Privacy Policy
Labellingo explains the ingredients on product labels. To do that we need a photo of the label and an account to keep your credits safe. This policy explains what we collect, why, who helps us process it, how long we keep it and how you can delete it.
In short
- We collect only what the app needs: your sign-in identifier and email, your language setting, your scans and photos, and your credit balance.
- To read a label, the photo is sent to a third-party AI service, Anthropic. It does not use it to train its models.
- We keep the cropped photo of each successful scan so you can see it in your history. Deleting a scan or your account deletes its photo.
- No ads, no tracking, no selling of data. We don't keep a health or allergy profile.
- You can delete your account at any time in the app (Settings → Delete account) or by email.
1. Who we are
Labellingo (the app and labellingo.com) is developed and operated by Muammer Tekin, an individual developer based in Türkiye ("we", "us"). We are the data controller for the personal data described here. For anything about your data, write to support@labellingo.com.
2. What we collect
We collect this data electronically and automatically while you use the app, and from the messages you send us.
Account
You sign in with Google or Apple. From them we receive a unique account identifier and, if shared, your email address (with Apple this may be a private relay address). We don't receive your password. We don't store your name or profile photo.
Settings
The language you want explanations in.
Scans and photos
The photo of the label you take or choose. The app crops and resizes it on your device before sending it. Our server then removes embedded metadata such as the location where the photo was taken. For each successful scan we store:
- the cropped photo and a smaller thumbnail,
- the result: product name, summary, ingredients and what they are for, allergens, "may contain" warnings, diet suitability and safety warnings,
- technical details of the analysis: the language the label was in, the model used, processing time and cost.
If a photo can't be read, we don't keep the photo or a result.
Please photograph only product labels. Don't include people or other personal information in your photos.
Credits and purchases
Your credit balance and a record of each change to it: the free credit, purchases, scans and refunds. Purchases are processed by Google Play or the App Store. We receive confirmation of the purchase (product, transaction identifier, date) through our purchase-verification provider, never your payment card details.
Preventing misuse of the free credit
Every person gets one free credit. To make sure it is given only once, we keep a one-way hash of your sign-in identifier, a code that can't be turned back into the identifier. It stays even after you delete your account. It contains no email, name or usage data. We can only check whether the same sign-in account has received the free credit before.
Sign-in sessions
To keep you signed in, we store session tokens in hashed form. They expire after 30 days of inactivity or when you sign out.
Feedback
When you send feedback in the app (a bug report, a complaint or a suggestion), we store the message and its topic, the scan it is about if you report a scan's result, and your app version, platform (Android or iOS), operating system version and app language. We use your account's email address only if we need to reply.
Technical logs
When the app talks to our servers, we log the IP address, app version, time, the requested address and the result of each request. We use these logs for security, rate limiting and fixing problems.
We do not collect your location, contacts, health or allergy profile, or advertising identifiers. We do not show ads and do not use third-party tracking or analytics in the app.
3. Why we use it (and the legal basis)
| Purpose | Data | Legal basis |
|---|---|---|
| Providing the service: signing you in, analysing labels, showing your history | Account, settings, scans and photos | Performance of our contract with you (Terms of Use) |
| Selling and keeping track of credits | Credits and purchases | Performance of contract; legal obligations (e.g. tax and consumer law) |
| Preventing misuse of the free credit, security, preventing abuse | Free-credit hash, logs, sessions | Our legitimate interest in keeping the service fair and secure |
| Answering your messages and fixing what you report | Your email, what you write to us, feedback | Performance of contract; legitimate interest |
For users in Türkiye, these correspond to Article 5(2)(c), (ç) and (f) of the Personal Data Protection Law No. 6698 (KVKK). For users in the EU/EEA and the UK, to Article 6(1)(b), (c) and (f) of the GDPR.
4. How your photo is analysed
To read the label and write the explanation, we send the photo, your explanation language and our instructions to the Claude API of Anthropic, PBC (United States). Anthropic processes this data as our service provider to return the result. Under its commercial terms, Anthropic does not use this data to train its models. It may keep it for a limited period for safety and abuse monitoring, as described in its privacy policy. We send no account information with the photo.
The explanations are generated automatically and may contain mistakes. See the Terms of Use.
5. Who else processes your data
We use these service providers. They process data only on our instructions and for the purposes above:
- Anthropic (United States): label analysis.
- Cloudflare (United States, global network): photo storage, website and network protection, forwarding emails sent to our support address.
- MongoDB Atlas (MongoDB, Inc.): our database.
- Our server hosting provider: runs our API.
- Google: Sign in with Google, Google Play purchases, and the mailbox where support emails arrive.
- Apple: Sign in with Apple and App Store purchases.
- RevenueCat (United States): verification of in-app purchases.
We may disclose data if required by law or to protect our rights or users' safety. We don't sell or rent personal data.
6. International transfers
Some of the providers above process data outside Türkiye and outside your country, including in the United States. Where the law requires it (KVKK Article 9, GDPR Chapter V), we rely on appropriate safeguards such as standard contractual clauses.
7. How long we keep it
- Account, settings, credits: until you delete your account.
- Scans and photos: until you delete the scan or your account.
- Feedback: until you delete your account.
- Sign-in sessions: until you sign out, or at most 30 days after last use.
- Technical logs: up to 30 days.
- Free-credit hash: kept indefinitely, for the reason in section 2.
- Support emails: as long as needed to answer you, and up to one year after.
When you delete your account, we delete your data right away from our live systems. Copies in backups are overwritten within 30 days. Records that the law requires us to keep are kept only for as long as it requires. Google Play and the App Store keep their own purchase records.
8. Your rights
Depending on where you live (including under KVKK Article 11 and the GDPR), you have the right to:
- find out whether we process your data and get a copy of it,
- have it corrected or deleted,
- ask us to restrict processing, or object to it,
- receive your data in a portable format,
- learn who it was shared with, and object to decisions made solely by automated processing that affect you,
- claim compensation for damage caused by unlawful processing.
Delete your account in the app (Settings → Delete account). For anything else, email support@labellingo.com from the email address of your account. We answer within 30 days.
You can also complain to a data protection authority: in Türkiye the Personal Data Protection Authority (KVKK), in the EU/EEA your local supervisory authority.
9. Children
Labellingo is not intended for children under 13. If you are under the age of digital consent in your country, use it only with a parent's or guardian's permission. If we learn that we hold data of a child without such permission, we delete it.
10. Security
Data is sent over encrypted connections (HTTPS). Session tokens are stored hashed. Photos are served only through signed links that expire. Access to our systems is limited. No system is perfectly secure, but we work to protect your data and fix problems quickly.
11. Changes
When we change this policy, we update the date at the top. If a change is significant, we let you know in the app before it takes effect.
12. Contact
Muammer Tekin, Labellingo: support@labellingo.com