Privacy Policy

Last updated: August 8, 2026

Label X-Ray ("the app") helps you understand food and cosmetic ingredient labels, and search official government recall databases. This page explains exactly what data the app handles and why, in plain language.

Camera

The app uses your device's camera in a few ways:

• Barcode scanning happens entirely on your device using Google's ML Kit. No photo or image is captured, stored, or transmitted — only the barcode number detected in the frame is used.
• Ingredient list photos (an alternative to typing, for food or cosmetics) are sent to Anthropic so it can read and analyze the ingredients in the photo, the same way pasted text is. The photo itself is not stored by us afterward — see "Data retention" below.
• Recall photo identification (an alternative to typing a product name when searching for recalls) is sent to Anthropic to read the product name and brand off the photo. The photo itself is not stored afterward.

What we send to our server

Depending on how you use the app, we send the following to our backend server so it can generate a result:

• The barcode number (if you scanned or entered one)
• The ingredient text and product name (either pasted by you, or retrieved from a public product database using the barcode)
• A photo of an ingredient list, if you choose to use the photo option instead of typing
• A product name or photo, if you're searching for recalls

The app also generates a random device identifier (not tied to your name, email, or any personal information) and sends it with each request, so we can enforce the free monthly scan limit described below. Recall search itself is free and unlimited and is never counted against that limit — the device identifier is still sent with recall requests, but only to enforce a generous daily cap on the optional photo-identify feature, to prevent abuse.

We do not require or collect any account information, name, email address, or other personal identifiers to use the app.

Subscriptions and purchases

Label X-Ray offers an optional paid subscription and one-time "scan pack" purchases for additional scans beyond the free monthly limit. All payments are handled entirely by the app store you downloaded the app from — Google Play Billing on Android, or the App Store on iOS — we never see or store your payment card, billing address, or other payment details. When you make a purchase, Google or Apple provides our server with a purchase token or transaction ID, which we send to that store's own server API (Google Play Developer API, or Apple's App Store Server API) to confirm the purchase is genuine before granting access. We store only: your device's random identifier, whether it currently has an active subscription (and its expiry date), and any remaining scan-pack credits.

Sharing a result

The optional "Share result" button generates an image (your scan's score and verdict) entirely on your device — nothing is sent to our server to create it. The image is saved temporarily to your device's own cache storage so your phone's operating system can hand it to whichever app you choose from the share menu (Messages, WhatsApp, etc.), then gets overwritten the next time you share. We have no visibility into, or control over, what happens to it once you pick where to send it.

Third-party services we use

• Anthropic (Claude API) — the ingredient text or ingredient list photo you submit is sent to Anthropic to generate the plain-language analysis. See Anthropic's Privacy Policy.
• Open Food Facts — when you scan a barcode, we query this free, public product database to retrieve the product's name and ingredient list. See Open Food Facts' Privacy Policy.
• Official recall databases — recall searches query the US Consumer Product Safety Commission, Health Canada, and the EU Safety Gate directly. We only forward your search terms to retrieve matching results; we don't otherwise share data with these agencies.
• Google Play Billing — processes subscription and scan-pack payments on Android. See Google's Privacy Policy.
• Apple App Store — processes subscription and scan-pack payments on iOS. See Apple's Privacy Policy.

International data transfers

Our server and its third-party providers (including Anthropic) may process data outside of your own country, including in the United States. Where required, we rely on the safeguards those providers maintain (such as standard contractual clauses) for handling data transferred internationally.

Legal basis for processing (EEA/UK users)

If you're in the European Economic Area, UK, or a similar jurisdiction: we process the data described above based on our legitimate interest in providing the app's core functionality and preventing abuse (like the scan and daily-cap limits), and to perform the service you're requesting when you submit a scan or search. We don't process your data for marketing, and we don't need your consent for the processing described here since no more data is used than necessary to provide the feature you asked for.

Data retention

Our backend does not store the ingredient text, ingredient list photos, barcode numbers, recall search terms or photos, or analysis results you submit — each request is processed and the response returned to your device without being saved. What we do retain, tied only to your device's random identifier: a count of scans used in the current month (resets automatically each month), a count of recall photo-identify requests used today (resets automatically the next day), your subscription status and expiry date if you're subscribed, and any unused scan-pack credits.

How we keep data safe

All requests between the app and our server are encrypted in transit (HTTPS). As explained above, we don't store the content you submit at all — only the minimal, non-identifying counters described in "Data retention." No method of transmission over the internet is ever 100% secure, but there's very little to protect in the first place: we simply don't hold onto your submissions.

Analytics, advertising, and cookies

The app contains no advertising and no analytics or tracking SDKs. The labelxray.app website doesn't use cookies or any tracking technology either — it's a static set of pages with no visitor tracking of any kind.

Your rights, and data we don't sell

We do not sell, rent, or share your personal information with anyone for advertising or marketing purposes — there's nothing to sell in the first place, since we only retain the minimal, non-identifying data described above. You can ask us what we store for your device, or request it be deleted, at any time — see our data deletion page for how. Since we don't collect your name, email, or other identifying information, most requests can be handled quickly once you provide your device identifier.

Children's privacy

Label X-Ray is not directed at children under 13, and we do not knowingly collect personal information from children.

Changes to this policy

If this policy changes, the "Last updated" date above will be revised. Continued use of the app after changes means you accept the updated policy.

Contact

Questions about this policy or the app can be sent to support@labelxray.app.