove or de-identify account-linked records from active systems within 30 days, unless we need to keep limited information for legal, tax, accounting, fraud prevention, security, dispute resolution, or support reasons. Backup copies may persist until they are overwritten or expire in the ordinary course of business, generally within 90 days.
Operational logs, diagnostics, analytics, crash data, and security records are retained only as long as reasonably needed for reliability, security, debugging, product improvement, or legal compliance. Support emails and privacy requests are retained as long as needed to respond to the request and maintain a record of our response. De-identified, aggregated, or non-identifying product information, model outputs, analytics, and product database contributions may be retained after account deletion.
You can request deletion in the app by opening Settings, choosing Delete Data & Account, and confirming the deletion prompt. The app sends a deletion request to our backend and signs you out. If you are using the app without a signed-in account, you can use Reset App State to clear local app data from your device; resetting local app state does not delete server data linked to a signed-in account.
You can also request deletion at ingredicheck.app/delete-account or by emailing owner@ingredicheck.app. To help us verify and process the request, include the email address or sign-in provider associated with the account, or enough information to identify the account or app session.
When deletion is completed, we delete or de-identify account identifiers, food profile records, family member records tied to your user, scans, uploaded scan images, chat conversations, uploaded chat images, feedback, device-user login links, and push notification links associated with your account, subject to the retention exceptions described above. Deletion may not remove product facts, de-identified product database entries, aggregate analytics, support correspondence, app store transaction records, security records, or legal records that no longer identify you or that we must retain.
You can update or remove food preferences in the app, delete scans and local app data where the app provides those controls, turn off camera or notification permissions in your device settings, unsubscribe from or disable push notifications, sign out of your account, or request account deletion. You can also contact us for help with privacy requests.
We use reasonable administrative, technical, and organizational measures to protect information, including access controls, authentication, and cloud security controls. However, no system is completely secure, and we cannot guarantee absolute security.
Information may be processed, stored, and used outside of the country in which you are located. Data privacy laws vary across jurisdictions, and different laws may be applicable to your data depending on where it is processed, stored, or used.
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.
We do not use advertising cookies. Our website and apps may use local storage, secure storage, browser storage, session storage, or similar technologies to operate the Services, remember preferences, maintain sessions, cache content, store local app state, and understand performance. OAuth providers such as Google and Apple may use cookies or browser storage during sign-in.
If you have questions about this Privacy Policy or want to make a privacy request, contact us at owner@ingredicheck.app.
From time to time, we may change and/or update this Privacy Policy. Changes will be posted on this page with an updated date. If changes are material, we may provide additional notice where required.