This Privacy Policy explains how dtoxy (“we”, “us”) collects, uses, and protects your information when you use the dtoxy mobile app. We built dtoxy to be private by default: we analyze the photos you scan and then discard them.
1. Information we collect
- Account information. When you sign in, we collect your email address. Authentication is handled by Supabase using a one-time email code — we never see or store a password.
- Scan records. For each scan we store the results — product name, the ingredients/materials identified, their toxicity scores, the scan type, and a timestamp — linked to your account. This powers your scan history and trends.
- Health profile (Pro, optional). If you are a dtoxy Pro subscriber and choose to create a health profile, we store the allergies, dietary preferences, health conditions, and “always avoid” ingredients you enter, so we can personalize your results. See the dedicated section below.
- Subscription records. If you subscribe to dtoxy Pro, we store the Apple transaction identifiers, product id, status, and expiry date needed to grant and verify your subscription.
- Advertising identifiers. On the free plan we show ads via Google AdMob, which may use your device’s advertising identifier (subject to your App Tracking Transparency choice).
- Diagnostics. Basic, non-identifying logs and error reports that help us keep the service reliable.
2. Your health profile and personalized results (Pro)
Personalized scoring is an optional dtoxy Pro feature. It is entirely up to you whether to provide this information — the app works fully without it.
- What it is. The allergies, dietary preferences, health conditions, and “always avoid” ingredients you enter in the app. Because some of this can relate to your health, we treat it as sensitive and process it only with your consent, which you give by choosing to enter it.
- How we use it. Only to personalize your scans — we factor it into a product’s overall score and summary, flag ingredients that match your allergies or avoid-list, and generate a short “for you” note. To produce that personalized assessment, your profile is sent as context to our AI provider (OpenRouter / Google Gemini) together with the scan. It is processed to generate your result and is not used to train models.
- What we never do. We never use your health profile for advertising, and we never sell it.
- Your control. You can view, edit, or clear your health profile at any time in the app. It is permanently deleted when you delete your account (see Delete account). If your Pro subscription lapses, your profile is no longer used to personalize results.
3. What we don’t store
- Your photos. Images you scan are sent securely to our AI provider for analysis and are not retained by dtoxy after the result is produced.
- Shared reports. When you share a result, the report image is generated on your device and shared only where you choose — we don’t receive or store it.
- We never sell your data.
4. How we use your information
- To analyze the products you scan and return toxicity results.
- To keep your scan history and trends available across sessions.
- To personalize your results from your health profile (Pro), where you have provided one.
- To grant and verify your dtoxy Pro subscription.
- To show ads to users on the free plan.
- To operate, secure, and improve the service.
5. Camera and photos
dtoxy uses your camera and photo library only to capture the product you want to scan. The image is processed to produce a toxicity result and then discarded — it is not added to any profile and is not used to train models.
6. Advertising (free plan)
Free users see ads served by Google AdMob. On iOS, ad personalization depends on your App Tracking Transparency choice — you can decline tracking at any time in your device settings. dtoxy Pro subscribers see no ads, and your health profile is never used for advertising.
7. Subscriptions and in-app purchases
dtoxy Pro is an auto-renewing subscription billed through your Apple account. Payments are processed entirely by Apple; we receive only the transaction metadata required to confirm your entitlement. We do not receive your payment-card details.
8. Third-party sub-processors
We rely on a small set of trusted providers:
- Supabase — authentication (email sign-in).
- OpenRouter & Google (Gemini) — AI analysis of the images and ingredients you scan, and, for Pro users who set one, your health-profile preferences sent as context to personalize results.
- Open Food Facts — public product-database lookups.
- Apple — App Store payments and subscriptions.
- Google AdMob — advertising for free-plan users.
- Our hosting provider — runs the dtoxy backend and database.
9. Data storage and security
Data is transmitted over encrypted connections (TLS) and stored on access-controlled infrastructure. Access to your account is protected by your email sign-in.
10. International data transfers
Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
11. Data retention
We keep your account, scan history, and (if provided) your health profile until you delete them — you can clear your health profile in the app at any time, and deleting your account removes your account, scan history, and health profile. Apple transaction records are retained as long as required for tax and audit purposes. See Delete account to remove your data.
12. Your rights
Depending on where you live (e.g. under GDPR, CCPA, or LGPD), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. You may also withdraw consent for personalized scoring at any time by clearing your health profile. To exercise these rights, contact us at comercial@morya.tech.
13. Children’s privacy
dtoxy is not directed to children under 13 (or the minimum age in your region) and we do not knowingly collect their personal information.
14. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the “Effective” date above.
15. Contact us
Questions about this policy or your data? Email comercial@morya.tech.