Privacy Policy ALLERGY SLEUTH

PRIVACY POLICY FOR ALLERGY SLEUTH Last updated: August 16, 2026 This Privacy Policy explains how Allergy Sleuth (the "App") handles information. The App is provided by BugraX (the "Developer"). Its core allergy-profile and ingredient-label analysis features are designed to operate locally on your device. Some supporting features use third-party services as described below. 1. INFORMATION HANDLED BY THE APP Depending on the features you choose to use, the App may handle: - Allergy, sensitivity, and dietary-preference profiles, including profile names; - Photographs selected from your library or taken with your camera; - Text recognized from ingredient labels; - Scan history, favorites, product names, brands, and barcodes; - Emergency-contact and medication-location information; - Shopping lists, feedback notes, language and appearance preferences; - Product-search terms and barcodes submitted to Open Food Facts; and - Technical, diagnostic, advertising, and interaction data processed by Google SDKs as described in Sections 5 and 6. Allergy profiles and emergency details may be sensitive health-related information. You decide whether to enter this information. 2. LOCAL PROCESSING AND STORAGE Label photographs are processed on your device for text recognition. The Developer does not operate a server that receives label photographs, recognized label text, allergy profiles, emergency information, scan history, favorites, shopping lists, or feedback notes. Profiles, scan history, favorites, emergency information, shopping lists, feedback notes, and preferences are stored locally on your device. The App does not provide user accounts, developer-operated cloud storage, or a developer-operated analytics service. The App does not sell personal information. Allergy profiles, label photographs, recognized label text, and scan history are not supplied to Google for advertising targeting. Your operating system may include App data in device backups according to your device and backup-account settings. These backups are controlled by your operating-system or backup provider, not by the Developer. 3. CAMERA AND PHOTO-LIBRARY ACCESS With your permission, the App accesses your camera or photo library only when you choose to capture or select a label image or scan a barcode. Camera access is not required for manual ingredient entry or product-name search. You may revoke these permissions in your device settings, although camera and label-scanning features may then be unavailable. 4. OPEN FOOD FACTS When you scan a barcode or search for a product, the App sends the barcode or search phrase to Open Food Facts over an encrypted HTTPS connection. Open Food Facts may receive technical information that normally accompanies an internet request, such as your IP address and request metadata. Product information returned by Open Food Facts may include images hosted on its servers. Open Food Facts handles this information under its own terms and privacy practices. The App does not include your allergy profile, emergency information, label photographs, or scan history in these requests. Open Food Facts privacy information: https://world.openfoodfacts.org/privacy 5. GOOGLE ML KIT DIAGNOSTICS AND USAGE MEASUREMENT The App uses Google ML Kit for on-device text recognition and barcode-related components. According to Google's ML Kit data-disclosure documentation, ML Kit SDKs may automatically collect technical data for diagnostics and usage measurement, including device and App information, per-installation or device identifiers, performance metrics, API configuration such as image format and resolution, feature input and output sizes, feature version, event type, and error codes. Google states that this technical data is encrypted in transit using HTTPS and is not transferred by ML Kit to third parties. The Developer does not use ML Kit to upload the contents of your label photographs, recognized ingredient text, allergy profile, or scan history. Google ML Kit data disclosure: https://developers.google.com/ml-kit/android-data-disclosure 6. ADVERTISING AND GOOGLE MOBILE ADS The App uses Google Mobile Ads to display, limit, and measure advertisements. Subject to your consent where required, Google and its advertising partners may automatically collect or process your IP address and general location derived from it; device, advertising, App Set, and related identifiers; App and device information; App launches, taps, video views, ad impressions, clicks, and other interactions; diagnostic and performance information; and information used for advertising, analytics, fraud prevention, security, and compliance. This data is encrypted in transit. Where required, the App requests updated consent information, displays Google's consent form before requesting ads, and checks whether ads may be requested. If privacy options are required in your region, you can reopen them from Family and safety tools > Ad privacy choices. You can also manage advertising choices through your device and Google account settings. The App does not send allergy profiles, emergency information, label photographs, recognized ingredient text, or scan history to Google for ad targeting. Google Privacy Policy: https://policies.google.com/privacy How Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites Google advertising technologies: https://policies.google.com/technologies/ads Google Mobile Ads data disclosure: https://developers.google.com/admob/android/privacy/play-data-disclosure 7. LEGAL BASES AND YOUR CHOICES Where applicable law requires a legal basis, information is handled as needed to provide features you request, based on your consent for optional device permissions and advertising where required, and for legitimate interests such as App security, diagnostics, ad measurement, and fraud prevention. You may choose not to provide profile or emergency information. You may decline or revoke camera and photo-library permissions. Where available, you may also change advertising privacy choices from within the App. These choices may limit the related features or the types of ads that can be served. 8. RETENTION AND DELETION Local data remains on your device until you delete it, clear the App's storage, or uninstall the App. You can clear scan history from within the App. Temporary image files may be managed by the App or operating system. Device backups may remain according to your operating-system and backup-provider settings. Google and Open Food Facts determine how long they retain information they receive. Consult their privacy information and controls for retention or deletion requests concerning their processing. 9. SECURITY The App uses local storage for its core personal data and encrypted HTTPS connections for product requests and third-party SDK communications. No method of electronic storage or transmission is completely secure, so absolute security cannot be guaranteed. You are responsible for protecting access to your device. 10. CHILDREN'S PRIVACY The App is not directed to children under 13. The Developer does not knowingly collect children's personal information through an account or developer-operated server. A parent or guardian should supervise a child's use of the App and any sensitive information entered on the device. Google advertising services may apply additional age-related restrictions under applicable law and the audience settings selected in Play Console and AdMob. 11. INTERNATIONAL DATA PROCESSING Google, Open Food Facts, and their service providers may process technical or service-request information in countries other than the one where you live. Their privacy policies explain the safeguards they apply to international transfers. 12. YOUR PRIVACY RIGHTS Depending on where you live, you may have rights concerning personal information, including rights to access, correct, delete, restrict, or object to certain processing and to withdraw consent. Because the App's core personal data is stored locally and is not linked to a Developer account, the Developer generally cannot access or retrieve that data for you. You can manage it directly on your device as described above. Requests concerning information processed independently by Google or Open Food Facts should be directed to the relevant service. 13. HEALTH AND MEDICAL DISCLAIMER Allergy Sleuth is an informational aid. It is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. Scan results are not medical advice or a guarantee that a product is safe. OCR, community product data, recipes, and manufacturer formulations may be incomplete, incorrect, or out of date. Always check the original product label and relevant "may contain" or cross-contact warnings. For medical advice, diagnosis, or treatment, consult a qualified healthcare professional. For severe or life-threatening allergies, do not consume a product based only on an App result; contact the manufacturer when information is unclear and seek emergency assistance when appropriate. 14. CHANGES TO THIS POLICY This Privacy Policy may be updated to reflect changes to the App, third-party services, or legal requirements. The updated version will show a revised "Last updated" date and will be made available with the App and through its store listing. 15. CONTACT For privacy questions or requests concerning Allergy Sleuth, contact: Developer: BugraX Email: bugra.komsuoglu@gmail.com