Privacy Policy

• Effective date: 2026-09-23
• Operator: Vadym Sitak (Ukraine)
• Contact: privacy@tryproducttruth.com

What we collect

• Account email and password when you create an account
• Scan and product identifiers needed to load reports
• Recognition images during capture processing
• Opt-in text corrections, lot numbers and product requests
• Push tokens when you enable alerts
• App Store subscription and entitlement status
• Device diagnostics and usage events, which can include product and finding identifiers. Barcode-shaped identifiers are redacted before analytics leave the device. Full Ask Product questions are not sent to analytics.

How we use it

We use this data to produce evidence-backed Health, Trust and Taste reports, sync saved products, send watch alerts you request, and operate subscriptions. We do not sell personal scan histories or use them for cross-context advertising.

Processors

Cloudflare hosts the API. PostgreSQL stores account and report state. Contribution intake currently accepts text only; recognition images use a separate capture flow. RevenueCat and Apple handle subscriptions. The app sends usage events to our API. The iOS privacy manifest declares diagnostic data categories.

Crash and diagnostics

The iOS privacy manifest declares email, user ID, product interaction, purchase history, optional photos, other user content, crash data, and diagnostic data. Precise location is not collected. Tracking is false.

Retention and deletion

Account data, including raw correction submissions and product requests, is removed when you delete the account from Profile. Intake remains linked to your account for review until deletion and does not automatically become report evidence. Derived product facts that are no longer linked to you may be retained for report reproducibility. Deleting a ProductTruth account does not cancel App Store billing.

Recognition photos are private and used to identify the product you capture. They are available for processing for up to 15 minutes after upload is requested. Expired photos and photos associated with a deleted account are made inaccessible through the app and queued for deletion. Removal is retried if storage services are unavailable. We retain minimal, ownerless cleanup records to ensure delayed uploads are also removed. Photos may be sent to the configured AI processor for identification; deleting an account cannot recall a request already sent.

Children

ProductTruth is not directed at children under 13.

Changes

We will update this policy in-app and at tryproducttruth.com/privacy when practices change.