Privacy Policy for Lychee

Last Updated: June 3, 2026

Effective Date: June 3, 2026

Introduction

Welcome to Lychee ("we," "our," or "us"). This Privacy Policy explains what information Lychee collects, how we use it, what third-party services we rely on, and the choices you have.

Lychee is a product scanner and ingredient explainer for food and cosmetic products. The App helps users review allergens, dietary preferences, ingredient lists, nutrition labels, additives, processing signals, cosmetic ingredient concerns, and product database information. Lychee is not a medical service, allergy-management service, diet program, nutrition coach, or cosmetic safety certification service.

By using the Lychee mobile application ("App"), you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

Preferences and profiles

Selected allergens, dietary restrictions, and product preferences
Optional onboarding answers, family/profile labels, and app settings
Saved products, favorites, pantry items, and scan history

Product contributions and corrections

Product barcodes
Product images and label images
Ingredient, nutrition, packaging, or cosmetic label information
Product names, brands, categories, and correction details you submit voluntarily

1.2 Information Collected Automatically

Scan and product data

Scanned product barcodes
Scan timestamps
Product information returned from Open Food Facts, Open Beauty Facts, or Lychee's own product coverage systems
Scan results such as allergen matches, ingredient explanations, nutrition information, cosmetic ingredient analysis, and product score summaries

Scan history is primarily stored locally on your device unless you use AI analysis, submit a contribution or report, or limited analytics as described below.

Usage and device data

App version
Device model and operating system
Crash, diagnostic, and performance data
Feature usage statistics
Product analytics events collected through PostHog, such as onboarding progress, feature usage, scan mode, app version, and coarse platform details
App install, app launch, checkout, trial, and subscription events collected through the Meta/Facebook SDK for ad attribution, campaign measurement, and advertising optimization

Subscription data

Subscription status, entitlement status, product identifiers, trial status, purchase/renewal status, cancellation status, and receipt metadata processed through Apple, Google, and RevenueCat
We do not receive or store your full payment card details

2. How We Use Information

2.1 Core App Functionality

Detect allergens and dietary restriction conflicts in scanned products
Provide personalized product warnings based on your selected preferences
Display product information, ingredient explanations, nutrition data, food processing/additive signals, and cosmetic ingredient analysis
Save scan history, pantry items, favorites, and settings

2.2 Product and Ingredient Coverage

Improve allergen and ingredient detection
Expand food and cosmetic product database coverage
Contribute food product data to Open Food Facts and cosmetic product data to Open Beauty Facts when you choose to submit it
Record missing or unknown ingredients so we can improve Lychee's ingredient dictionaries and product coverage

2.3 AI-Powered Analysis

Analyze ingredient lists, label text, and product context
Provide allergen, ingredient, nutrition, and cosmetic explanations
Generate product explanations and suggestions based on your selected preferences
Processed through OpenAI's API under OpenAI's applicable business/API terms

2.4 Subscriptions and Trials

Display subscription offers and trial eligibility
Process purchases, renewals, cancellations, and restored purchases through Apple, Google, and RevenueCat
Maintain your Premium entitlement status

2.5 Advertising and Attribution

Display ads to non-Premium users through Google AdMob
Measure whether Instagram/Facebook ads lead to app installs or subscription events through the Meta/Facebook SDK
Support free access to core features

2.6 Analytics and Improvement

Monitor app performance and stability
Identify bugs, crashes, and onboarding drop-off points
Understand feature usage and improve the App
We do not intentionally send product photos, raw ingredient text, scan results, allergen selections, health scores, or precise location to Meta
We do not intentionally send product photos, raw ingredient text, or precise location to PostHog

3. Third-Party Services

3.1 Open Food Facts

Data shared: Product barcodes, product images, ingredient information, nutrition information, packaging information, and corrections when you contribute food product data.

Purpose: Lookup and contribution to an open food product database.

License: Open Database License (ODbL)

Data information: https://world.openfoodfacts.org/data

3.2 Open Beauty Facts

Data shared: Cosmetic product barcodes, product images, ingredient label images, ingredient information, and corrections when you contribute cosmetic product data.

Purpose: Lookup and contribution to an open cosmetic product database.

License: Open Database License (ODbL)

Data information: https://world.openbeautyfacts.org/data

3.3 OpenAI

Data shared: Ingredient text, label text, selected allergens/preferences, and product context needed for AI analysis.

Purpose: AI-powered allergen, ingredient, nutrition, and cosmetic product explanations.

Important notes:

We send only the text and context needed for the analysis
We do not send payment card information or precise location data

Privacy Policy: https://openai.com/policies/privacy-policy

3.4 Google AdMob

Data shared: Device identifiers, advertising identifiers, IP address, device model, app usage data, and ad interaction data as required for ad delivery.

Purpose: Serve ads to non-Premium users and support free access to the App.

Privacy Policy: https://policies.google.com/privacy

Ad Personalization: https://adssettings.google.com

3.5 Meta/Facebook SDK

Data shared: App install and app activation events, limited marketing events such as completed onboarding, checkout started, trial started, and subscription started, device/app information, and advertising identifiers where permitted.

Purpose: Measure whether Meta and Instagram ads lead to app installs or subscription events, optimize advertising campaigns, and understand campaign performance.

Important notes:

We do not intentionally send product names, raw ingredient text, product photos, allergen selections, scan results, health scores, or precise location to Meta
On iOS, access to the advertising identifier depends on Apple's App Tracking Transparency permission and your device settings

Privacy Policy: https://www.facebook.com/privacy/policy/

3.6 PostHog

Data shared: Limited product analytics events, such as onboarding progress, onboarding answers, feature usage, scan behavior, app version, device platform, and anonymous usage identifiers.

Purpose: Understand how the App is used, monitor performance, identify onboarding drop-off points, and improve features.

Important notes:

No names, email addresses, product photos, raw ingredient text, or precise locations are intentionally sent to PostHog
Analytics data is used only for product analytics, debugging, and app improvement

Privacy Policy: https://posthog.com/privacy

3.7 RevenueCat

Data shared: App user identifier, product identifiers, entitlement status, purchase/renewal status, Apple or Google receipt metadata, and restore-purchase information.

Purpose: Manage subscription offers, trials, purchases, renewals, cancellations, and restored purchases.

Important notes:

Payment card details are processed by Apple or Google, not by Lychee
RevenueCat helps us verify whether Premium should be active

Privacy Policy: https://www.revenuecat.com/privacy/

3.8 Apple App Store and Google Play Store

Data shared: Purchase, trial, subscription, renewal, cancellation, refund, and billing information as required by the platform.

Purpose: Process in-app purchases and subscriptions.

Important notes:

We do not receive your full payment card details
Your purchases are also subject to Apple or Google's terms and privacy policies

3.9 Supabase / Hosted Storage

Data shared: Missing ingredient reports, product correction metadata, product import data, and other operational records you submit or that are needed to maintain product coverage.

Purpose: Store product and ingredient improvement data, support product catalog/import workflows, and improve recognition of unknown ingredients.

Important notes:

We avoid storing direct personal identifiers in these reports where possible
Do not submit information in product contributions that you do not want included in public product databases

3.10 Service Providers and Legal Requirements

We may use trusted service providers for hosting, analytics, subscription management, crash reporting, product lookup, product contribution, storage, and customer support. These providers may only use data as directed by us.

We may disclose information if required by law, court order, subpoena, or another valid legal request.

4. Data Storage and Retention

4.1 Local Storage

Most day-to-day App data is stored locally on your device, including:

Allergen and dietary preferences
Scan history
Favorites and pantry items
App settings
Cached subscription status

4.2 Cloud and Third-Party Storage

Some data is stored with third-party services or hosted infrastructure when needed:

Product contributions and corrections
Missing ingredient reports and product coverage data
Subscription entitlement and receipt metadata
Analytics and advertising attribution events

4.3 Retention

Local data: Retained until you delete it, clear app data, or uninstall the App
Product contributions: May be retained indefinitely by Open Food Facts, Open Beauty Facts, or Lychee for database purposes
Missing ingredient and product coverage reports: Retained as long as needed to improve coverage and maintain auditability
Subscription records: Retained as needed to manage purchases, renewals, refunds, disputes, and legal/accounting obligations
Analytics data: Retained for up to 12 months, then deleted or anonymized where practical

5. Your Choices

5.1 Access and Control

You can review and change your allergen preferences, product preferences, saved products, and scan history inside the App.

5.2 Deletion

Local data: Delete by clearing App data or uninstalling the App
Product contributions: May be submitted to public databases and may not be individually removable by us
Analytics, subscription, and reporting data: Contact us if you want to request access, deletion, or correction where applicable
Accounts: Lychee does not currently require user accounts

5.3 Advertising Choices

You can limit ad tracking:

iOS: Settings > Privacy & Security > Tracking, and Settings > Privacy & Security > Apple Advertising
Android: Settings > Google > Ads > Opt out of Ads Personalization
Premium: Subscribe to remove ads entirely

5.4 Consent Withdrawal

You may withdraw consent by:

Uninstalling the App
Disabling features such as contributions
Adjusting device privacy settings
Upgrading to Premium to remove in-app ads

6. Children's Privacy

Lychee is intended for users aged 13 and older, or 16 and older in the EU/EEA where required.

We do not knowingly collect personal information from children under 13, or under 16 in the EU/EEA. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

7. International Data Transfers

Your information may be processed in countries other than your own. These countries may have different data protection laws. Where required, we rely on appropriate safeguards such as contractual protections, standard contractual clauses, or other lawful transfer mechanisms.

8. Regional Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to withdraw consent where processing is based on consent.

If you are in California or another jurisdiction with similar rights, you may have the right to know what personal information we collect, request deletion, and opt out of certain sharing. We do not sell personal information for money.

9. Cookies and Tracking Technologies

The App does not use browser cookies. Third-party mobile SDKs may use similar technologies:

AdMob and Meta/Facebook SDK: Advertising identifiers where permitted for ad delivery, attribution, and campaign measurement
PostHog: Anonymous identifiers for product analytics
RevenueCat: App user identifiers and receipt metadata for subscription management

10. Medical and Safety Disclaimer

Lychee is an informational product scanner. It may explain allergens, ingredients, nutrition labels, food processing signals, and cosmetic ingredients, but it is not a substitute for medical advice, allergy diagnosis or management, dietetic advice, cosmetic safety advice, diagnosis, or treatment.

You must always read product labels yourself, verify important food or cosmetic information with the manufacturer, consult qualified professionals when needed, and carry prescribed emergency medication if applicable.

We are not liable for incorrect allergen, ingredient, nutrition, cosmetic, or product database information; product formulation changes; cross-contamination; or adverse health outcomes.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last Updated" date above and may provide in-app notice for material changes.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us through the contact link in the App or on our website.

Summary

What we collect

Allergen, dietary, and product preferences
Scan history and saved products
Product contributions and corrections
Usage analytics
Ad data for non-Premium users
Limited advertising attribution events
Ingredient or label text for AI analysis
Subscription status and receipt metadata
Missing ingredient and product coverage reports

What we do not collect directly

Full payment card information
Biometric data
Medical records
Precise location, unless a third-party provider independently infers approximate location from IP address for its own service purposes

Most everyday App data stays on your device. You can delete local data by clearing App data or uninstalling Lychee.

By using Lychee, you acknowledge that you have read and understood this Privacy Policy.