Ritovi Privacy Policy
DRAFT — not legal advice. Review with a lawyer before publishing. Last updated: [DATE]
Ritovi (“we”, “us”) is operated by [LEGAL NAME / COMPANY, ADDRESS, COUNTRY]. Contact for anything in this policy: [privacy@ritovi.com].
The short version
- You don’t need an account, and the app doesn’t ask for your name, email, phone number or location.
- If you join the waitlist on our website, we keep only your email address, to send you one message when Ritovi launches. Ask us and we delete it.
- When you scan a barcode, the barcode number goes to our server to look up the product.
- When you photograph a label, the photo goes to our server and is sent on to an AI service that reads the text on it. We do not keep the photo. The app keeps its own copy on your phone only, for 30 days, so you can look at it again; deleting the scan from History (or clearing History) deletes it immediately.
- Your scan history is saved only on your phone.
- We don’t sell your data, we don’t show ads, and the app has no advertising or analytics trackers.
- We do not ask for, and ask you not to send us, medication names, doses, symptoms or other health details.
What we collect and why
| What | When | Why | Kept where, how long |
|---|---|---|---|
| Barcode number you scan or type | Each barcode scan | To find the product and calculate the readings | Our server’s anonymous scan log, [RETENTION, e.g. 24 months] |
| Label photos you take or choose | Only when a barcode isn’t found or you choose “photograph the label” | To read the ingredients and nutrition table | Not stored by us. Sent to our AI reading providers (below) and then discarded. What was read from a label for an unknown barcode is saved as a product record once a second, separate photo of the same product agrees |
| What was read from the label (ingredients, nutrition numbers) and the readings produced | Each scan | To show you the result, to keep a product record so the next scan is instant, and to check the app is accurate | Our server, [RETENTION]. Not linked to you |
| Feedback you choose to send (“This result looks wrong”) and any note you type | Only if you tap it | To fix mistakes | Our server, [RETENTION]. Not linked to you. Please don’t put personal or health details in the note |
| Technical data (such as your IP address) | Whenever the app talks to our server | To deliver the service, prevent abuse and limit requests | Handled by our hosting provider’s standard logs; we do not use it to identify you |
| Email address | Only if you join the waitlist on ritovi.com | To tell you once when Ritovi is available | Our server, until launch plus [RETENTION]; deleted on request. Not shared or sold |
| Scan history | On your phone | So you can look back at past results | Only on your device. Delete it in the app (History → Clear history) or by deleting the app |
We do not link any of this to your name, an account, your device identifier or your contacts, because we don’t collect those.
Camera and photos
Ritovi asks for camera access to scan barcodes and photograph labels, and photo library access only for photos you choose. You can turn either off in your phone’s Settings; the app still works if you type a barcode.
Who we share information with (“service providers”)
We use these companies to run Ritovi. They process data for us, under their own terms:
- Railway — hosts our server and database. ([COUNTRY/REGION OF HOSTING, e.g. US])
- Google (Gemini API) — reads label photos. We use Google’s paid service, under which Google states it does not use your submitted content to train its models. [CONFIRM BEFORE PUBLISHING — see README, item 1]
- Anthropic (Claude API) — backup reader if the first is slow or fails. [CONFIRM CURRENT RETENTION TERMS — README, item 2]
- Open Food Facts — a public food database. Your barcode number is looked up there when we don’t already have the product. Their data is available under the Open Database Licence.
- Apple — distributes the app (App Store, TestFlight) and may give us crash or usage statistics in aggregate.
We may also disclose information if the law requires it. We don’t sell or “share” your information for advertising (as those terms are used in California law).
Where your data goes
Our providers may process data in the United States and other countries. Where the law requires it (for example Swiss or EU rules), we rely on the transfer safeguards those providers offer, such as standard contractual clauses. [LAWYER TO CONFIRM]
How long we keep it
Photos: not kept by us (the app deletes its on-phone copy after 30 days). Scan records and feedback: [RETENTION]. Product records built from public databases and label reads stay as long as they are useful for the service. Your on-device history stays until you delete it.
Your choices and rights
Because we hold no account and nothing that identifies you, we usually cannot tell which records are yours. You can still ask us at [privacy@ritovi.com] to access, correct or delete information about you, and we will help where we can identify it. Depending on where you live (for example Switzerland, the EU/UK, or California) you may have rights to access, correct, delete, restrict or port your data, to object to processing, and to complain to your data-protection authority. California residents: we do not sell or share personal information, and we won’t treat you differently for exercising your rights.
Children
Ritovi is not directed to children under [13 / 16 — LAWYER TO CONFIRM], and we do not knowingly collect their information. Contact us if you think a child has sent us something and we’ll delete it.
Health information
Ritovi gives food information — what protein is in a product and how complete it is. It is not medical advice and does not diagnose, treat or monitor any condition. We do not ask about medications or health conditions. If you include health details in a feedback note, we will delete them when we find them.
Security
Data travels to our server over encrypted connections. We limit what we collect so there is little to protect, but no system is perfectly secure.
Changes
If we change this policy in a meaningful way we will update the date above and, where the law requires, tell you in the app.
Contact
[LEGAL NAME], [ADDRESS] — [privacy@ritovi.com] [If required: EU/UK representative and Swiss representative details]