Privacy Policy

Camera and permissions

Label Lark asks for camera access when you open the scanner. It uses Apple's barcode detection on the device to read the code on food packaging. The app does not save or upload camera images or video, and it does not access your photo library, microphone, contacts, location, or Health data. You can turn camera access off at any time in iPhone Settings; barcode scanning requires that permission.

Product lookups and images

Product information comes from Open Food Facts. When you scan a product or reopen a saved scan, Label Lark sends the product's barcode directly to its API. The request includes an identifier for the app and its version, not a user or device identifier. The app also downloads the product images referenced by Open Food Facts, including thumbnails shown in History.

These requests expose your IP address and the requested barcode or image address to the servers handling them. Those services may keep technical request logs under their own policies. Label Lark does not send them your camera images, saved scan history as a whole, scores, or purchase status, and it does not require an Open Food Facts account. See Open Food Facts' privacy policy for its handling of requests and data.

What stays on your phone

• Scan history. Successful scans are saved in the app's private storage: the barcode, product name and brand, product image address, score, rating, scoring version, and scan date. The saved history database is not uploaded or synced. Individual scan events can include the barcode, score, and rating, as described in the analytics section below.
• Preferences. The app stores whether you have completed onboarding and used your free scan so it can show the right screens and apply the scan allowance.
• Backups and caches. Local app data may be included in your iCloud or computer device backups, depending on your settings. iOS may also cache downloaded product information and images. These backups and caches are managed by Apple's system services.

Analytics and diagnostics

Label Lark uses TelemetryDeck to understand how people use the app and where they encounter problems. Events include opening the app or scanner, completing onboarding, looking up a product, displaying a score, viewing the subscription screen, and completing or restoring a purchase. Event properties can include the scanned barcode, score and rating, scoring version, lookup outcome, onboarding or free-scan status, subscription product identifier, and purchase outcome.

TelemetryDeck also includes technical information such as your device model, iOS version, app version and build, language and region settings, time zone, display and accessibility settings, session information, and event timing. Its default parameters documentation describes these fields.

To count repeat usage, TelemetryDeck hashes an identifier on your device and hashes it again on its servers. The original identifier is not retained in the analytics data. We do not send your name, email, camera images, payment details, or Apple Account credentials to TelemetryDeck, and we do not use advertising identifiers. TelemetryDeck states that it does not store IP addresses and hosts its service in the EU. See its privacy policy and privacy FAQ for details.

The app also records usage events and diagnostic messages in the device's system log. These can include the event properties described above. System logs are retained and rotated by iOS, and a diagnostic report you choose to send us may contain them. Apple may separately provide app analytics and purchase reports under its own policies and your sharing settings; see App Store & Privacy.

Purchases

Unlimited scans are available through auto-renewable App Store subscriptions. Apple processes payments. Label Lark uses Apple's StoreKit framework to receive and verify transaction and subscription information, such as the product purchased and whether access is active, so it can unlock scans and restore purchases. We do not receive your payment card details, billing address, or Apple Account credentials. Apple's handling of purchases is described in App Store & Privacy.

Retention and deletion

Saved history remains in the app until you delete it or delete the app. To remove an individual scan, swipe left on it in History and tap Delete. Using Delete App in iPhone Settings removes the app's local history and preferences; offloading the app preserves its data. Backup copies are managed separately through your iCloud or computer backup settings. Deleting a scan does not erase earlier system log entries, analytics events already sent to TelemetryDeck, or request logs held by Open Food Facts.

TelemetryDeck does not currently specify a fixed automatic deletion schedule for stored analytics events; see its privacy FAQ. Deleting the app stops it from sending new events but does not remove events already received. You can contact us with privacy requests. Because analytics events do not include your name or email, we may be unable to associate them with a particular person.

We cannot retrieve scan history that exists only on your device. For information held by Apple or Open Food Facts, consult their privacy policies and contact them directly. You can manage or cancel your subscription through Settings in Label Lark or your Apple Account's subscriptions. Deleting the app does not cancel a subscription.

Support and sharing

If you email us, we receive your email address and whatever you choose to include. We use that information to respond to your request and resolve support issues, and retain it only as long as needed for those purposes or to meet legal obligations. You can use the contact address below to request access, correction, or deletion of information you have sent us.

We do not sell personal information or share it for advertising. Label Lark does not use advertising identifiers or track you across other companies' apps or websites.

Changes

If this policy changes, the new version will be posted at this address with an updated date.

Contact

Questions about this policy or privacy requests can be sent to [email protected].