AllerLens Privacy Policy

Data we collect

• Allergy and diet preferences – Your selected allergens and preferences (e.g. show calories, preferred translation language) are stored on your device. If you sign in, they are synced to your account so you can use the app on other devices.
• Scan history – Menus you scan, detected dishes, and any notes or tags you add are stored locally. If you sign in, this data is backed up to your account (encrypted in transit).
• Location (optional) – With your permission, we use your device's location to derive city and region so we can group your scans by place. Precise GPS is optional and off by default. We do not track your location continuously.
• Account data – If you sign in with Google, we receive your email and name from Google. We use this only to identify your account and sync your data.
• Photos / camera – We access the camera and photo library only to scan menus and save images you choose. We do not upload menu images to our servers for storage; processing is done on-device or for the purpose of providing the service (e.g. translation).

How we use data

• To provide scanning, allergen detection, and translation.
• To organize your scans by location (city/region) when you have allowed location access.
• To sync your preferences and scan history across devices when you are signed in.
• We do not sell your personal data. We do not use your data for advertising or share it with third parties for their marketing.

Where data is stored

• On your device – Preferences and scan history are stored locally (e.g. SQLite). You can clear this at any time from Profile → Clear Local Data.
• In the cloud (if you sign in) – Synced data is stored in our secure backend (Supabase) and is associated only with your account. You can delete your account and data from Profile → Delete Account.

Your choices

• Location – You can deny or revoke location permission in your device settings. The app will still work; location-based grouping will be limited.
• Account – You can use the app without signing in. Sign-in is optional and used only for backup and cross-device sync.
• Delete data – You can clear local data or delete your account (and all synced data) from the Profile screen.

Data security

We use industry-standard encryption (e.g. HTTPS, secure storage) for data in transit and, where applicable, at rest. You are responsible for keeping your device and account credentials secure.

Changes to this policy

We may update this policy from time to time. We will post the updated policy at this URL and, where required by law, notify you of material changes.