Privacy Policy

Effective Date: July 10, 2026

Version française · 日本語版 · Svenska · Norsk

BerryPure is operated by KRUT PTY LTD ("we," "us," or "our"), a company registered in Queensland, Australia. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

Please read this Privacy Policy carefully. By using BerryPure, you consent to the practices described in this policy. If you do not agree with this policy, please do not use the App.

1. A Note on What BerryPure Photographs

BerryPure is a food label scanner. The photos you take with the App are of food packaging and ingredient labels — not people. The App is not designed to capture, and you must not use it to capture, photos of people, faces, documents, or any other personal information. If a photo you submit incidentally contains personal information, it is processed transiently for label analysis in the same way as any other image and is not retained by us. You are responsible for what you choose to photograph.

2. Information We Collect

2.1 Information You Provide

• Food Label Images: When you scan a food label — using your camera, by selecting an image from your photo library, or by sharing an image into the App — the image is transmitted securely to our processing infrastructure and analyzed by an AI vision model (Google Gemini) to extract ingredient information. We do not retain scanned images on our servers after processing is complete. When you select an image from your photo library, the App only receives the specific image you choose — it does not browse or upload your library.
• In-App Data: Your onboarding answers, scan history, purity scores, streaks, achievements, shopping list, and preferences. This data is stored locally on your device. We do not operate user accounts or a user database.

2.2 Information Collected Automatically

• Device Information: Device type, operating system version, app version, language, and general location (country/region) for analytics purposes.
• Usage Analytics: Information about how you interact with the App, including screens viewed, features used, session duration, and app performance data.
• Session Recordings: We record anonymized replays of in-app interactions (screen views and touch gestures) to understand how users navigate the App and to improve the experience. Text you type is masked and never captured. Because recordings reproduce what is shown on screen, they may include images of food labels you scanned during that session. Recordings are not linked to your identity.
• Crash and Diagnostic Data: If the App crashes or malfunctions, we may collect diagnostic information to help us fix it.
• Advertising Attribution (only with your permission): In production builds, the App asks for permission via Apple's App Tracking Transparency prompt. If — and only if — you allow tracking, we use advertising SDKs (TikTok and Meta) to measure whether our ads led to your install and subscription. If you decline, this measurement is disabled. See Section 5.

2.3 Information We Do NOT Collect

• We do not require or support user accounts — no name, email, or password
• We do not collect precise geolocation data
• We do not collect biometric data
• We do not collect contacts or address book information
• We do not browse or bulk-access your photo library — only images you explicitly select or capture
• We do not retain the images you scan on our servers
• We do not collect payment details — payments are handled entirely by Apple

3. How We Use Your Information

We use the information we collect to:

• Analyze the food labels you scan and return purity scores and ingredient insights
• Provide, maintain, and improve the App
• Track your progress, streaks, and achievements (on your device)
• Personalize your experience within the App
• Process subscription payments through the App Store
• Schedule local reminders and notifications on your device, if you enable them
• Measure advertising performance, only where you have permitted tracking
• Analyze usage patterns to improve our services
• Detect, prevent, and address technical issues
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom (UK), we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide you with the App's services and features, including analyzing images you submit for scanning.
• Legitimate Interests: Processing for analytics, security, and improving our services, where our interests do not override your rights.
• Consent: Where you have given explicit consent for specific processing activities, such as advertising attribution via the App Tracking Transparency prompt.
• Legal Obligation: Processing necessary to comply with applicable laws.

5. Third-Party Services

We share information with the following service providers who help us operate the App:

5.1 Google Gemini (AI Vision Analysis)

Purpose: To analyze food label images and extract ingredient information using AI.

Data Shared: The food label images you submit for scanning (transmitted for processing only; we do not retain them).

Privacy Policy: Google Privacy Policy

5.2 Cloudflare (Processing Infrastructure)

Purpose: Scan requests are routed through our secure Cloudflare Workers infrastructure, which relays images to Google Gemini for analysis without storing them.

Data Shared: Food label images and scan requests, in transit only.

Privacy Policy: Cloudflare Privacy Policy

5.3 PostHog (Analytics and Session Replay)

Purpose: Product analytics, feature flags, and anonymized session recordings to improve the App.

Data Shared: Anonymous device identifiers, app usage events, session metadata, and anonymized session recordings of in-app interactions (with typed text masked). We do not operate accounts, so this data is not linked to your name or email.

Data Location: United States.

Privacy Policy: PostHog Privacy Policy

5.4 RevenueCat (Subscription Management)

Purpose: Managing in-app subscriptions, entitlements, and purchase restoration.

Data Shared: An anonymous app user identifier, subscription status, and purchase events. Where you have permitted tracking (Section 2.2), advertising identifiers may be shared with RevenueCat to attribute subscriptions to ad campaigns.

Privacy Policy: RevenueCat Privacy Policy

5.5 TikTok and Meta (Advertising Attribution — Opt-In Only)

Purpose: Measuring whether our advertising on TikTok and Meta platforms led to app installs and subscriptions.

Data Shared: Only if you allow tracking via Apple's App Tracking Transparency prompt: device advertising identifiers and conversion events (install, purchase). No scan content, images, or health-related information is ever shared with advertising partners. If you decline the prompt, no data is shared with these partners.

Privacy Policies: TikTok · Meta

5.6 Apple

Purpose: Payment processing for in-app subscriptions.

Data Shared: Payment information is processed entirely by Apple and is not shared with us. We do not collect or store any payment details.

Privacy Policy: Apple Privacy Policy

6. Data Retention

• On-Device Data: Your progress, scan history, and preferences are stored locally on your device. This data is removed when you uninstall the App or clear your data through the App's settings.
• Scanned Images: Not retained on our servers. Images are processed in real time for analysis and are not stored by us afterwards. Session recordings may incidentally include on-screen label images, as described in Section 2.2.
• Analytics and Session Recordings: Retained for a limited period consistent with our analytics provider's retention settings, then deleted.

We may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, legal claims).

7. Your Rights

7.1 Rights for All Users

Regardless of your location, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data
• Withdraw consent where processing is based on consent (e.g., disable tracking in iOS Settings → Privacy & Security → Tracking)

Because we do not operate accounts and your in-app data lives on your device, the most complete way to delete your data is to uninstall the App. For anything held by us or our providers, contact us at [email protected].

7.2 European Economic Area and United Kingdom (GDPR)

If you are in the EEA or UK, you also have the right to:

• Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
• Restriction: Request restriction of processing in certain circumstances.
• Object: Object to processing based on legitimate interests.
• Lodge a Complaint: File a complaint with your local data protection authority (e.g., the ICO in the UK, or your national DPA in the EU).

7.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information. Sharing device identifiers with advertising partners for cross-context behavioral advertising may qualify as "sharing" under the CPRA — you can opt out at any time by declining or disabling tracking in iOS Settings → Privacy & Security → Tracking, or by contacting us.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your CCPA rights, contact us at [email protected]. We will verify your identity before processing your request.

7.4 Australian Residents

If you are an Australian resident, you have rights under the Privacy Act 1988 and Australian Privacy Principles (APPs), including:

• Access: Request access to the personal information we hold about you.
• Correction: Request correction of personal information that is inaccurate, out-of-date, incomplete, or misleading.
• Complaint: Lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

We use service providers located in the United States. When we transfer data from the EEA, UK, or Australia, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with our service providers
• Compliance with applicable data transfer frameworks

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• API keys held server-side, never embedded in the App
• Secure cloud infrastructure with access controls
• Data minimization — no accounts, no user database, local-first storage

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

BerryPure is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected]. If we discover that a child under 13 has provided us with personal information, we will delete such information promptly.

11. Automated Analysis (AI)

BerryPure uses artificial intelligence (an AI vision model) to read the ingredient labels you photograph and to generate purity scores, ingredient call-outs, and swap suggestions. This is automated processing of the image you submit; it reads the current label in front of you rather than looking the product up in a database.

AI-generated analyses can be incomplete or incorrect. They are provided for general informational purposes only, do not constitute decisions that produce legal effects or similarly significantly affect you, and must not be relied on for medical, allergy, or dietary decisions. Always verify results against the physical product packaging. See our Terms of Service for full disclaimers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other means before the changes take effect. The "Effective Date" at the top of this policy indicates when it was last updated.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data practices, please contact us:

Email: [email protected]

Entity: KRUT PTY LTD, Queensland, Australia

For GDPR-related inquiries, you may also contact your local data protection authority.

For Australian privacy concerns, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

14. Apple App Store Additional Disclosures

In accordance with Apple's App Store requirements, we provide the following additional disclosures:

Data Used to Track You

With your permission (via the App Tracking Transparency prompt), device advertising identifiers and conversion events are used to measure advertising performance across TikTok and Meta platforms. If you do not grant permission, you are not tracked.

Data Linked to You

No account or sign-in is required, and we do not link collected data to your real-world identity.

Data Not Linked to You

• Device identifiers (for analytics)
• Usage data (app interactions, feature usage, session recordings)
• Purchase and subscription status (anonymous identifier)
• Crash data
• Performance data
• Diagnostics

Last updated: July 10, 2026