Privacy Policy
This Privacy Policy explains how Khyati Amin, trading as "LabelCop" ("LabelCop", "we", "us") collects, uses, and protects your information when you use the LabelCop mobile app and website (the "Service"). By using the Service, you agree to this policy.
1. Who we are
The data controller responsible for your information is Khyati Amin, based in London, United Kingdom. You can contact us at khyati1988@gmail.com.
2. Information we collect
- Photos you scan. When you scan a product, you take a photo of its label. The image (or text extracted from it) is sent to our servers to analyse the ingredients and nutrition information.
- Scan results and history. The products you scan and their scores are stored on your device only (as text — photos are not saved). We do not store your scan history on our servers.
- Contact information. If you email us or use a contact form, we receive your message and email address.
- Device identifier for free scores. To provide free product scores and manage subscriptions, the app uses an anonymous device identifier. On Android this is the Android ID; on iOS it is a random identifier we generate and store in the device Keychain. It is sent to our servers so we can count how many free product scores an install has used. It contains no personal information and is not linked to your name or email. Our servers also keep standard technical logs needed to operate and troubleshoot the Service.
- Advertising and measurement data. LabelCop includes the Meta (Facebook) SDK so we can measure how well our advertising works — for example, whether someone who saw an advert went on to install the app. Through it, Meta may receive your device's advertising identifier (the IDFA on iOS, the Advertising ID on Android) and basic app activity such as app opens and in-app events. On iOS we ask your permission first through Apple's App Tracking Transparency prompt, and if you decline, the advertising identifier is not used. This is the only advertising or tracking technology in the app. We do not display adverts inside LabelCop, and we do not use any other analytics or crash-reporting tools.
3. Camera permission
LabelCop requests access to your camera for the sole purpose of letting you photograph product labels to scan. We do not access your camera at any other time, and we do not access your photo library unless you choose to upload an existing image.
4. How we use your information
- To read the label and generate a product health score and ingredient analysis.
- To show you your scan history.
- To respond to your support requests.
- To maintain, debug, and improve the Service.
- To count your free product scores and, if you subscribe, to keep your subscription active.
5. Legal bases (UK/EU users)
Where UK or EU data protection law applies, we process your data on the basis of: performance of a contract (to provide scanning you requested), legitimate interests (to operate and improve the Service), and consent (where required). You may withdraw consent at any time.
6. Users in India
If you are in India, the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 apply to your data. Khyati Amin is the Data Fiduciary for this purpose.
Our basis for processing is your consent, which you give when you choose to scan a label. You may withdraw it at any time by ceasing to use the Service and emailing us to delete any data we hold. We do not rely on "legitimate interests" for users in India.
Children. LabelCop is not intended for anyone under 18. We do not knowingly process the personal data of a child. We never track, profile, monitor, or serve targeted advertising to a child. If you believe a child has provided us data, email us and we will delete it.
Cross-border processing. Label photos are sent to Anthropic (United States) to be read, then discarded. They are not stored. Your anonymous device identifier is stored on our servers, which are located in the United States, solely to count free product scores. Advertising and measurement data is processed by Meta Platforms, Inc. (United States).
Grievances. Email khyati1988@gmail.com. We will acknowledge and respond within the period required by law. You may also complain to the Data Protection Board of India.
7. How we share information
We do not sell your personal data, and we do not allow brands to influence your results. We share data with the following third parties that help us run and promote the app:
- Hosting / scoring servers. Railway, our hosting provider, processes scan requests to generate results.
- Label-reading (OCR) provider. Anthropic's Claude API reads the text from your label photos. Photos are sent securely for reading, used only to generate your result, and are not stored by us.
- Subscription management. RevenueCat processes subscription and purchase information so we can keep your subscription active and restore it across devices.
- Advertising measurement. Meta Platforms, Inc. receives your device's advertising identifier and basic app activity so we can measure the performance of our adverts. On iOS this only happens if you allow tracking when asked. Meta may use this data for its own purposes as described in its own privacy policy.
We may also disclose information if required by law.
8. Data retention
We keep scan images only momentarily to process them; they are not stored. Scan results are retained on your device. You can request deletion at any time (see "Your rights").
9. International transfers
Our servers are located in the United States. Where we transfer data internationally, we rely on appropriate safeguards as required by applicable law.
10. Your advertising choices
On iOS, you can allow or refuse tracking when the app first asks, and change your answer at any time in Settings › Privacy & Security › Tracking. On Android, you can reset or delete your Advertising ID in Settings › Google › Ads. If you refuse, the app works exactly the same — we simply cannot tell whether an advert led you to install it.
11. Your rights
Depending on where you live, you may have the right to access, correct, or delete your personal data, to object to or restrict processing, and to data portability. To exercise any of these, email khyati1988@gmail.com. UK/EU users also have the right to complain to a data protection authority (in the UK, the Information Commissioner's Office, ico.org.uk).
12. Children
LabelCop is not directed at children under 18 and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
13. Security
We use reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
14. Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date above.
15. Contact
Questions about this policy? Email us at khyati1988@gmail.com.