Privacy Policy

1. Who we are and scope

This Privacy Policy explains how APPIFY STUDIOS LLC (“Appify Studios,” “we,” “us,” or “our”) handles information when you use the GoodForMe mobile application and related services (collectively, the “Service”).

GoodForMe does not require or provide a traditional user account. For privacy questions or requests, contact us at [email protected].

2. Information we process

The information processed depends on the features you choose to use:

• Dietary profile stored on your device. Allergens, intolerances, dietary preferences or conditions, a severe-allergy setting, custom restrictions, language and app settings, and whether you enabled AI analysis.
• Scan history stored on your device. Barcode, product name, brand, result summary, and scan time for recently scanned products.
• Barcode and product information. A detected barcode is sent through the GoodForMe backend to retrieve public product details such as product name, brand, ingredients, allergen statements, and nutrition values.
• Ingredient-label scans. When you choose to scan a package label, GoodForMe temporarily captures a photo and extracts text from it on your device. The photo is not uploaded or added to your photo library and is deleted after text extraction. Extracted text is shown for your review. Only ingredient text you confirm is sent through the GoodForMe backend for label analysis. Confirmed nutrition text is sent only if you choose to use the optional AI chat about that label.
• AI response reports. If you choose to report an AI response, GoodForMe sends that single response, the report reason you select, and whether the response came from general, product, or label chat to the GoodForMe backend. The report request does not include your prompt, full conversation history, contact details, dietary profile, or RevenueCat App User ID. A reported AI response may itself reflect information used to generate it.
• Subscription information. RevenueCat processes a pseudonymous App User ID, product and entitlement information, purchase status, renewal status, and related store transaction information. Apple or Google processes the payment; we do not receive or store your full payment-card number.
• Service and security information. Our backend and providers may process a pseudonymous identifier, protected session token, preferred language, IP address, approximate country information derived from the IP address, request time, response status, and limited device or network information needed to deliver and secure requests, apply rate limits, diagnose failures, and prevent abuse. GoodForMe does not request device location permission or collect precise GPS location.
• Support information. If you email us, we receive your email address and the content and technical details you choose to include.

We do not use advertising SDKs, sell personal information, or share personal information for cross-context behavioral advertising.

3. Camera and permissions

GoodForMe requests camera permission to detect product barcodes and, when you choose the ingredient-label scanning feature, to capture a package label for on-device text extraction. Barcode detection occurs on your device, and the camera preview is not uploaded.

For an ingredient-label scan, the App temporarily stores the captured photo in its private cache, performs optical character recognition on your device, and then deletes the photo. The photo is not added to your photo library and is not uploaded to GoodForMe, its backend, or an AI provider.

Only the detected barcode number and label text that you review and confirm are sent through the GoodForMe backend. Confirmed nutrition text may also be sent when you choose optional AI chat about that label and have enabled AI analysis. You can remove camera permission in your device settings, but camera-based barcode and label scanning will not work until permission is granted again.

4. How we use information

We process the limited information described above to:

• retrieve product information for a scanned barcode;
• process ingredient text that you reviewed and confirmed after on-device label scanning;
• compare label data with the dietary profile stored on your device;
• provide optional AI explanations and chat responses after your consent;
• receive and review AI responses that you explicitly report to improve safety, quality, and accuracy;
• process, verify, restore, and maintain subscription access;
• establish protected anonymous backend sessions;
• operate, secure, troubleshoot, and improve Service reliability;
• apply usage limits and detect fraud or misuse;
• respond to support, privacy, and legal requests; and
• comply with applicable legal, tax, accounting, and platform obligations.

Depending on where you live, our legal bases may include performing the Service you request, your consent for optional AI processing, our legitimate interests in security and service operation, and compliance with legal obligations.

5. Optional AI processing

AI analysis is off unless you enable it. When enabled, GoodForMe may send product label and nutrition information, relevant dietary restrictions, deterministic comparison results, messages you enter, and recent conversation context to Google Gemini or another AI provider disclosed in the App to generate an explanation or response.

We do not intentionally include your contact details or pseudonymous RevenueCat App User ID in AI requests. If you type personal information into a chat message or custom restriction, that content may be processed as part of a request. Avoid entering information you do not want an AI provider to process.

If you choose “Report response,” GoodForMe sends only the selected AI response, your report reason, and its source category to the GoodForMe backend. It does not include your prompt or full conversation history in that report request. Reports are rate-limited and reviewed to help improve AI safety, quality, and accuracy.

You can disable AI analysis in Settings at any time. This prevents new AI requests but does not undo processing already completed. AI responses are informational, may be wrong, and are not medical advice or a food-safety guarantee.

6. Service providers and sharing

We disclose limited information only when needed to provide a feature you request, operate or protect the Service, complete a transaction, respond to you, comply with law, or complete a corporate transaction. Relevant providers include:

• GoodForMe backend and hosting providers: protected sessions, barcode requests, limited caching, security, and service delivery.
• Open Food Facts: public product information matched to a barcode, subject to its terms and applicable open-data licenses.
• Google Gemini or the AI provider disclosed in the App: optional AI explanations and chat responses after consent, subject to the provider’s terms and privacy practices.
• RevenueCat: subscription status, entitlements, pseudonymous identifiers, and purchase management. See the RevenueCat Privacy Policy.
• Apple and Google: app distribution, payments, subscription management, and related platform services under their own privacy policies.
• Email and support providers: messages you choose to send to us.
• Authorities, advisers, or transaction parties: when required by law or reasonably necessary to protect rights, prevent fraud, or support a merger, financing, acquisition, or sale.

We require providers acting on our behalf to handle information for the applicable service and under appropriate contractual or legal obligations.

7. Retention and deletion

Ingredient-label photos are temporary. The App processes them on your device and deletes them after text extraction; the photos are not uploaded or retained by GoodForMe. Extracted label text remains in the current in-app flow as needed to provide the feature and is handled as described in this Policy if you confirm and submit it.

Your dietary profile and scan history remain on your device until you delete them, clear app storage, or uninstall GoodForMe. The in-app “Delete all data” control resets the local profile and scan history, deletes the current anonymous Appwrite authentication identity, and removes the current GoodForMe backend session from secure device storage.

Deleting local app data does not cancel a subscription and does not delete transaction records held independently by Apple, Google, or RevenueCat. Those providers retain records under their own policies and legal or financial obligations.

We retain limited backend security logs, AI response reports, support communications, and service-side records only for as long as reasonably needed for the purpose collected, dispute resolution, fraud prevention, service security, and applicable legal obligations. Public product responses may be cached to improve performance and reliability.

To request help with service-side information not removable in the App, email [email protected]. We may need information to verify and locate the request, and we may retain information where law permits or requires it.

8. Your choices and rights

• Decline AI processing during onboarding or disable AI analysis in Settings.
• Remove camera permission in your device settings.
• Delete your local dietary profile, scan history, anonymous Appwrite authentication identity, and GoodForMe backend session with “Delete all data.”
• Manage or cancel a subscription in the store account used to purchase it.
• Choose what information you include in custom restrictions, AI chat, and support email.
• Choose whether to report a particular AI response; no report is sent unless you select a reason and submit it.
• Request access, correction, deletion, restriction, portability, or objection where applicable law provides those rights.
• Withdraw consent for future consent-based processing without affecting processing already lawfully completed.
• Lodge a complaint with your local data-protection authority where that right applies.

Some requests may be limited by the anonymous nature of the Service: we cannot retrieve device-only information that was never sent to us, and we may be unable to link service records to you without the relevant pseudonymous identifier.

9. Security and international transfers

We use reasonable technical and organizational safeguards designed for the nature of the information involved, including encrypted network transport, access controls, secure device storage for backend session tokens, and data minimization. No storage or transmission method is completely secure, so absolute security cannot be guaranteed.

Appify Studios and its providers may process information in countries other than the country where you live. Where required, we rely on appropriate legal safeguards for international transfers while preserving rights that cannot be waived under applicable law.

10. Children

GoodForMe is intended for adults aged 18 or older and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can review and take appropriate action.

11. Updates and contact

We may update this Privacy Policy when GoodForMe, its providers, or legal requirements change. We will revise the effective date above and provide additional notice in the App or elsewhere when required.