Privacy Policy

Who we are

InZoRAH is operated by KYSolutions LLC ("we", "us"). This policy explains what personal information the app collects, how it is used, and the choices you have. Questions go to support@inzorah.com.

What we collect

Account details: your name, email address and — for email sign-ups — a password that we store only as a one-way cryptographic hash. We never store your password itself. If you sign in with Google, we receive your name, email and profile image from Google; we never receive your Google password.

Email addresses for launch and waitlist sign-ups: if you ask to be told when InZoRAH launches, we store the email address you give us and use it only to send you that announcement and related product updates. You can ask us to delete it at any time by emailing support@inzorah.com, and every message includes an unsubscribe link.

Barcode and scan history: when you scan a barcode, photograph a label or ask about a product, we store that scan — the barcode number, the product identified, the ingredient text read from the label, your question and the result — so you can see your history, keep products, get recall alerts and avoid re-scanning. Scan history is tied to your account. You can delete individual scans, delete them in bulk, or delete your whole account, which removes all of it.

Profile you choose to give us: diet, allergies, skin concerns, ingredients you avoid, budget preference and an optional profile photo. All of it is optional and exists only to personalise your results.

Product activity: the products you scan or ask about, the products you keep, your shopping list, watchlist and any household circle you join.

Technical basics and analytics: app version, device platform, crash and error logs, and — if you turn on notifications — a device push token. We also record anonymous usage analytics such as which screens and features are opened, which buttons are tapped, and a two-letter country code, so we can see what works and fix what does not. Analytics events are not used to build advertising profiles and are not sold.

Payment: if you subscribe, Stripe or the app store processes your payment. We receive a confirmation and plan status. We never see or store your full card number.

Where product information comes from

To identify a product from a barcode and to read its ingredient list, we look it up in public and third-party product databases, including Open Food Facts, Open Beauty Facts, UPCitemdb, USDA FoodData Central and openFDA, as well as manufacturers’ own published records.

When we do this we send only the barcode number or product name — never your name, your email address or anything about your profile. These services have their own privacy policies and terms, and the accuracy and completeness of their records is outside our control.

What we do NOT collect

We do not sell your personal information and we do not share it with data brokers. We do not run third-party advertising networks or ad trackers inside the app, and we do not use your data for targeted advertising. We do not access your camera roll, microphone, camera or location unless you tap a feature that needs it and grant permission — and we only use it for that action.

Affiliate shopping links

Some product links in the app and on our website are affiliate links. We take part in the Amazon Associates program and the Walmart affiliate program, and we may join other retailer programs. These links contain a tracking code so the retailer can tell that the visit came from us, and we may earn a small commission if you buy something — at no extra cost to you.

When you tap one of those links you leave InZoRAH and the retailer’s own privacy policy and cookies apply. We do not receive your name, address or payment details from the retailer, only aggregate reports of clicks and qualifying orders. Commissions never change which products we recommend or the scores we show.

How we use it

To analyse ingredients and personalise scores, warnings and recommendations for you.

To run your account: sign-in, email verification, password resets, referrals and subscription status.

To send transactional email you asked for (verification codes, password resets, a welcome note, launch or waitlist announcements, and the weekly digest if you opt in) and product-recall alerts.

To keep the service working and safe: debugging, abuse prevention and rate limiting.

To understand and improve the experience using anonymous, aggregated analytics — for example seeing that a feature is never used, or that a screen is slow.

Who we share it with

Service providers only, and only what they need: AI analysis providers (Anthropic Claude and OpenAI, via our managed integration layer) receive ingredient text and your question — not your name or email; Stripe handles payments; our managed email provider delivers your emails; Google handles sign-in if you choose it; Firebase and Expo deliver push notifications; MongoDB hosts our database.

Product reference sources we query receive only product names or barcodes — never anything about you. These include Open Food Facts, Open Beauty Facts, UPCitemdb, USDA FoodData Central, openFDA, PubMed, Wikidata, and retailer catalogues such as Amazon, Walmart and Google Shopping.

Analytics: usage events are stored in our own database. We do not send them to an advertising network.

We may disclose information if legally required, or to protect our rights and users.

Your choices and rights

You can edit or clear your profile, delete individual scans, or delete your scan history in bulk at any time from inside the app.

You can permanently delete your entire account from Profile → Delete my account. That immediately removes your account, email, password hash, scan and barcode history, sessions, referral record and payment records. Deletion cannot be undone.

You can unsubscribe from launch, waitlist and digest emails using the link in any message, or by emailing support@inzorah.com, and we will remove your address.

Depending on where you live you may have rights to access, correct, export or delete your data, and to withdraw consent. Email support@inzorah.com and we will respond within 30 days.

You can turn notifications, the weekly digest and optional analytics collection off at any time in the app’s settings.

Keeping it and keeping it safe

We keep your data while your account is open, and delete account data when you delete your account. Backups and legally required records may persist for a short period afterwards.

Data travels over encrypted connections, passwords are hashed with Argon2, sessions expire, and repeated failed sign-ins are throttled. No system is perfectly secure, so please use a strong, unique password.

Children

InZoRAH is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has an account, contact support@inzorah.com and we will delete it.

International users

We operate from the United States, so your information is processed there. If you use the app from outside the US, you consent to that transfer.

Changes

If we make a material change to this policy we will update the date below and, where appropriate, tell you in the app.