Yuko Privacy Policy

This policy describes how BG Mobile Dev ("we", "us", or "our") handles information in Yuko Scan for Food Safety for iPhone and iPad (bundle identifier burak.fatih.right.food, the "App"). It is specific to Yuko and, for this App, it replaces our general privacy policy.

The short version

• There is no account. No sign-up, no login, no e-mail address, no password — none exists anywhere in the App.
• We run no user database. No server of ours holds your scans, photos, health profiles or history.
• Your health profiles, allergen and condition settings, scan history, saved products and achievement badges live on your device.
• Label reading happens on your device: the text on an ingredient label is recognised by Apple's on-device Vision framework, and the additive explanations are generated by Apple's on-device language model where the device supports it. Photos of labels are not uploaded to us or to any AI provider.
• When you scan a barcode, the barcode number is sent to the Open Food Facts database to fetch the product's ingredient list. The request carries no identity.
• The App uses Firebase for crash reports, anonymous usage analytics and remote configuration. It shows Apple's App Tracking Transparency prompt, but it does not use the advertising identifier to track you across other companies' apps or websites, and it shows no advertising.

No account, no user database

Yuko has no registration of any kind. We never ask for your name, e-mail address, phone number, postal address or a password, and we have no way to associate the App's data with your identity. Because there is no account, there is also no server-side profile to breach, sell or hand over.

What stays on your device

The following is created and kept locally in the App's own storage on your device:

• Your health profiles: the names, icons, allergens and health conditions you enter for yourself and your family members
• Your scan history and saved products, including the verdicts shown for them
• Your achievement badges and learning progress
• Your settings, notification preferences, whether you have completed onboarding, and the household choices you made during onboarding

We do not receive a copy of any of it. You can delete profiles, history entries and saved products inside the App, and deleting the App removes all of this local data.

How scanning works

Photo and camera scans. When you point the camera at an ingredient label or pick a photo, the text is recognised by Apple's Vision framework on your device and matched against the App's built-in additive database, which is also stored on your device. The photo never leaves your device, and we never see it.

Additive explanations. On devices that support Apple Intelligence, the App may use Apple's on-device Foundation Models framework to phrase an explanation of an additive. Processing happens on the device; nothing is sent to us or to a third-party AI provider.

Barcode scans. When you scan a product barcode, the App sends the barcode number to the Open Food Facts API (world.openfoodfacts.org) to fetch that product's ingredient list and Nutri-Score. The request contains the barcode number and the App's standard network headers; it carries no name, no account and no identifier of yours. Open Food Facts is a non-profit, open database governed by its own terms of use. Product data shown from it is licensed under the Open Database License.

Health news

If you keep the optional health-news card or notification on, the App fetches public food-safety feeds directly from the publishing authorities (for example the European Food Safety Authority and the U.S. Food and Drug Administration). These are plain feed requests to those organisations' websites and carry no identity. You can turn the card and the notification off in Settings.

Notifications

All notifications Yuko shows — badge celebrations, scan reminders and health-news alerts — are scheduled locally on your device, and each type can be switched off in Settings. The App registers for push notifications through Firebase Cloud Messaging so that we could send service announcements in the future; we do not currently send any, and the registration token is not linked to anything that identifies you.

Analytics, crash reports and configuration

The App includes Google's Firebase SDK, which provides:

• Crashlytics — crash and performance reports, so we can fix problems. These contain the device model, OS version and the state of the App at the time of a crash. They are not linked to your identity.
• Analytics — anonymous usage events such as which screens are opened and whether a scan completed, together with a random app-instance identifier and device information. We use this to understand how the App is used and to improve it. We do not use it to build a profile of you across other apps or websites.
• Remote Config — switches that let us adjust the App's layout and copy without a new release. This involves no personal data.

The App asks for permission through Apple's App Tracking Transparency prompt. Whether you allow or deny it, the App does not track you across other companies' apps or websites, does not share data with data brokers and shows no advertising; the prompt exists so that the analytics SDK's behaviour is covered by your explicit choice.

Purchases and subscriptions

Purchases are processed entirely by Apple's App Store. We never see or receive your payment card, billing address or Apple Account credentials. The App reads your entitlement locally from StoreKit on your device to decide whether your subscription is active.

Apple also sends us App Store Server Notifications about subscription events for this App — a purchase, a renewal, a cancellation, a refund. Those messages identify a transaction, not a person: they carry no name, no e-mail address and no postal address. We do not keep them beyond short-lived server logs.

Subscriptions are governed by Apple's standard Terms of Use (EULA). You can manage or cancel a subscription in your Apple Account settings; deleting the App does not cancel a subscription.

Refund requests

If you ask Apple for a refund of a Yuko purchase, Apple may ask us for information about your use of the app. In that case we may share with Apple how much you used Yuko (for example how many labels you scanned), whether the purchase included a free trial, and how long you have used the app, so that Apple can make a fair decision. Apple makes the refund decision, not us. We do not share your scans, photos or any health profile.

Service providers

We share data only with the service providers needed to run the App, and only for that purpose:

• Google Firebase (Crashlytics, Analytics, Remote Config, Cloud Messaging), under Google's privacy policy.
• Open Food Facts, which receives barcode numbers for product lookups.
• Netlify, which hosts the endpoint that receives Apple's subscription notifications.

We do not sell data, and we do not share it with anyone else.

How long data is kept

• Everything on your device: until you delete it in the App or delete the App.
• Crash reports and analytics events: kept by Firebase under Google's standard retention, which we have not extended.
• Subscription notifications: not kept beyond short-lived server logs.

Camera and photo library

The App asks for camera access so you can scan labels and barcodes, and lets you pick label photos from your photo library. Photos are processed on your device only. You can change these permissions at any time in iOS Settings.

Health information

The allergens and health conditions you enter are used solely to decide, on your device, which additives to warn you about. They are never uploaded, and the App makes no medical diagnosis. The warnings are informational and are based on the public regulatory sources cited inside the App.

Your rights

Depending on where you live you may have rights to access, correct, delete or port personal information, or to object to its processing. Because we hold no user database and no account, the practical answer to almost every such request is the delete controls in the App and deleting the App itself. If you believe we hold something about you, write to us at the address below and we will respond.

Children

The App is not directed at children under 13, and we do not knowingly collect personal information from children. Because there is no account, we have no children's records to hold.

Security

The design is the security measure: no account to compromise, no server of ours holding your scans, photos or health profiles, and label reading that never leaves the device. Traffic between the App and the services above is encrypted in transit.

Changes to this policy

We may update this policy as the App changes. The "last updated" date at the top of this page always reflects the current version, and material changes will be reflected in the App's disclosures in the same release.

Contact

Questions about this policy, or about your data:

Email: edaburakguner@gmail.com

Support: bgmobiledev.com/support