SaliCheck Privacy Policy

Who we are

SaliCheck is a product of Formartine Bio Ltd, a company registered in Scotland, registered office at Kinburn Castle, Doubledykes Road, St Andrews, Fife, KY16 9DR. Formartine Bio Ltd is registered with the UK Information Commissioner's Office (ICO), registration number ZC063566.

For any questions about this policy or your data, contact us at privacy@salicheck.co.uk.

The short version

SaliCheck does not ask you to create an account and does not collect your name, email address or location. Your scan history stays on your device. The only data that leaves your device is: (1) a barcode number, sent to open ingredient databases to look up a product, (2) if you choose to use the photo scanner, the photos you take (the ingredient list and, optionally, the front of the pack), sent to Google Cloud Vision for text extraction as described below, (3) if you choose to submit a contribution, the details described under “Contributing ingredient data” below, and (4) if you buy SaliCheck Pro, a purchase record handled by Apple and our purchase provider RevenueCat, described under “Purchases and subscriptions” below.

What SaliCheck does not do

• SaliCheck does not require you to create an account or log in.
• SaliCheck does not collect your name, email address or location.
• SaliCheck does not use advertising or cross-app tracking tools.
• SaliCheck does not sell your data or share it for advertising. Data is only sent to the services described in this policy, to make the app work.

Your scan history

When you scan a product, SaliCheck stores the result (product name, barcode, ingredient list, and the outcome of the salicylate check) locally on your device only. This history is never transmitted to Formartine Bio Ltd or to any third party. If you delete the app, this history is deleted with it.

Barcode lookups

When you scan a barcode, SaliCheck sends the barcode number to one of three open, independent ingredient databases — Open Food Facts, Open Beauty Facts, or Open Products Facts — to retrieve the product's ingredient list. This request does not include your name or any account details. As with any internet request, the service handling it can see your IP address.

Ingredient list photo scanning

If a product isn't found in the databases, or if you choose to verify a product's current label, you can photograph the product's ingredient list, and optionally its front label, directly.

• The photograph is sent to Google Cloud Vision, a third-party image recognition service, for the sole purpose of extracting the text from the image.
• SaliCheck's server forwards each image to Google and does not store it.
• Google states that images sent for immediate processing are processed in memory and not written to disk, that it temporarily logs some metadata about each request (such as its time and size), and that it does not use the content to train its models.
• SaliCheck uses these images only to read product text and does not try to identify people. Please photograph only the product label: anything else captured in the photo (for example, a name on a pharmacy label) is sent to Google as part of the image.
• Google's own privacy practices for this service are described at their Cloud Vision data usage documentation.

Contributing ingredient data

If SaliCheck cannot find a product in its databases, you may be offered the option to contribute the ingredient list you've photographed back to Open Beauty Facts, the open database SaliCheck relies on.

• Contributions are submitted anonymously, under the shared "SaliCheck" contributor account — not under your name or any personal identifier.
• Contributed data becomes publicly visible as part of the Open Beauty Facts database, under the Open Database Licence (ODbL).
• Each contribution includes the product name, barcode (if available) and ingredient list. If you photographed the front of the product, that photo is uploaded too and becomes publicly visible on Open Beauty Facts, so please make sure it shows only the product.
• You choose whether to contribute each time; nothing is submitted without your action.

Purchases and subscriptions

SaliCheck is free to download and includes five free scans. If you buy SaliCheck Pro (an Annual or Monthly subscription, or a one-off Lifetime purchase), payment is handled entirely by Apple through your Apple Account. We never see or receive your card or payment details. You can manage or cancel a subscription at any time in your Apple Account settings.

To unlock Pro and let you restore it later, SaliCheck uses RevenueCat, a purchase-management service provided by RevenueCat, Inc. (United States). RevenueCat receives an identifier generated for your installation of the app, a record of your purchases (what you bought, when, and whether it is active), and technical information that accompanies any internet request, such as your IP address. SaliCheck does not send RevenueCat your name or email address.

We use this information to provide and restore your purchase. We do not use it for advertising or tracking. Because RevenueCat is based in the United States, this information may be processed outside the UK. RevenueCat describes how it handles data in its privacy policy at https://www.revenuecat.com/privacy-policy

Data we do not collect

To be explicit: SaliCheck does not request your device's location, contacts or any HealthKit data, and does not use the advertising identifier (IDFA). SaliCheck does not integrate with Apple HealthKit.

Children's privacy

SaliCheck is not directed at children and does not knowingly collect personal data from children. SaliCheck does not ask for any personal details.

Your rights under UK GDPR

SaliCheck does not ask for your name, email address or account details, and most of the data it handles stays on your device. The exception is purchase data (see “Purchases and subscriptions” above), which is associated with an identifier generated for your installation. We cannot ordinarily tell who you are from this, but it may still count as personal data under UK GDPR. Where UK GDPR rights apply (access, rectification, erasure, restriction, portability and objection), you can exercise them by contacting us at the email above. We may ask for purchase details, such as an Apple receipt or order ID, to find your records. We will respond within the timeframes required by UK GDPR.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been affected.

Changes to this policy

If SaliCheck's data practices change — for example, if a future version introduces optional accounts or analytics — this policy will be updated first, and the "Last updated" date above will reflect the change.

Contact

Formartine Bio Ltd
Kinburn Castle, Doubledykes Road
St Andrews, Fife, KY16 9DR
Scotland, United Kingdom

Email: privacy@salicheck.co.uk