Effective: September 30, 2026
PureLabel is operated by an independent developer ("we", "us"). For questions about your data or to exercise your rights, contact support.madebyone@gmail.com.
Default Android photo reading uses Google ML Kit on your device. The label photo stays on the device during this reading. For basic analysis, the ingredient text you review, entered product details and nutrition values are sent to our server for rule-based analysis; barcode lookup may query Open Food Facts. Basic analysis does not send your photos or text to our AI provider.
If you choose the Plus feature Advanced Ingredient Analysis or compare both readers, the selected label photo, any packaging photo included in the enhanced request, and/or entered text are sent to our server and may be forwarded to our third-party AI processing provider (listed under Sub-processors below). We do not store your photos on our servers — they are held in memory for processing and then discarded. The provider processes submitted content under its policies. Ingredient fingerprints and reusable enhanced analysis results are stored per product to support recognition and community reviews. Limited pseudonymous contributor references may be retained with product records. Your detailed scan history and optional packaging-photo thumbnails are stored on your device; signed-in contribution statistics also contain limited references to products already credited to your account.
On Android, result text can be translated using Google ML Kit on your device. Language models are downloaded over Wi-Fi when needed; this translation feature does not send label text or photos to a cloud translation service. Translated text is a display aid. Original label text is retained for comparison and may be shown when a translation cannot be checked.
On-device recognition and translation do not mean that the SDK has no network activity. Google ML Kit collects SDK diagnostics and usage metadata, including device and app information, installation identifiers, performance and error information, feature events and input/output sizes. Language identification and translation may also report detected or configured languages; translation uses Firebase services for model/configuration diagnostics. This diagnostic metadata is distinct from the label photos and text processed on your device. Google describes the SDK's data handling in its ML Kit data disclosure.
If you sign in with Google, we store your Google account identifier, display name and email address, together with your points, level, limited product references used to avoid duplicate point awards, the reviews you post, votes, reports and your block list. These account references are pseudonymous, not anonymous, and are removed through account deletion. We do not store passwords.
When subscriptions are available, Google Play processes payment. We do not receive payment-card details. We send Google Play an opaque account identifier and retain purchase tokens and subscription status on our server to verify access, restore purchases and prevent fraud. These records are removed when you delete your PureLabel account. Deleting the account or uninstalling the app does not cancel a Google Play subscription: manage or cancel it in Google Play subscriptions.
When advertising is configured, a completed free scan may show a full-screen AdMob ad before a Plus offer and the result. Plus users skip this placement. These ads grant no scan credits. Unavailable ads do not prevent access to a completed result. AdMob may process device identifiers, IP address, approximate location, ad interactions and diagnostics under Google's Privacy Policy. Applicable privacy choices are requested before ad requests; ingredient text, product photos, scan history and avoid-list selections are not sent to AdMob by PureLabel.
When optional rewarded ads are available, you can choose to watch an ad for an extra scan. Google AdMob may process device identifiers, IP address, approximate location, ad interactions and diagnostics under Google's Privacy Policy. The app requests applicable privacy choices before requesting ads and provides an ad privacy settings control when required. We send an opaque account identifier and a one-time verification challenge to AdMob; ingredient text, product photos, scan history and avoid-list selections are not sent to the ad service by PureLabel. We retain reward verification records and scan-credit balances to deliver rewards and prevent replay; these account-linked records are removed on account deletion. Ads and subscriptions may be unavailable while the service is being tested.
Reviews you post (rating, text, display name, level) are public and visible to all PureLabel users.
If you report that an analysis is wrong, the optional comment you type and the score you report are stored server-side per product (with a pseudonymous identifier, not your name) so we can triage and improve analysis quality. This feedback is not shown publicly. We keep only a limited number of the most recent reports per product and remove older ones as new feedback arrives.
You can request deletion of your account and associated data from the app (Profile → Delete account) or on the account deletion page. Your profile is disabled immediately. Removal of reviews, votes, reports, account statistics and other account-linked records may continue in the background; the app confirms when it completes. We retain a minimal hashed deletion receipt to prevent old requests from restoring deleted data.
We do not sell your personal data or send label photos and ingredient text to advertisers. Advertising processing is described above. Requests are rate-limited by IP address for abuse protection: your IP is used transiently to enforce rate limits and may appear in short-lived infrastructure and hosting logs. We do not keep raw IP addresses in our application database.
Where the GDPR applies, we process data on the following bases: performance of a contract (providing the analysis, account and review features you request), our legitimate interests in operating and securing the service (abuse prevention, rate limiting, product recognition), and consent for advertising processing where required. You can withdraw advertising consent or update your choices through "Ad privacy choices" in the app when available, without deleting your PureLabel account. To object to processing based on our legitimate interests, contact us.
Our server does not retain submitted photos after processing. Optional packaging-photo thumbnails remain in your device's local history until you clear that history or remove the app's local data; clearing history also removes these thumbnails. Ingredient-label photos used for checking a reading may also be saved locally with your scan history. Clearing history or deleting local app data removes those photos. Per-product ingredient fingerprints and analysis results are kept for as long as the product entry is useful to the community. Account data, points, statistics and reviews are kept until you delete your account, after which they are removed. Infrastructure logs that may contain IP addresses are short-lived and rotated by our hosting provider.
Depending on your location (including the EEA/UK under GDPR and California under the CCPA/CPRA), you have the right to access, correct, export (portability), and erase your personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority. You can request account erasure via the account deletion page. For access, correction, portability or other privacy requests, email support.madebyone@gmail.com. For advertising-related privacy choices, use "Ad privacy choices" in the app when available.
We use a small number of service providers to run PureLabel: OpenAI (processes submitted photos and text for enhanced analysis only), Google Cloud (hosting, request logging and the Datastore database that holds account, review and product data), and Open Food Facts (a public database queried by barcode to identify products). AdMob processing, when enabled, is described above.
PureLabel is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
PureLabel provides informational label guidance only. It is not medical or dietary advice and is not a medical device. Allergen highlighting is a convenience aid and cannot be guaranteed complete or accurate — always read the physical label. See the Terms of Use for details.
support.madebyone@gmail.com