Privacy Policy
Last updated: [date]
[Company Name] ("we", "us", "our") operates the Aleaf mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
1. Information We Collect
Account Information
- Name, email address, and phone number (optional)
- Profile photo, if you choose to upload one
- Password (stored securely by Firebase Authentication; we never see or store it in plain text)
- If you sign in with Google: your Google account name, email, and profile photo, as authorized by you
Profile & Preferences
- Age range, country, and preferred language
- Dietary preferences and allergies you choose to add, used to flag relevant ingredients in scan results
- Boycott-filtering and notification preferences
Usage Data
- Products you scan, your scan count, your favourites, and your saved list
- Feedback you submit through the app
- Device push-notification token, used to deliver notifications to your device (only while notifications are enabled)
- Basic diagnostic and crash data used to keep the app stable
Camera & Photos
We request camera access to scan product barcodes. Barcode images are processed to identify a product and are not stored or transmitted beyond what's needed to complete the lookup. Photo library access is only used if you choose to upload a profile picture or scan a barcode from an existing photo.
2. How We Use Your Information
- To create and manage your account
- To show personalized scan results (e.g. flagging your allergies or dietary preferences)
- To maintain your saved lists, favourites, and scan history
- To send you notifications you've opted into
- To respond to feedback and support requests
- To maintain, secure, and improve the App
3. How We Store & Protect Your Data
Your data is stored using Google Firebase (Authentication, Cloud Firestore, and Cloud Storage). Firebase applies industry-standard security practices, including encryption in transit and at rest. We restrict access to your data to what's necessary to operate the App.
4. Third-Party Services
We use the following third-party services, each governed by its own privacy policy:
- Google Firebase (Authentication, Firestore, Storage, Cloud Messaging, Analytics, Crashlytics, Remote Config)
- Google Sign-In, if you choose to sign in with your Google account
We do not sell your personal information to third parties.
5. Data Retention
We retain your account data for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us at [support email].
6. Your Rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at [support email].
7. Children's Privacy
The App is not directed at children under 13 (or the relevant minimum age in your jurisdiction), and we do not knowingly collect personal information from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We'll notify you of material changes through the App or by other reasonable means.
9. Contact Us
If you have questions about this Privacy Policy, contact us at [support email].