Privacy Policy for "Is It Healthy" App

Last Updated: December 28, 2025

Dark Matter Lab, LLC ("we," "us," or "our") operates the "Is It Healthy" mobile application (the "App"), available on iOS and Android platforms. Our registered address is Chapman Rd Ste 101B, Newark, DE 19702-5489, United States.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the App. We are committed to protecting your privacy and handling your data in a transparent and responsible manner.

By downloading, accessing, or using the App, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the App.

1. Information We Collect

We collect the following types of information:

a. Information You Provide Directly

Account Information: When you create an account or sign in, you may provide your email address and password, or use third-party authentication (Apple ID or Google account via OAuth). In the latter case, we receive limited profile information (such as email or a unique identifier) from Apple or Google.
Uploaded Photos: Images of food products, packaging, nutrition labels, or meals that you take or upload for analysis. These images are sent to AI providers for processing and may be stored in your account as part of your scan history.
Food Diary Entries: Details of scanned or manually logged food items, including nutritional insights and consumption records.
AI Chat Interactions: Your questions and our responses in the AI chat feature regarding products, ingredients, alternatives, or diet-related topics.

b. Automatically Collected Information

Device and Usage Data: Information about your device (e.g., device type, operating system version, unique device identifier, IP address), app interactions (e.g., features used, scan frequency), and anonymized crash reports to help us improve the App.
AI Usage Data: Limited metadata about AI interactions (e.g., query volume) solely for internal billing and service management purposes.

We do not collect location data (precise or approximate).

Food consumption tracking and dietary inquiries may indirectly relate to health, but we do not collect sensitive health data unless you voluntarily include it in chats or diary entries.

c. Information from Third Parties

Authentication data from Apple and Google (for sign-in).
Analysis results from AI providers (OpenAI, Grok, and Azure AI).

2. How We Use Your Information

We use your information to:

Provide the App's core features: Analyze uploaded photos to determine if a product is healthy, moderate, or unhealthy; provide benefits, concerns, nutrition facts, and personalized insights.
Maintain and synchronize your food diary and scan history across your devices via cloud storage.
Power the AI chat assistant for answering questions about products, suggesting alternatives, or explaining ingredients.
Monitor AI usage for billing and service optimization.
Improve the App, troubleshoot issues, and develop new features.
Communicate essential service updates or respond to your support requests.
Comply with legal obligations.

Our processing is based on your consent (e.g., photo uploads and account creation), the performance of our service to you, or our legitimate interests (e.g., app security and improvement).

3. How We Share Your Information

We do not sell your personal information and we do not display advertisements.

We may share information with:

AI Service Providers: OpenAI, Grok (xAI), and Azure AI – your uploaded photos and chat queries are sent to these providers for real-time analysis. Results are returned to the App, and photos may be stored in your account history.
Cloud Storage Providers: Trusted providers (e.g., AWS and Supabase) for securely storing and synchronizing your account data, scan history, and diary entries.
Authentication Providers: Apple and Google – limited data for sign-in purposes only.
Payment Processors: For future subscription features, we will use Apple App Store and Google Play billing systems, which handle payment information directly (we do not receive or store your payment details).
Legal Authorities: If required by law, to protect our rights, or in response to valid government requests.
Business Transfers: In the event of a merger, acquisition, or sale of assets.

All third-party providers are contractually obligated to protect your data and use it only for the specific services they provide to us.

4. Data Storage and Security

Account data, scan history (including processed photos), diary entries, and chat history are stored securely in the cloud to enable synchronization and backups across your devices.
Uploaded photos are sent to AI providers for analysis and then stored in your account if part of a scan or diary entry.
We implement industry-standard security measures, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

5. Data Retention and Deletion

We retain your personal data for as long as your account is active or as needed to provide the App's services.
You can delete individual scans, diary entries, or your entire account at any time through the App settings.
Upon account deletion request, we will delete your personal data within 30 days, except where retention is required for legal reasons (e.g., fraud prevention or compliance).
Anonymized data may be retained for analytics and service improvement.

6. Your Rights and Choices

Depending on your location (e.g., UK/EU under GDPR, California under CCPA/CPRA, or similar laws), you may have rights to:

Access, correct, update, or delete your personal data.
Object to or restrict certain processing.
Withdraw consent where processing is consent-based.
Request data portability.
Opt out of certain data uses.

To exercise these rights or submit any privacy-related requests:

We will respond to verifiable requests promptly and free of charge, in accordance with applicable law.

You can also revoke device permissions (e.g., camera access) via your device settings.

7. Children's Privacy

The App is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.

8. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. We use appropriate safeguards, such as Standard Contractual Clauses, to ensure an adequate level of protection for international transfers.

9. Changes to This Privacy Policy

We may update this Policy from time to time. We will notify you of material changes via the App or our website. Your continued use of the App after changes take effect constitutes acceptance of the updated Policy.

10. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our data practices, please:

Website: https://isithealthy.io

Postal Address (for legal notices only):
Dark Matter Lab, LLC
Chapman Rd Ste 101B
Newark, DE 19702-5489
United States

This Privacy Policy is designed to comply with applicable laws, including GDPR (UK/EU), CCPA/CPRA (California), Google Play Store policies, and Apple App Store guidelines.