Privacy Policy

This policy explains how the Toxicity Scanner app for iPhone and this website handle your information. The app reads the ingredient list on a cosmetic product, explains each ingredient and shows how it fits the preferences you set.

1. What stays on your iPhone

• Label photos. When you scan with the camera or import a photo, the text is read by Apple’s on-device text recognition. The clearest photo of each scan is saved with its report, reduced in size, together with a small thumbnail for your library. The other photos are discarded once they have been read.
• Ingredient lists you scan or paste, and the reports made from them.
• Your preferences: the products you use, your skin type, goals, hair concern and the ingredient groups or single ingredients on your watchlist.
• Settings such as the app’s language and whether you want tips and offers.

This information is kept in the app’s private storage on your iPhone. Like other app data, it may be included in your iPhone backups (iCloud or a computer) if you have backups switched on. We cannot see it. Deleting a product removes its photo; Settings > Delete all data removes everything the app has stored.

2. Permissions

• Camera: asked for the first time you open the scanner, and used only to read an ingredient list.
• Photos: when you import a photo, iOS shows its own photo picker and gives the app only the photo you choose. The app has no access to the rest of your library.
• Notifications: asked for once, during setup, and optional. See section 4.

3. Ingredient information

The ingredient database is part of the app and is read on your iPhone. Looking up an ingredient, in the app or on this website, does not tell us anything about you. Ingredient information comes from public sources such as the European Commission’s CosIng database; it is general information, not medical or safety advice.

4. Notifications

If you allow notifications, the app may show a few short tips over your first month (at most a few a week, fewer over time, and none after thirty days), including the occasional offer. They are scheduled on your iPhone by the app itself: no server sends them and no information leaves your phone to create them. They stop if you subscribe, and you can turn them off at any time in Settings > Notifications > Tips & offers in the app, or in iOS Settings.

5. Subscriptions: Apple and Superwall

Purchases are made through your Apple Account and processed by Apple; we never see your payment details. The app uses Superwall to show the subscription offer and to know whether a subscription is active. Superwall’s software receives the technical information it needs for that, such as the app version, device model and language, an identifier Superwall creates, which offer was shown and what Apple reports about a purchase. We do not send Superwall your scans, photos, ingredient lists or preferences. See Superwall’s privacy policy and Apple’s.

Redeeming an offer code or restoring a purchase uses Apple’s own screens and is handled by Apple.

6. This website

This website has no accounts, no forms and no advertising. Like any website, the server that delivers its pages (operated by our hosting provider, Railway) records standard technical logs, such as your IP address, browser type and the page requested, to operate and secure the service. These logs are kept only as long as needed for that purpose. Fonts are served from this website, not from a third party.

The ingredient checker runs in your browser. The list you paste is matched on your device and is never sent to us, to Google or to anyone else, and it is not stored.

Google Analytics. To learn which pages are read and which buttons are used, this website uses Google Analytics 4, provided by Google Ireland Limited and Google LLC. If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, or we cannot tell where you are, it runs only if you choose Accept in the cookie banner; until then nothing from Google is loaded. Elsewhere it runs by default. When it runs, Google sets cookies (named _ga and _ga_ followed by an id) and receives the pages you visit, the buttons you use (such as a download button, or that a list was checked and how many ingredients it had, never which ones), your browser and device type, and an approximate location derived from your IP address. Google Analytics 4 does not store IP addresses. Advertising features are switched off. Event-level data is kept for no longer than 14 months. See Google’s privacy policy and how Google Analytics uses data.

You can change your choice at any time with Cookie settings at the foot of every page. Withdrawing consent stops collection and deletes the Google Analytics cookies. Your choice is remembered in your browser’s storage on this site; clearing your browser data clears it too.

Download buttons on this site link to the App Store with a campaign tag naming the page the button was on. Apple counts downloads per campaign; that count tells us nothing about who you are.

7. Children

The app and this website are not directed at children under 13, and we do not knowingly collect information from them.

8. Your choices and rights

Because the app keeps your information on your iPhone, you are in control of it: you can edit or delete any product, change your preferences, turn notifications off, or delete all data in Settings. Deleting the app also removes its data from your iPhone. For anything held by Apple or Superwall, you can contact them directly, or ask us and we will help.

On this website you can accept or reject analytics cookies, and change your mind at any time, with Cookie settings at the foot of every page. Where data protection law gives you rights over data Google Analytics holds about your visits (access, erasure, objection), write to us and we will act on it with Google.

9. Changes

If this policy changes, we will update this page and the date above. If a change affects how your information is handled, the app will tell you before it takes effect.

10. Contact

Questions about privacy: sandi.peklaric@gmail.com.