Skip to content
TrustPick

Privacy policy

Last updated October 7, 2026

This policy covers both trustpick.app and the TrustPick mobile app ("TrustPick", "we", "us"). It explains what we collect, why, who we share it with, and the choices you have. TrustPick is operated by an independent individual developer based in India — there is no registered company or other legal entity behind it. For privacy questions, email support@trustpick.app.

Information we collect

Photos you scan. When you scan a product label with your camera or upload one from your gallery, that image is sent to our ingredient-recognition service (Microsoft Azure Cognitive Services for text extraction, and Azure OpenAI for the ingredient analysis) to read the ingredients and generate your result. We don't keep the photo after the analysis completes, unless you're a TrustPick Plus subscriber with scan history: then a copy of the photo is saved with that scan in your history until you delete your account.

Barcodes you scan. The barcode number is sent to our servers to look up the product. If it's not already in our database, we query third-party product databases (Open Food Facts, Nutritionix, USDA FoodData Central, and similar) server-side to find it, and cache the result so future scans of the same product are instant.

Approximate location. With your permission, the app uses your device's location to show you products relevant to your region (India, US, Europe, or a global default). Only a coarse region code derived on your device ever reaches our servers — your precise coordinates never do. You can deny location permission and the app falls back to your device's language/region setting, or a generic global catalog.

Account information. Signing in is optional — you can use TrustPick as a guest. If you sign in with Google, we receive your name, email address, and profile photo from Google (via Firebase Authentication) to create your account and sync your scan history and favorites across devices.

Diet and allergen preferences. If you set up an allergen or dietary profile, we store your selections (e.g. peanut allergy, sugar-conscious) to flag conflicts on future scans. This is self-reported and optional — we deliberately don't ask about medical conditions; see "Health information is not medical advice" below.

Purchase information. If you subscribe to TrustPick Plus, the purchase is processed by the Google Play Store or Apple App Store, and entitlement status is verified through our payments provider, RevenueCat. We don't see or store your payment card details.

Device and usage data. We generate a random device identifier (not tied to your phone number or hardware serial) to enforce free-tier scan limits for guests and to rate-limit abuse of our lookup services. We also collect basic usage analytics — which screens and features you use, crash reports — via PostHog, to understand how the app is used and fix problems.

How we use this information

To provide the core service (ingredient analysis, product lookup, allergen flagging), keep your account and history in sync, process subscription payments, prevent abuse of our free tier and third-party API quotas, and understand and improve how TrustPick is used. We do not sell your personal information.

Who we share information with

We share data with the service providers who help us run TrustPick, and only for the purposes above:

  • Microsoft Azure (Cognitive Services, Azure OpenAI, Cosmos DB, Functions hosting) — image/text processing and data storage
  • Google Firebase — sign-in and authentication
  • RevenueCat and the Google Play / Apple App Store — subscription billing and entitlement
  • PostHog — product analytics
  • Third-party product databases (Open Food Facts, Nutritionix, Edamam, USDA FoodData Central, Spoonacular, UPC Item DB) — barcode lookups, queried server-side; your barcode scans reach these providers, but never your account identity or location

We may also disclose information if required by law, or to protect the rights, safety, or security of TrustPick, our users, or the public.

Health information is not medical advice

TrustPick is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. TrustPick's ingredient analysis, nutrition callouts, and Health Score are informational only — never a medical claim or professional advice. We don't ask for or store medical conditions; dietary preferences (e.g. "sugar-conscious") are self-selected and used only to personalize wording, not to diagnose or recommend treatment. Always check the physical product and consult a qualified professional for medical or dietary decisions.

Data retention

We keep your account data, scan history, and favorites for as long as your account is active, and delete them when you delete your account (see below). Cached product/ingredient data (not tied to any individual user) is kept to make future scans of the same product instant for everyone. Scanned photos are not retained after analysis, except the copies saved with a Plus subscriber's scan history, which are deleted with the account.

Your choices and rights

You can use TrustPick as a guest without an account. Signed-in users can review and edit their allergen/diet profile, scan history, and favorites in the app at any time.

Deleting your account. In the app, go to Profile → Account → Delete account; your account and data are deleted straight away. If you no longer have the app, request deletion at trustpick.app/delete-account and we'll complete it within 30 days. Deletion removes your account and sign-in, your allergen/diet settings, scan history (including saved photos), favorites, support messages linked to your account, and your customer record with our payments provider. Products you added to the shared catalogue stay available, with nothing linking them to you, and short-lived anti-abuse counters expire on their own within hours. Deleting your account does not cancel a subscription billed by Google Play or the App Store; cancel it there.

To request access to or correction of your personal data, email support@trustpick.app. Depending on where you live, you may have additional rights under local law (for example, India's Digital Personal Data Protection Act, or GDPR if you're in the EU) — contact us to exercise them.

Children's privacy

TrustPick is not directed at children under 13 (or the minimum age required by your country), and we don't knowingly collect personal information from them. Our baby product category is intended for use by parents and caregivers, not by children themselves. If you believe a child has provided us with personal information, contact us and we'll delete it.

Security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS/TLS) between the app and our servers. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

International users

TrustPick is developed in India and our servers are hosted on Microsoft Azure's India region. If you use TrustPick from outside India, your information will be transferred to and processed in India and by the service providers listed above, which may be located in other countries.

Changes to this policy

We may update this policy as TrustPick changes. We'll update the "Last updated" date above, and for material changes, we'll provide a more prominent notice (such as an in-app message).

Contact

Questions about this policy, or a request about your data, can be sent to support@trustpick.app, or via our Contact page.