Privacy Policy for Karrot AI

Welcome to Karrot AI ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency in how we handle your data. This Privacy Policy is designed to comply with applicable privacy laws and the Apple App Store Review Guidelines.

This Privacy Policy applies to our mobile application, Karrot AI, and its associated services (collectively, our "Service"). By accessing or using our Service, you agree to the collection and use of your information in accordance with this policy.

1. Information We Collect and How We Use It

We adhere to the principle of data minimization, collecting only the information necessary to provide and improve our Service.

• Account Information: We support "Sign in with Apple" and Google Sign-In. We collect your name, email address, and profile picture solely to create and authenticate your account.
• Usage and Analytics Data: We collect anonymous, aggregated data regarding your interaction with the app (e.g., features used, scan history) to improve app performance and user experience.
• Subscription Data: If you subscribe to Karrot Pro, your purchases are processed securely by Apple. We do not collect or store your credit card or payment details. We use a third-party provider (Superwall) to manage subscription states.

2. Camera and Photo Library Access

To provide our core functionality, Karrot AI requires access to your device's Camera and Photo Library.

• Purpose: Access is used strictly to scan product barcodes, analyze food items, and read ingredient labels.
• Processing: Images captured via the camera or selected from your photo library are processed to identify products and provide nutritional insights or allergen alerts.
• Storage: We do not secretly upload your photos in the background. Images are only used for the explicit purpose of scanning and analysis at the moment of your request.

3. Data Sharing and Disclosure

We do not sell your personal data to third parties. We only share your information with trusted third-party service providers necessary to operate our app:

• Firebase & Google Cloud: For secure database hosting, authentication, and crash reporting.
• Superwall: For managing in-app purchases and subscription access.
• Apple: For processing secure payments and subscriptions.

These providers are bound by strict confidentiality agreements and are prohibited from using your data for any other purpose.

4. Data Retention and Account Deletion

We retain your personal data only for as long as your account is active or as needed to provide you the Service.

Right to Deletion: In compliance with Apple's guidelines, you have the right to delete your account and all associated personal data directly within the Karrot AI app.

• To delete your data, navigate to Settings > Account > Delete Account within the app.
• Upon initiating deletion, your account, scan history, and personal details will be permanently removed from our active servers.

5. App Tracking Transparency (ATT)

We respect your tracking preferences. Karrot AI will explicitly request your permission through Apple's App Tracking Transparency framework before tracking your activity across other companies' apps and websites for targeted advertising or advertising measurement purposes. You can manage these permissions at any time in your iOS device Settings.

6. Security of Your Information

We implement industry-standard administrative, technical, and physical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. All data transmitted between your device and our servers is encrypted.

7. Children's Privacy

Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to remove that information and terminate the child's account.

8. Changes to This Privacy Policy

We may update our Privacy Policy periodically. We will notify you of any material changes by posting the new Privacy Policy within the app and updating the "Last Updated" date.