Privacy Policy

Last updated: 20 July 2026

This policy explains what Ingredo.app collects, why, and your rights over it. Ingredo.app is an ingredient-scanning app for food and cosmetics.

What we collect

An anonymous account identifier (via Firebase Authentication) so your scan history can sync across your devices. Your condition and diet profile — for example whether you have marked Celiac, IBS, or a nut allergy — is health-related data, but it is processed only on your device and is never sent to us. Your scan history and saved products. We do not ask for your name, and we do not require an email address to use the app.

How we use it

Your profile is used to personalise the scoring of products you scan. Your scan history and favourites are stored so they are available across sessions. We do not use your data for advertising, and we do not sell it.

Who is responsible for your data

The data controller is Hypermetron, Greece. You can reach us about anything on this page at legal@ingredo.app.

Legal basis and where data is processed

Ingredo.app is offered in the EU and processes personal data under the GDPR. Product and ingredient data comes from Open Food Facts and Open Beauty Facts. Authentication is provided by Google Firebase and application data is stored with our database provider. These providers act as processors on our behalf.

Health data and your consent

The conditions, diets and allergies you select are special category data under Article 9 of the GDPR. We process them solely on the basis of your explicit consent, given in the app before you choose any of them (Article 9(2)(a)). We use them only to personalise your product results. We never use them for advertising, never sell them, and never share them with third parties.

You can withdraw your consent at any time by deleting your profile in the app, or your account and all associated data from Settings. Withdrawing consent does not affect processing carried out before you withdrew it.

How long we keep it

Your condition and diet profile always stays on your device — it never reaches our servers, whether or not you have an account. If you have an account, we keep a record that you consented to health-data processing, plus your scan history and favourites, until you delete your account, after which they are removed. Reports and label photographs you submit are retained without a link to your identity so the catalogue keeps the correction.

Your rights

You have the right to access your data, to have inaccurate data corrected, to have your data erased, to receive a copy in a portable format, to restrict or object to processing, and to withdraw consent. To exercise any of these, contact us at privacy@ingredo.app. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).

Contact

For any privacy question, contact us at privacy@ingredo.app.