Privacy Policy

Last updated: 20 September 2026

This policy explains what Ingredo.app collects, why, and your rights over it. Ingredo.app is an ingredient-scanning app for food and cosmetics.

What we collect

An anonymous account identifier (via Firebase Authentication) so your scan history can sync across your devices. Your condition and diet profile — for example whether you have marked Celiac, IBS, or a nut allergy — is health-related data. Scoring happens on our servers, so when you scan a product your profile is sent with that request in order to work out what the product means for you. If you are signed in, your profile is also saved to your account so it survives a reinstall and follows you to another device. Your scan history and saved products. We do not ask for your name, and we do not require an email address to use the app.

How we use it

Your profile is used to personalise the scoring of products you scan: it is sent with each scan so the result can tell you whether that product is a problem for you specifically, and — when you are signed in — stored against your account so you do not have to set it up again. Your scan history and favourites are stored so they are available across sessions. We never use your profile or what you scan for advertising, and we do not sell any data. The one exception to how the app talks to third parties is ad measurement, described below.

Who is responsible for your data

The data controller is Hypermetron, Greece. You can reach us about anything on this page at legal@ingredo.app.

Legal basis and where data is processed

Ingredo.app is offered in the EU and processes personal data under the GDPR. Product and ingredient data comes from Open Food Facts and Open Beauty Facts. Authentication is provided by Google Firebase and application data is stored with our database provider. These providers act as processors on our behalf.

Health data and your consent

The conditions, diets and allergies you select are special category data under Article 9 of the GDPR. We process them solely on the basis of your explicit consent, given in the app before you choose any of them (Article 9(2)(a)). They are sent to our servers with each scan so we can personalise that result, and stored against your account when you are signed in. We use them for nothing else: never for advertising, never sold, and never shared with third parties. We do not keep a record of which products you scanned against your conditions — the scan itself is stored as history, the profile as your current settings, and the two are not joined into a profile of your health over time.

You can withdraw your consent at any time by deleting your profile in the app, or your account and all associated data from Settings. Withdrawing consent does not affect processing carried out before you withdrew it.

Measuring our advertising (Meta)

We advertise the app on Facebook and Instagram. To know whether those ads work, the Android app includes Meta's software development kit (SDK), provided by Meta Platforms Ireland Ltd. It tells Meta that the app was installed and opened, and sends two anonymous counts: that a scan produced a score, and that a label photo was submitted. Meta uses this to match installs to the ads that led to them.

We send Meta no barcode, no product, no score or verdict, and nothing about your conditions, diets or allergies. The app does not collect your device's advertising ID: that permission is removed from the app entirely. Meta receives the technical data any app connection carries, such as your IP address and device model, and processes it under its own privacy policy, including outside the EU under the EU–US Data Privacy Framework.

The legal basis is our legitimate interest in measuring whether our advertising brings people to the app (Article 6(1)(f) GDPR). You can object at any time by writing to privacy@ingredo.app.

The beta list

While the app is awaiting store approval, our website offers a beta list instead of a download button. If you join it we store your email address, which platform you are waiting for, and the language of the page you signed up on. The legal basis is your consent, given by submitting the form. We use it for exactly one thing: to email you the install link when the app is available. We do not add you to any other mailing, and we do not share the list. Your address is deleted after that email is sent, or sooner if you ask us at privacy@ingredo.app.

How long we keep it

If you are signed in, your condition and diet profile is kept as part of your account, along with a record that you consented to health-data processing, your scan history and your favourites, until you delete your account — after which they are removed. Deleting your profile in the app removes it from your account too. If you are not signed in, your profile is held on your device and is sent to us only for the moment a scan is scored; we do not store it. Reports and label photographs you submit are retained without a link to your identity so the catalogue keeps the correction.

Your rights

You have the right to access your data, to have inaccurate data corrected, to have your data erased, to receive a copy in a portable format, to restrict or object to processing, and to withdraw consent. To exercise any of these, contact us at privacy@ingredo.app. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).

Cookies and analytics on this website

This website uses Google Analytics to count page views and understand which pages people find useful. Google Analytics stores cookies on your device and processes data on Google's infrastructure, including outside the EU under the EU–US Data Privacy Framework. Because this is not strictly necessary to run the site, we ask for your consent first.

Nothing is loaded and no cookie is stored until you accept. If you decline, or simply ignore the banner, Google Analytics is never loaded at all. You can change your mind at any time using the "Cookie settings" link in the footer. Your choice itself is stored in your browser's local storage, which carries no identifier and is not shared with anyone. The Ingredo.app mobile app does not use Google Analytics — this section applies to this website only.

Contact

For any privacy question, contact us at privacy@ingredo.app.