SahihScan Privacy Policy

Last updated: 2026-07-02

SahihScan ("the app") is built by deepfai. We collect the minimum data needed to provide halal ingredient analysis.

What we collect

• Scans: barcodes you scan, ingredient text, and the resulting verdicts. Stored on your device; synced to our servers only if you sign in with a Pro subscription.
• Label photos: processed transiently for analysis and never stored — neither on your device beyond the analysis nor on our servers.
• Halal profile: your strictness preferences and personal watchlist. Stored on device; synced to your account when signed in.
• Saved restaurants (Pro): the restaurant names and notes you save in Restaurant Mode. Stored on our servers and tied to your account; removed on account deletion.
• Account data: email (or Apple/Google identity) when you choose to sign in. Signing in is never required to scan.
• Usage analytics: anonymized events (PostHog) with a random identifier until you sign in. We never sell data.
• Advertising (free tier only): free users are shown banner ads via Google AdMob. We request non-personalized ads, so AdMob does not use a cross-app advertising identifier to profile you; it may still collect a device identifier, coarse location (from IP), and ad-interaction data to serve and measure ads, per Google's policies (https://policies.google.com/technologies/partner-sites). Pro removes all ads. We do not perform App Tracking Transparency tracking.
• Purchases: handled by Apple/Google via RevenueCat; we receive entitlement status, never payment details.

Where data goes

• Product lookups query Open Food Facts (the barcode is sent).
• AI analysis requests are processed by our server functions and a language-model service we operate or contract under a no-training agreement; ingredient text (or a transient label photo) is sent for analysis and is not used to train models.

Your rights

• Export your scan history and halal profile from Settings → "Export my data".
• Delete your account and synced data from Settings → "Delete account" (immediate, irreversible).
• Contact: haris.sidd786@gmail.com

Retention

Device data stays until you delete the app or use in-app deletion. Server data is removed on account deletion; error reports and aggregate usage metering are anonymized (unlinked from your account) rather than deleted.