InZoRAH
Privacy Policy
What we collect, why, and how to delete it.
Who we are
InZoRAH is operated by KYSolutions LLC ("we", "us"). This policy explains what personal information the app collects, how it is used, and the choices you have. Questions go to kong@kysolutionsmn.com.
What we collect
Account details: your name, email address and — for email sign-ups — a password that we store only as a one-way cryptographic hash. We never store your password itself. If you sign in with Google, we receive your name, email and profile image from Google; we never receive your Google password.
Profile you choose to give us: diet, allergies, skin concerns, ingredients you avoid, budget preference and an optional profile photo. All of it is optional and exists only to personalise your results.
Product activity: the products you scan or ask about, the products you keep, your shopping list, watchlist and any household circle you join.
Technical basics: app version, device platform, crash and error logs, and — if you turn on notifications — a device push token.
Payment: if you subscribe, Stripe or the app store processes your payment. We receive a confirmation and plan status. We never see or store your full card number.
What we do NOT collect
We do not sell your personal information. We do not run third-party advertising trackers inside the app. We do not access your camera roll, microphone, camera or location unless you tap a feature that needs it and grant permission — and we only use it for that action.
How we use it
To analyse ingredients and personalise scores, warnings and recommendations for you.
To run your account: sign-in, email verification, password resets, referrals and subscription status.
To send transactional email you asked for (verification codes, password resets, a welcome note, and the weekly digest if you opt in) and product-recall alerts.
To keep the service working and safe: debugging, abuse prevention and rate limiting.
Who we share it with
Service providers only, and only what they need: AI analysis providers (Anthropic Claude and OpenAI, via our managed integration layer) receive ingredient text and your question — not your name or email; Stripe handles payments; our managed email provider delivers your emails; Google handles sign-in if you choose it; Firebase and Expo deliver push notifications; MongoDB hosts our database.
Public reference sources we query (Open Food Facts, USDA FoodData Central, openFDA, PubMed, Wikidata, Amazon and Google Shopping) receive only product names or barcodes — never anything about you.
We may disclose information if legally required, or to protect our rights and users.
Your choices and rights
You can edit or clear your profile, delete individual scans, or delete them in bulk at any time from inside the app.
You can permanently delete your entire account from Profile → Delete my account. That immediately removes your account, email, password hash, sessions, referral record and payment records. Deletion cannot be undone.
Depending on where you live you may have rights to access, correct, export or delete your data, and to withdraw consent. Email kong@kysolutionsmn.com and we will respond within 30 days.
You can turn notifications and the weekly digest off at any time.
Keeping it and keeping it safe
We keep your data while your account is open, and delete account data when you delete your account. Backups and legally required records may persist for a short period afterwards.
Data travels over encrypted connections, passwords are hashed with Argon2, sessions expire, and repeated failed sign-ins are throttled. No system is perfectly secure, so please use a strong, unique password.
Children
InZoRAH is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has an account, contact kong@kysolutionsmn.com and we will delete it.
International users
We operate from the United States, so your information is processed there. If you use the app from outside the US, you consent to that transfer.
Changes
If we make a material change to this policy we will update the date below and, where appropriate, tell you in the app.