Privacy policy
Last updated: September 11, 2026
This policy covers both trustpick.app and the TrustPick mobile app ("TrustPick", "we", "us"). It explains what we collect, why, who we share it with, and the choices you have. TrustPick is operated by [Legal entity name — fill in], registered in [registered address / jurisdiction — fill in].
Information we collect
Photos you scan. When you scan a product label with your camera or upload one from your gallery, that image is sent to our ingredient-recognition service (Microsoft Azure Cognitive Services for text extraction, and Azure OpenAI for the safety analysis) to read the ingredients and generate your result. We don't keep the photo itself after the analysis completes — only the extracted ingredient list and the resulting analysis are saved.
Barcodes you scan. The barcode number is sent to our servers to look up the product. If it's not already in our database, we query third-party product databases (Open Food Facts, Nutritionix, USDA FoodData Central, and similar) server-side to find it, and cache the result so future scans of the same product are instant.
Approximate location. With your permission, the app uses your device's location to show you products relevant to your region (India, US, Europe, or a global default). Only a coarse region code derived on your device ever reaches our servers — your precise coordinates never do. You can deny location permission and the app falls back to your device's language/region setting, or a generic global catalog.
Account information. Signing in is optional — you can use TrustPick as a guest. If you sign in with Google, we receive your name, email address, and profile photo from Google (via Firebase Authentication) to create your account and sync your scan history and favorites across devices.
Diet and allergen preferences. If you set up an allergen or dietary profile, we store your selections (e.g. peanut allergy, sugar-conscious) to flag conflicts on future scans. This is self-reported and optional — we deliberately don't ask about medical conditions; see "Health information is not medical advice" below.
Purchase information. If you subscribe to TrustPick Plus, the purchase is processed by the Google Play Store or Apple App Store, and entitlement status is verified through our payments provider, RevenueCat. We don't see or store your payment card details.
Device and usage data. We generate a random device identifier (not tied to your phone number or hardware serial) to enforce free-tier scan limits for guests and to rate-limit abuse of our lookup services. We also collect basic usage analytics — which screens and features you use, crash reports — via PostHog, to understand how the app is used and fix problems.
How we use this information
To provide the core service (ingredient analysis, product lookup, allergen flagging), keep your account and history in sync, process subscription payments, prevent abuse of our free tier and third-party API quotas, and understand and improve how TrustPick is used. We do not sell your personal information.
Who we share information with
We share data with the service providers who help us run TrustPick, and only for the purposes above:
- Microsoft Azure (Cognitive Services, Azure OpenAI, Cosmos DB, Functions hosting) — image/text processing and data storage
- Google Firebase — sign-in and authentication
- RevenueCat and the Google Play / Apple App Store — subscription billing and entitlement
- PostHog — product analytics
- Third-party product databases (Open Food Facts, Nutritionix, Edamam, USDA FoodData Central, Spoonacular, UPC Item DB) — barcode lookups, queried server-side; your barcode scans reach these providers, but never your account identity or location
We may also disclose information if required by law, or to protect the rights, safety, or security of TrustPick, our users, or the public.
Health information is not medical advice
TrustPick's ingredient safety verdicts, nutrition callouts, and Health Score are informational only — never a medical claim or professional advice. We don't ask for or store medical conditions; dietary preferences (e.g. "sugar-conscious") are self-selected and used only to personalize wording, not to diagnose or recommend treatment. Always check the physical product and consult a qualified professional for medical or dietary decisions.
Data retention
We keep your account data, scan history, and favorites for as long as your account is active. Cached product/ingredient data (not tied to any individual user) is kept to make future scans of the same product instant for everyone. Scanned photos themselves are not retained after analysis.
Your choices and rights
You can use TrustPick as a guest without an account. Signed-in users can review and edit their allergen/diet profile, scan history, and favorites in the app at any time. To request access to, correction of, or deletion of your personal data, email support@trustpick.app — we don't yet have a self-service delete-account button in the app, so deletion requests are handled manually; we aim to complete them within 30 days. Depending on where you live, you may have additional rights under local law (for example, India's Digital Personal Data Protection Act, or GDPR if you're in the EU) — contact us to exercise them.
Children's privacy
TrustPick is not directed at children under 13 (or the minimum age required by your country), and we don't knowingly collect personal information from them. Our baby product category is intended for use by parents and caregivers, not by children themselves. If you believe a child has provided us with personal information, contact us and we'll delete it.
Security
We use industry-standard measures to protect your information, including encryption in transit (HTTPS/TLS) between the app and our servers. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.
International users
TrustPick is developed in India and our servers are hosted on Microsoft Azure's India region. If you use TrustPick from outside India, your information will be transferred to and processed in India and by the service providers listed above, which may be located in other countries.
Changes to this policy
We may update this policy as TrustPick changes. We'll update the "Last updated" date above, and for material changes, we'll provide a more prominent notice (such as an in-app message).
Contact
Questions about this policy, or a request about your data, can be sent to support@trustpick.app, or via our Contact page.