Privacy Policy

IngrediScan.Ai ("we", "our", or "us") is an AI-powered ingredient analysis tool built by Kowshek Iyyappan and Kavin, based in Tamil Nadu, India. We take your privacy seriously. This policy explains what data we collect, why, and how we protect it.

By using IngrediScan.Ai (the app at ingrediscan-ai.vercel.app) or this website (ingrediscan.in), you agree to the terms of this Privacy Policy.

Scan images. When you scan a product, the photo is converted to a base64 string and sent to our AI analysis service. We do not store the raw image. We store a SHA-256 hash of the image (a fingerprint, not the image itself) to power our caching system — so repeat scans of the same product return faster results without calling the AI again.

Analysis results. The ingredient analysis (score, flagged ingredients, rationale) is stored in our database linked to the image hash — never to your identity.

IP address. To enforce the free scan limit (3 scans per user), we store a SHA-256 hash of your IP address. We never store your raw IP. The hash cannot be reversed to identify you.

Waitlist data. If you join our waitlist, we collect your name, email address, and optional survey responses (products you'd scan, how you heard about us, pricing feedback). This is used solely to contact you at launch and improve the product.

Anonymous usage events. We collect anonymous product analytics (e.g. scan started, scan completed, scan limit reached). These events contain no personally identifiable information — only aggregate usage patterns.

We do not collect or store your name, email, or account information when you use the scanner — no account is required.

We do not store raw images. We do not store raw IP addresses. We do not sell your data to anyone, ever.

We do not run ads and we do not share your data with advertising platforms.

We use the following services to operate the product. Each has its own privacy policy:

Anthropic (Claude AI) — processes your scan images to identify ingredients. Images are sent to Anthropic's API and are subject to Anthropic's Privacy Policy. Anthropic does not train on API inputs by default.

Supabase — our database and backend infrastructure, hosted on AWS. Stores hashed image fingerprints, analysis results, hashed IPs, and waitlist submissions.

Vercel — hosts the app and landing page. Standard server logs (including IP addresses) may be retained by Vercel per their policy.

Tally — waitlist form submissions are also sent to Tally as a backup. Subject to Tally's Privacy Policy.

PostHog — anonymous product analytics. No PII is sent. Subject to PostHog's Privacy Policy.

IngrediScan.Ai is an informational tool only. Ingredient analysis results are generated by an AI model and are not medical advice. Do not use this app to make health, dietary, or treatment decisions. Always consult a qualified healthcare professional before making changes based on ingredient information.

We make no guarantees about the accuracy, completeness, or timeliness of any analysis result.

Scan cache records (hashed image fingerprint + analysis result) are retained indefinitely to improve performance for all users.

IP scan counts (hashed IPs) are retained for the duration of the free tier period and deleted when no longer needed for rate limiting.

Waitlist data is retained until you request deletion or 12 months after launch, whichever comes first.

Under India's Digital Personal Data Protection Act (DPDP Act, 2023) and applicable law, you have the right to access, correct, or request deletion of your personal data.

To exercise any of these rights, email us at kowshekiyyappan@gmail.com. We will respond within 30 days.

Note: scan data is stored against image hashes with no link to your identity, so we cannot retrieve your specific scans without the original image.

The app uses browser localStorage to remember your scan count and onboarding status. No tracking cookies are set. We do not use third-party advertising cookies.

IngrediScan.Ai is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted personal information to us, contact us immediately.

We may update this policy as the product evolves. We will update the "Last updated" date at the top. For material changes, we will notify waitlist members by email.

Questions, data requests, or concerns — email us at kowshekiyyappan@gmail.com.

IngrediScan.Ai · Tamil Nadu, India · Jurisdiction: Courts of Chennai