1. What MyGredient does
MyGredient helps users scan product barcodes, ingredient labels and product images, then checks those products against personal diets, allergies, lifestyle preferences, belief-based rules and custom ingredient rules. Because the service is personalised, some information you give us may relate to health, dietary needs, allergies, religion or beliefs.
If you have questions about this policy or want to exercise your privacy rights, contact us at [email protected].
2. Personal data we collect
Depending on how you use MyGredient, we may collect the following categories of personal data:
- Account details: email address, account identifiers, login details and account settings.
- Profile and preference data: diets, allergies, intolerances, ingredient avoid lists, lifestyle preferences, religious or ethical preferences, household rules and custom scan references that you choose to save.
- Scan and product data: barcodes, ingredient text, product names, product images, ingredient-label images, scan history and product suitability results linked to your account.
- Device and usage data: app version, device type, operating system, approximate location derived from IP address, diagnostic logs, crash data, pages viewed, features used and interaction events.
- Purchase and subscription data: purchase status, subscription status, transaction identifiers and app store receipt information. Payment card details are handled by Apple App Store, Google Play or other payment providers and are not stored by MyGredient.
- Support and communications: messages you send to us, support requests, deletion requests and related correspondence.
- Business collaboration contacts: creator or representative name, public handle, creator or representative contact email address, profile and recent-content URLs, audience or content category, approximate follower count, country evidence, company or agency status, contact source and collaboration correspondence.
- Website and cookie data: cookie identifiers, analytics events, browser type, referral URLs and similar website usage information.
Business collaboration contact details may come from a creator's public website or social profile, their agency or representative, Companies House, or a research supplier engaged to identify relevant creator contacts. We match supplier-provided details to the creator's profile before use, record the source, and respect objections.
We do not intentionally collect precise GPS location unless a future app feature clearly asks for it and you choose to allow it.
3. How we use personal data
We use personal data to create and secure accounts, provide personalised ingredient checks, save preferences and custom rules, process subscriptions, respond to support and deletion requests, improve app reliability, prevent fraud or abuse, comply with legal obligations and send service messages. Where permitted, we may send product updates or marketing messages that you can opt out of.
For business collaboration contacts, we use limited information to assess relevance, prepare a personalised invitation to provide paid creator services, contact the creator, business or representative at an address published or supplied for creator collaboration enquiries, manage replies and agreed work, and prevent further contact after an objection. We do not use this information for automated decisions that have legal or similarly significant effects.
4. Lawful bases for UK and European users
Where UK GDPR or EU GDPR applies, we rely on contract to provide the app and personalised services you request; consent for optional processing such as certain marketing messages, optional analytics choices, camera/photo access or special-category profile information you choose to provide; legitimate interests to improve, secure and support MyGredient; and legal obligation where we must keep or disclose information for tax, accounting, regulatory, legal or law-enforcement reasons.
For relevant business collaboration outreach, we may rely on our legitimate interests in finding and engaging suitable creators, suppliers and business partners where contact details are published or supplied for creator, business, brand, management or collaboration enquiries. We consider the contact's reasonable expectations and privacy rights, and use consent where applicable law requires it. You can object to collaboration outreach at any time by replying to the message or emailing us.
You can withdraw consent at any time by changing your device or app settings, using any unsubscribe link provided, or contacting us. Withdrawal does not affect processing that happened before withdrawal.
5. Sensitive information and scans
MyGredient may process information that you choose to enter about allergies, dietary requirements, religion, beliefs, lifestyle preferences or health-related concerns. We use this information to personalise scan results and saved rules. MyGredient is an ingredient information and decision-support tool; it is not medical advice, allergy advice, dietetic advice or emergency guidance.
The app may ask for camera or photo access so you can scan barcodes, capture product packaging or upload ingredient-label images. You can manage camera and photo permissions in your device settings. Product and label images may be processed to extract ingredient text, identify products, provide your result, improve accuracy and troubleshoot service issues.
6. Cookies and analytics
Our website and blog may use cookies, analytics tags and similar technologies to run the site, measure traffic, understand content performance and protect against abuse. We may use providers such as Google Tag Manager, website analytics tools, hosting providers and WordPress-related services. Browser settings usually let you block or delete cookies, but some site functions may not work properly without necessary cookies.
7. Who we share data with
We do not sell your personal data. We do not share your personal data with third parties for their own advertising purposes.
We may share personal data with hosting, database and cloud providers; app store and payment providers such as Apple App Store and Google Play; analytics, diagnostics and crash-reporting providers; communications and support providers; professional advisers; authorities, courts or regulators where required; and parties involved in a merger, acquisition, financing, restructuring or sale of all or part of the business, subject to appropriate safeguards.
8. International transfers
We may process and store personal data in the United Kingdom, European Economic Area, United States and other countries where our service providers operate. Where data protection law requires safeguards for international transfers, we use appropriate mechanisms such as adequacy regulations, standard contractual clauses or equivalent contractual and technical safeguards.
9. How long we keep data
We keep personal data only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law. Typical retention periods are:
- Account, profile, preference and scan data: kept while your account is active, then deleted or anonymised after account deletion unless retention is needed for the reasons below.
- Uploaded product and ingredient-label images: kept while needed to provide the service, support your account, improve accuracy or troubleshoot issues, then deleted or anonymised after account deletion where stored.
- Support and privacy request records: retained for up to 24 months after the request is resolved.
- Security, fraud prevention and diagnostic logs: retained for up to 24 months unless a longer period is needed to investigate misuse, security incidents or legal claims.
- Transaction, invoice, subscription and accounting records: retained for up to 7 years where required for tax, accounting, audit or legal compliance.
- Business collaboration research and correspondence: normally retained for up to 24 months after the last meaningful contact or review, unless an active agreement, dispute or legal obligation requires longer retention.
- Marketing and outreach preferences: a minimal suppression record may be kept for as long as necessary to make sure we continue to respect an objection or opt-out.
10. Account deletion
You can request deletion of your MyGredient account and associated personal data at https://mygredient.com/delete-account/ or by emailing [email protected] with the subject line Delete MyGredient account.
When we verify and process an account deletion request, we delete or anonymise personal data associated with the account, including saved preferences, custom rules, scan history and stored uploaded images where applicable. We may retain limited records where necessary for legal, security, fraud-prevention, accounting or dispute-resolution purposes, as described in the retention section above. Deleting your MyGredient account does not automatically cancel an Apple App Store or Google Play subscription; you must cancel subscriptions through the relevant app store settings.
11. Your privacy rights
Depending on where you live, you may have rights to access the personal data we hold about you; correct inaccurate or incomplete personal data; delete personal data; restrict or object to certain processing; receive a portable copy of certain data; withdraw consent where processing is based on consent; opt out of marketing communications; and complain to a data protection regulator.
To exercise your rights, email [email protected]. We may ask you to verify your identity before responding. We will not discriminate against you for exercising legally protected privacy rights.
If you are in the United Kingdom, you can contact the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/. If you are in the European Economic Area, you may contact your local data protection authority.
12. California and other US state privacy rights
We do not sell personal information and do not share personal information for cross-context behavioural advertising as those terms are commonly used in California privacy law. We do not knowingly use or disclose sensitive personal information for purposes other than providing and improving MyGredient, security, legal compliance and other permitted business purposes.
California and certain other US state residents may have rights to know, access, correct, delete, obtain a copy of, and opt out of certain uses of personal information. You or an authorised agent can submit a request by emailing [email protected]. We may need information to verify the request and the agent's authority.
13. Children, security and third-party links
MyGredient is not intended for children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to us, contact us and we will take appropriate steps to delete it. Where local law requires a higher age for consent to online services, users under that age should use MyGredient only with appropriate parental or guardian involvement.
We use reasonable technical and organisational measures designed to protect personal data, including access controls, secure transmission where appropriate, monitoring, backups and vendor controls. No online service can guarantee absolute security, so you should use a strong password, keep your device secure and contact us if you suspect unauthorised access.
MyGredient may link to third-party websites, app stores, payment providers, social networks or product information sources. Their privacy practices are governed by their own policies.
14. Changes and contact
We may update this Privacy Policy from time to time. If we make material changes, we will update the date above and, where appropriate, provide additional notice in the app, on the website or by email.
MyGredient / Mutelligence LTD
Email: [email protected]
Website: https://mygredient.com/