Privacy Policy
Last Updated: September 28, 2025
EXPOSR is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information.
1. Information We Collect
- Account Information: Email address, name, and authentication data when you create an account
- Health Preferences: Dietary restrictions, allergies, and health goals you provide
- Food Scan Data: Images of food labels and nutrition facts you scan (processed locally and not permanently stored)
- Usage Analytics: How you use the app to improve our services
- Device Information: Device type, operating system, and app version for technical support
2. How We Use Your Information
- Personalized Analysis: Provide customized food analysis based on your health preferences
- Service Improvement: Analyze usage patterns to enhance app functionality
- Account Management: Manage your subscription and provide customer support
- Legal Compliance: Meet legal obligations and protect our rights
- Security: Prevent fraud and maintain app security
3. Data Processing and AI
- Local Processing: Food images are analyzed locally on your device when possible
- AI Analysis: Some data is sent to OpenAI's servers for advanced analysis (encrypted in transit)
- No Permanent Storage: Food images are not permanently stored on our servers
- Anonymized Data: AI analysis data is anonymized and cannot be linked to your identity
4. Data Sharing
We do not sell your personal information. We may share data only in these limited circumstances:
- Service Providers: Trusted partners who help operate our app (OpenAI for AI analysis, Firebase for authentication)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In case of merger or acquisition (with notice to users)
- Your Consent: When you explicitly authorize sharing
5. Data Security
- Encryption: All data transmitted to our servers is encrypted using industry-standard protocols
- Access Controls: Strict access controls limit who can view your data
- Regular Audits: We regularly review our security practices
- Secure Storage: Data is stored in secure, certified cloud infrastructure
6. Your Rights (GDPR & CCPA)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a portable format
- Objection: Object to processing of your data
- Restriction: Restrict how we process your data
7. Data Retention
- Account Data: Retained while your account is active
- Health Preferences: Stored until you modify or delete them
- Scan History: Retained according to your subscription level
- Analytics Data: Anonymized usage data retained for up to 2 years
- Deleted Accounts: All personal data deleted within 30 days of account deletion
8. Third-Party Services
EXPOSR integrates with these third-party services:
- OpenAI: AI-powered food analysis (subject to OpenAI's privacy policy)
- Firebase: Authentication and user management (subject to Google's privacy policy)
- Apple App Store: In-app purchases and subscriptions
- Superwall: Subscription management and analytics
9. Children's Privacy
EXPOSR is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover we have collected such information, we will delete it immediately.
10. International Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions.
11. Cookies and Tracking
- No Web Cookies: As a native mobile app, we don't use web cookies
- App Analytics: We use privacy-focused analytics to understand app usage
- No Cross-App Tracking: We don't track you across other apps or websites
- Opt-Out: You can disable analytics in your device settings
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy in the app and updating the "Last Updated" date. Your continued use of the app after changes constitutes acceptance of the new policy.