Privacy Policy

1. Who we are

Ingrevo is a pantry-first AI kitchen and meal-planning assistant. It helps you keep track of what is in your pantry, recognise foods and meals from photos, estimate nutrition, generate recipes, and plan meals within your nutrition needs and grocery budget.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices and rights you have. It applies to our mobile app and to our website at ingrevo.app.

The controller responsible for your personal information is Ingrevo, a product of Nexora Labs Limited, a New Zealand company. You can reach us any time at support@ingrevo.app.

Ingrevo is a meal-planning and kitchen assistant. It is not a fitness, weight-loss, or medical product, and it does not provide medical, dietary, or health advice.

2. At a glance

This is a short, plain-language summary. Please read the full policy below for the detail.

• We store your email. We keep your email address (through Firebase) and use it to send you service messages and notification emails.
• Free users see ads; paid subscribers do not. If you use Ingrevo for free, we show you ads that may be personalised using advertising identifiers. Paid subscribers see no ads.
• Your health and diet data are used only to help you plan meals. Your height, weight, sex, age, activity level, calories, dietary preferences, and allergies are used to personalise meal suggestions. They are never used for advertising and are never sold.
• Allergens are shared with our AI only to keep you safe. We send your allergen information to our AI providers so they can suggest allergen-free foods and recipes.
• We do not store your photos on our servers. Pantry and meal photos are stripped of location and camera metadata and sent to our AI providers for recognition; we do not keep them. A single pantry-item photo may stay on your device only.
• You are in control. On iOS you choose whether to allow tracking through Apple's App Tracking Transparency prompt, and you can delete your account and data at any time.

3. Information we collect

Information you provide

• Account identity, including your email. Your email address, a Firebase user id, first name, last name, and avatar.
• Health and body metrics. Height, weight, sex, date of birth or age, activity level, and calories consumed. We use these to personalise meal suggestions and help plan your next meal within your nutrition and calorie needs. This is health and special-category data.
• Dietary preferences and allergies. Your diets and allergens. This is special-category data. Your allergen information is sent to our AI providers so they can suggest allergen-free foods and recipes.
• Grocery budget and household size. Used to suggest meals within your grocery budget and, in future, to maintain your grocery cart and shopping list.
• Pantry items you add or scan.
• Meal log and meal items, including calories and macros.
• AI food-correction rows. If you turn on AI-improvement consent, we keep an audit record of corrections you make to AI food estimates.
• Recipes, favourites, and cooking log. Recipes generated for you, recipes you favourite, and a record of meals you cook.

Information collected automatically

• Advertising and analytics data (free users). Device and advertising identifiers (subject to your App Tracking Transparency choice on iOS) and app-usage events, used to show relevant ads to free users and for product analytics. Paid subscribers do not see ads.
• Subscription state and events through RevenueCat; purchases are processed by Apple on iOS and Google on Android.
• Nutrition cache to speed up repeated food and nutrition look-ups.
• Consent-event ledger. A record of the consents you give. Your IP address and user-agent are stored only as salted hashes.
• Legal acceptances, such as when you accept our Terms and this Privacy Policy.
• Anonymous account-deletion feedback (no user id) if you choose to give a reason when you delete your account.
• Device and push (FCM) tokens and hashed authentication tokens.

On your device. A copy of a single pantry-item photo, and some of your data, may be kept on your device only and is never uploaded to us.

4. How we use your information

• To provide and operate the app: managing your account, pantry, meal log, recipes, and cooking log.
• To personalise meal suggestions and help plan your next meal within your nutrition and calorie needs, using your health and body metrics and your dietary preferences.
• To suggest allergen-free foods and recipes, using your allergen information.
• To suggest meals within your grocery budget and, in future, to maintain your grocery cart and shopping list, using your grocery budget and household size.
• To recognise foods and meals from photos, estimate nutrition, generate recipes, and power the in-app assistant, through our AI providers.
• To send you service and notification emails, and push notifications, using your email address and device tokens.
• To manage your subscription and process purchases through RevenueCat, Apple, and Google.
• To show and measure ads to free users, and to understand app usage and improve the app.
• To keep records of consents and legal acceptances, protect against abuse, diagnose crashes, and comply with our legal obligations.

5. AI features

Several Ingrevo features rely on artificial intelligence: recognising pantry and meal photos, estimating nutrition, generating recipes, and the in-app assistant. To provide these, we use Microsoft Azure AI and Google AI as our AI processors.

Our AI providers receive food text, EXIF-stripped photos, and your allergen information. We send your allergen information specifically so the AI can suggest allergen-free foods and recipes. Our AI providers do not receive any advertising data.

Pantry and meal photos are stripped of EXIF and GPS metadata and sent to our AI providers for recognition. We do not store your photos on Ingrevo servers. We cannot guarantee how an AI provider handles the image on its own systems. We require providers to process the image only to return your result and, where the provider offers it, not to train their models on your data. A copy of a single pantry-item photo may be kept on your device only and is never uploaded.

6. Advertising

• Free-tier only. Ads are shown to free users only. Paid subscribers see no ads.
• Personalised or relevant ads. Ads may be made personalised or relevant using your data. On iOS we show an App Tracking Transparency (ATT) prompt; you can decline tracking, and you can control ad personalisation in your device settings.
• No sale of your personal information. We do not sell your personal information. We use your data to make ads relevant to you; we do not share your personal data with advertisers to build their own profiles of you. Where ad partners receive an advertising identifier or aggregate measurement signals, it is to deliver and measure ads under your ATT choice.
• No health or diet data for ads. Health, diet, allergy, meal, calorie, and body-metric data is never shared with ad networks.
• Minors. We restrict personalised advertising for users under 18 where required by law (for example, India's DPDP Act). [TODO: counsel — confirm minors advertising handling.]

Because ads use an advertising identifier under ATT, the iOS App Store "Tracking" label reflects "Yes".

7. Legal bases (EU/EEA and UK)

If you are in the EU/EEA or the UK, we rely on the following legal bases under the GDPR and UK GDPR:

• Contract — to provide the app, manage your account, and deliver the features you request.
• Explicit consent — for your health and body metrics and your dietary and allergy information (special-category data), and for personalised advertising. You can withdraw consent at any time.
• Consent — for optional analytics and for AI-improvement audit records.
• Legitimate interests — to secure the app, prevent abuse, diagnose crashes, and improve our services, balanced against your rights.
• Legal obligation — to keep records we are required to keep, such as consent and financial records.

8. How we share information

Service providers (processors)

We share personal information with vendors who process it on our behalf and under our instructions, to run the app and its features. These are listed in the sub-processor table below.

Advertising partners

For free users only, we work with advertising partners to show and measure ads. They receive advertising identifiers and measurement signals under your ATT choice, and never any health, diet, allergy, meal, calorie, or body-metric data.

Legal, safety and enforcement

We may disclose information where we believe in good faith it is necessary to comply with the law or a valid legal request, to enforce our Terms, or to protect the rights, safety, and security of our users, the public, or Ingrevo.

Business transfers

If Ingrevo is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will require the recipient to honour this Privacy Policy.

De-identified data

We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you.

Internal access (our team)

Our staff access personal information only on a need-to-know basis to operate, support, and improve the service.

We do not sell your personal information.

Sub-processors

Provider	Purpose	Data	Region
Cloudflare, Inc.	Website hosting and object storage (Cloudflare R2)	The shared item-image library and your data-export archives (not your photos)	European Union
DigitalOcean, LLC	Application server and database hosting	Your account and app data	European Union [TODO: confirm region]
Microsoft Azure AI and Google AI	AI processing: recognising pantry and meal photos, estimating nutrition, generating recipes, and the in-app assistant	EXIF-stripped photos, food text, and your allergen info (to suggest allergen-free food); no advertising data	United States (SCCs)
Microsoft Azure	Cloud services and storage [TODO: confirm Azure's specific role]	App and service data	United States (SCCs)
Google (Firebase)	Authentication and email storage, push notifications (FCM), anti-abuse attestation, and crash diagnostics	Account identity including email, device and push tokens, diagnostics	United States (SCCs)
RevenueCat, Inc.	Subscription management; purchases processed by Apple (iOS) and Google (Android)	An app user id and purchase events	United States (SCCs)
Advertising partners — Google AdMob, Google, Meta, TikTok, and platforms such as Instagram and YouTube	Show and measure ads to free users only	Advertising identifiers and measurement signals under your ATT choice; never health or diet data	United States (SCCs)
Microsoft Clarity and Google Analytics	Product analytics — to understand usage and improve the app	App-usage events and device identifiers	United States (SCCs)

9. Health data

Your health and body metrics (height, weight, sex, date of birth or age, activity level, and calories consumed) and your dietary preferences and allergies are sensitive information. We collect and use them on the basis of your consent, and only to provide meal-planning features — to personalise meal suggestions and help plan your next meal within your nutrition and calorie needs, and to suggest allergen-free foods.

Your health and diet data is never used for advertising, is never shared with ad networks, and is never sold. Ingrevo does not use Apple HealthKit or Android Health Connect in this version of the app.

If you are a Washington State resident, or otherwise want to understand how we handle consumer health data, please see our Consumer Health Data Privacy Policy.

10. International transfers

Our application server and database are hosted on DigitalOcean in the European Union [TODO: confirm exact EU region], and our object storage is on Cloudflare R2 in the European Union. Some of our sub-processors operate in the United States, under Standard Contractual Clauses (SCCs) or equivalent safeguards.

Where personal information is disclosed to recipients outside your country, we take steps intended to ensure it remains protected. For individuals in New Zealand, this includes taking reasonable steps under Information Privacy Principle 12 so that overseas recipients protect your information with comparable safeguards. For individuals in Australia, we take reasonable steps under Australian Privacy Principle 8 in relation to overseas disclosures and remain accountable for how those recipients handle your information.

11. Data retention

• Account data — kept for the life of your account and erased within 30 days of deletion.
• Meal log — 5 years.
• AI food-correction rows — 365 days.
• Refresh tokens — about 30 days past expiry.
• Retained after deletion (anonymised where applicable) — consent events, subscription and financial records, and anonymous deletion feedback.

12. Security

We use technical and organisational measures to protect your information, including encryption in transit, access controls and need-to-know staff access, hashed authentication tokens, and salted hashing of IP address and user-agent in our consent ledger. No method of transmission or storage is completely secure, but we work to protect your information and to respond appropriately if a problem occurs.

13. Your rights

Your rights depend on where you live. In every case, you can contact us at support@ingrevo.app to exercise them.

New Zealand

Under the Privacy Act 2020 and its Information Privacy Principles, you can ask to access and correct your personal information. We take reasonable steps under IPP 12 before disclosing information to overseas recipients in the EU and US so that they protect it with comparable safeguards. You may complain to the Office of the Privacy Commissioner (OPC).

Australia

Under the Privacy Act 1988 and the Australian Privacy Principles, you can ask to access and correct your personal information. We remain accountable under APP 8 for overseas recipients in the EU and US. You may complain to the Office of the Australian Information Commissioner (OAIC).

India

Under the Digital Personal Data Protection Act 2023, you may give and withdraw consent, access and correct your personal data, seek erasure, nominate another individual to exercise your rights, and raise grievances. Individuals under 18 are treated as children and require verifiable parental consent [TODO: counsel], and we restrict advertising to them. Our Grievance Officer is Agrim Grover, Chief Executive Officer, reachable at support@ingrevo.app. You may also approach the Data Protection Board of India.

United States

Depending on your state (including California under the CCPA/CPRA, and Virginia, Colorado, and Connecticut, and comparable laws), you may have the right to know and access, delete, and correct your personal information, to limit the use of sensitive personal information, and to opt out of the sale or sharing of your personal information, including any "sharing" for advertising. We honour the Global Privacy Control (GPC) as an opt-out signal. The right to appeal a decision applies under Virginia, Colorado, and Connecticut-style laws (not the CCPA). Washington State residents should also see our Consumer Health Data Privacy Policy.

EU/EEA and UK

Under the GDPR and UK GDPR, you have the right to access, rectify, erase, restrict, and port your data, to object to certain processing, and to withdraw consent at any time (including for health and allergy data and for personalised advertising). You may complain to your supervisory authority. We will appoint an Article 27 EU/UK representative before EU go-live [TODO: appoint before EU go-live].

14. Children

Ingrevo is for users aged 16 and older only. We do not knowingly allow anyone under 16 to use the app. Where local law sets a higher age — for example, India's DPDP Act treats under-18s as children requiring verifiable parental consent — that higher requirement applies. If you believe a child has provided us with personal information, please contact us at support@ingrevo.app.

15. Our website

On our website at ingrevo.app, we use Google Analytics only after you consent through our cookie banner. For more detail on cookies and similar technologies, see our Cookie Policy.

16. Changes

We may update this Privacy Policy from time to time. When we make material changes, we will update the policy and, where appropriate, notify you in the app or by email. Please check back periodically for the latest version.

17. Contact

The controller responsible for your personal information is:

Ingrevo, a product of Nexora Labs Limited
52 Karepiro Drive, Stanmore Bay, Auckland 0932, New Zealand

For any privacy question or request, including to exercise your rights, email us at support@ingrevo.app. Individuals in India may contact our Grievance Officer, Agrim Grover, Chief Executive Officer, at the same address.