Privacy Policy — Peel
1. Who We Are
Peel - Food & Cosmetic Scanner ("App", "we", "us", or "our") is developed and published by Rohan Manocha, operating as NyoarGames. Contact: nyoargames@gmail.com.
This Privacy Policy explains what information the App collects, how it is used, and your choices regarding that information.
2. Information We Collect
Information stored on your device only
The following data is stored locally using on-device storage (Hive) and is never transmitted to us:
- Scan history — product names, scanned ingredient lists, risk assessments, and timestamps.
- Allergen & ingredient profile — ingredients you have flagged as personal allergens or as ingredients you are avoiding.
- App preferences — default product category, display settings (e.g. scientific details toggle).
This data exists only on your device. If you uninstall the App, or use the "Delete all data" option in the App, it is permanently removed.
Information sent to our ingredient database
When you scan a product, the App extracts ingredient text from the label (on-device) and sends that text to our ingredient database (Supabase) to retrieve safety information. This query contains ingredient names only — no photo, no device identifier, no personal information, and no account data.
Subscription information
If you purchase a Peel Pro subscription, your purchase is processed by Apple (App Store) or Google (Google Play). We use RevenueCat to validate your subscription status. RevenueCat receives an anonymised app user ID and purchase receipt from Apple or Google — it does not receive your name, email address, or payment card details.
Information we do not collect
- We do not create user accounts or require registration.
- We do not collect your name, email address, or any contact information.
- We do not collect advertising identifiers (IDFA / GAID).
- We do not collect location data.
- We do not use analytics SDKs or crash-reporting tools that transmit personal data.
3. Photos & OCR
The App uses Google ML Kit for on-device optical character recognition (OCR). All image processing happens entirely on your device. Photos are never uploaded to our servers, to Supabase, or to any third party.
The App accesses your camera or photo library only when you initiate a scan. You can revoke this permission at any time in your device settings. Revoking camera access disables scanning functionality but does not affect previously stored scan history.
4. How We Use Information
We use the information described above solely to provide and improve the App:
- Ingredient text queries — matched against our ingredient database to return safety classifications, risk levels, regulatory flags (IARC, EFSA, CosIng), and related information.
- Subscription status — validated via RevenueCat to unlock or restore Pro features.
- On-device data — used to display your scan history, apply allergen alerts, and remember your preferences.
We do not use your data for advertising, profiling, or any purpose beyond operating the App.
5. Third-Party Services
The App integrates the following third-party services. Each has its own privacy policy.
Supabase
Supabase hosts our ingredient database. Ingredient text (no personal data) is sent via HTTPS to retrieve safety information. See Supabase Privacy Policy.
RevenueCat
RevenueCat manages subscription validation. It receives an anonymised purchase receipt and app user ID from Apple or Google. RevenueCat does not receive photos, ingredient data, or any personal information. See RevenueCat Privacy Policy.
Google ML Kit
Google ML Kit performs OCR processing entirely on-device. No image data is sent to Google servers by the App. See ML Kit Terms & Privacy.
Apple App Store & Google Play
In-app purchases are processed by Apple or Google. Their privacy policies govern any data they collect during payment. See Apple Privacy Policy and Google Privacy Policy.
7. Data Retention
On-device data (scan history, profiles, preferences) is retained until you delete it via the App's "Delete all data" option or uninstall the App. We have no access to this data and cannot delete it on your behalf.
Ingredient query logs, if retained by Supabase's infrastructure at all, are governed by Supabase's own data retention policies.
Subscription records are retained by RevenueCat for as long as necessary to validate purchases and comply with applicable tax or legal obligations.
8. Security
All communication between the App and our ingredient database is encrypted in transit using HTTPS/TLS. On-device data is protected by your device's operating system security. We implement reasonable technical measures to protect against unauthorised access; however, no system is completely secure and we cannot guarantee absolute security.
9. Your Rights & Choices
Because we do not create accounts or collect personal information, most data subject rights (access, correction, deletion) are exercised directly on your device:
- Delete scan history and profile data — use Profile > Delete all data in the App.
- Revoke camera access — change permissions in your device settings.
- Cancel subscription — manage via App Store or Google Play Subscriptions.
- Restore purchases — use Profile > Subscription > Restore purchases in the App.
If you have questions about data held by RevenueCat or Supabase, please contact those services directly or email us at nyoargames@gmail.com and we will assist where possible.
10. Children's Privacy
The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the App, please contact us at nyoargames@gmail.com and we will take appropriate steps.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date above. We encourage you to review this page periodically. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.
12. Contact
For privacy-related questions or requests: nyoargames@gmail.com