1 · Information we collect

When you use IngredIQ we collect: account data (your email and a hashed password, or your Google sign-in ID); activity data (supplement and food searches, supplement stacks you save, photos of labels you analyze); feedback (the message and optional email you submit through the in-app feedback form); and local-only state (selected language, units, disclaimer acknowledgement, beta-modal dismissal — these live in your browser's localStorage and never leave your device).

2 · Why we process this data

• Authentication & sync — to sign you in and keep stacks/history tied to your account across devices.
• AI analysis — searches and label photos are sent to Anthropic's Claude API to generate the analysis. Photos are not retained server-side beyond the live API request.
• Community-fed cache — successful analyses are stored anonymously (no user ID, just the query and result) so the next user with the same query gets an instant free response.
• Service improvement — feedback messages help us fix bugs and prioritize features.

3 · Third parties who process your data

We do not share your data with any other parties.

4 · What we do not do

• We do not sell your data.
• We do not use third-party analytics SDKs (no Google Analytics, Mixpanel, Plausible, etc.) at the time of writing. If we add privacy-respecting analytics in the future we will update this notice.
• We do not use ad trackers.
• We do not share search history or saved stacks with anyone.

5 · Health-data caveat

Saved supplement stacks and search queries can reveal health interests. We treat them as personal information but they are not handled to medical-grade standards. If your jurisdiction requires HIPAA, GDPR Article 9, or equivalent special-category-data protections, this app is not a suitable place to store such information.

6 · Your rights

• Access — your profile shows your saved stacks and history.
• Delete — to delete your account and all associated data, contact us.
• Export — to receive a copy of your saved stacks, contact us.
• Withdraw consent — sign out and delete your account.

EU/UK users have additional rights under GDPR (rectification, restriction, portability, objection). California residents have rights under CCPA. To exercise any of these, contact us at the email below.

7 · Data retention

• Account data — kept until you delete your account; purged within 30 days.
• Search history & saved stacks — kept for as long as your account exists.
• Feedback — kept indefinitely so we can track and respond to issues.
• Cache entries — anonymized (no user ID); persist indefinitely as part of the community catalog.
• Label photos — not retained beyond the live API request.
• Local-only data — stays in your browser until you clear it.

8 · International data transfers

Your data may be processed in the United States and other countries where our service providers operate. By using IngredIQ you consent to this processing.

9 · Children

IngredIQ is not intended for users under 13 (under 16 in the EU/UK). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

10 · Changes to this notice

We may update this notice as the product evolves. Material changes will be communicated in-app. The current version and effective date appear at the bottom of this notice.

11 · Contact

For privacy questions, data requests, or to delete your account: privacy@ingrediq.app.