Privacy policy

Halal AI: Scanner & Food Scan helps you investigate food ingredients and keep useful findings. This policy explains how Halal AI handles information when you use the app and its support pages. You can use the ingredient guide and your saved findings without creating a named account.

Photos, ingredients and preferences

Camera and photo-library access are optional. The app reads barcodes on your device. When you choose photos, it prepares smaller images without the originals' embedded metadata. Selecting or editing a photo does not send it for AI processing.

After you give consent and tap Read the label or Check ingredients, the selected photos or ingredient text, your language and applicable dietary or allergen preferences are sent securely to our service. We use OpenRouter and its model-processing providers to extract text and explain ingredient evidence. Dietary choices can reveal sensitive information, including health-related preferences. Include only the food information needed for your check, and avoid personal details.

Our application database does not store these photos, AI prompts or complete AI answers. They are processed to answer your request. We request OpenRouter routes that disallow provider data collection for storage or training. This setting is not a promise that every processor keeps no operational records. See OpenRouter's privacy policy and data handling information.

You can turn off AI consent in the editor. This prevents subsequent AI requests; it cannot undo processing that has already taken place. Your selected dietary preferences and saved findings remain on your device unless you submit them through a feature described here.

Product information

Product searches send your search terms and language to Open Food Facts. Barcode lookups send the product code to Open Food Facts and our existing Gowalk product-information service to retrieve food and brand information. Loading product images also contacts their image host. These services receive ordinary connection information, such as your IP address. The app does not send your saved library or AI photos with a product search. External source links open the relevant provider's website, whose privacy practices apply there.

Identity, security and purchases

Firebase Authentication creates an anonymous account for protected online features. Firebase App Check helps verify that requests come from an authentic app. These services process installation identifiers, app/device information and connection information. Our service stores an installation identifier, anonymous account identifier, public verification key and minimal security records. It uses operation counts and a hashed network identifier to enforce allowances and prevent abuse. You do not need to give us your name to use these features.

Apple or Google handles subscription payments. We receive product and transaction information, ownership status and purchase evidence to verify access and restore existing purchases. Our service retains encrypted purchase evidence and links it to the installations using that purchase. We do not receive your payment-card details. A redeemed access code is retained securely on your device and verified by our service for its applicable access period.

Reports and support

If you report an AI result, we receive the content you select, report category and optional comment, linked to your anonymous installation. We use them to investigate the problem. The support form collects the name, reply address, subject and message you enter so that we can respond. Please avoid sending unnecessary sensitive information. Support requests are stored and delivered to our support team.

Optional usage and crash reports

App usage analytics and crash reporting have separate choices in Settings. Both are off by default. With your permission, Firebase Analytics receives app-interaction events and device, language and approximate-region information. App-authored events do not include ingredient text, photos, barcodes, dietary choices or report comments. Firebase Crashlytics receives technical crash information, stack traces and installation identifiers to help diagnose failures.

You can disable either choice independently. Disabling analytics resets its local analytics data; disabling crash reporting deletes unsent crash reports. This does not automatically erase reports already received by Google. See Firebase's privacy information. We do not use these features for advertising, sell personal information or track you across other companies' apps and websites for advertising.

Retention and deletion

Saved findings, favorites and preferences stay on your device until you remove them or delete app data. Our service removes AI-operation and minimal failure-diagnostic records after 30 days, and submitted result reports after 90 days. Routine cleanup runs periodically, so removal takes place on the following cleanup pass. Active installation and purchase-access records remain while needed to provide the service.

In Settings, open the data controls and choose Delete app data and account. This removes the anonymous Firebase account, this installation's backend reports and usage records, and this device's saved findings and preferences. The app pauses new AI activity if deletion is interrupted and provides Retry. Minimal deletion, security and shared subscription-usage records can remain for up to 30 days to prevent abuse and complete interrupted deletion. Encrypted purchase evidence is removed when its final installation link is deleted; another device using the same purchase may retain that purchase's shared record.

Deleting app data does not cancel an Apple or Google subscription. Manage subscriptions through your store account. Store transaction records and data already received by service providers follow those providers' retention rules. Support correspondence is retained as needed to handle the request and related obligations; request its deletion through the support form.

Your choices and requests

You can use the free local features, decline AI processing, revoke camera/photo permissions in system settings, change diagnostic choices and delete your data. To request access, correction or deletion, use the support form and select a clear subject such as Privacy request. If you still have the app, its in-app deletion control identifies and removes its anonymous account without requiring you to disclose personal details. For an external request, we may need enough information to locate and verify the record; we do not ask for your store password or full payment details.

Our infrastructure and providers may process information outside your country. We use encrypted connections, restricted access and bounded data retention, but no service can guarantee absolute security. The app is for general food information and is not directed at children. If you believe a child has provided personal information, contact us through Support. We will update this page when our practices change and seek new consent where a change requires it.